0009:Call ntdll.RtlAllocateHeap(01260000,00000000,00000022) ret=0066a6a4 0009:trace:heap:RtlAllocateHeap (0x1260000,00000003,00000022): returning 0x12d7a18 0009:Ret ntdll.RtlAllocateHeap() retval=012d7a18 ret=0066a6a4 and 0009:Call ntdll.RtlFreeHeap(01260000,00000000,012d6f98) ret=0066a65e 0009:trace:heap:RtlFreeHeap (0x1260000,00000003,0x12d6f98): returning TRUE 0009:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0066a65e