It's a dangerous idea to use flags NO_SERIALIZE with process default heap. 
It is used by OS  for many other things such as allocating memory for threads thus it's tricky to guarantee 
there is no race w/o locking. 

NO_SERIALIZE shrinks time from 8.3 sec to 8.0 sec for me. If we are to drop it, I'll use getProcessHeap.